Malware Analysis Report

2024-11-30 13:54

Sample ID 201112-d6g8g7gbgx
Target kv10.exe
SHA256 b412e06d880e1b2771a405d1db70d4f6935de16f5f7c9c61a12555ed9537f45f
Tags
qakbot notset tr01 1604404534 1604997522 banker persistence spyware stealer trojan
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V6

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

b412e06d880e1b2771a405d1db70d4f6935de16f5f7c9c61a12555ed9537f45f

Threat Level: Known bad

The file kv10.exe was found to be: Known bad.

Malicious Activity Summary

qakbot notset tr01 1604404534 1604997522 banker persistence spyware stealer trojan

Qakbot/Qbot

Executes dropped EXE

Reads user/profile data of web browsers

Loads dropped DLL

Drops Chrome extension

Adds Run key to start application

Modifies service

Drops file in Windows directory

Drops file in Program Files directory

Suspicious use of FindShellTrayWindow

Runs ping.exe

Modifies Internet Explorer settings

Checks processor information in registry

Discovers systems in the same network

Gathers network information

Runs net.exe

Suspicious use of SetWindowsHookEx

Suspicious behavior: EnumeratesProcesses

Suspicious behavior: MapViewOfSection

Suspicious use of WriteProcessMemory

Suspicious use of SendNotifyMessage

Suspicious use of AdjustPrivilegeToken

Creates scheduled task(s)

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2020-11-12 18:34

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2020-11-12 18:34

Reported

2020-11-12 19:04

Platform

win7v20201028

Max time kernel

1121s

Max time network

1731s

Command Line

"taskhost.exe"

Signatures

Qakbot/Qbot

trojan banker stealer qakbot

Reads user/profile data of web browsers

spyware

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-293278959-2699126792-324916226-1000\Software\Microsoft\Windows\CurrentVersion\Run\ybvolelep = "\"C:\\Users\\Admin\\AppData\\Roaming\\Microsoft\\Qhnoxt\\bftvmgcd.exe\"" C:\Windows\SysWOW64\explorer.exe N/A

Drops Chrome extension

Description Indicator Process Target
File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir1196_1833945520\CRX_INSTALL\_locales\th\messages.json C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir1196_1833945520\CRX_INSTALL\_locales\sv\messages.json C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir1196_1833945520\CRX_INSTALL\_locales\it\messages.json C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir1196_1833945520\CRX_INSTALL\_metadata\verified_contents.json C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir1196_1833945520\CRX_INSTALL\_locales\tr\messages.json C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir1196_1833945520\CRX_INSTALL\_locales\pt_BR\messages.json C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir1196_1833945520\CRX_INSTALL\_locales\hi\messages.json C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir1196_1833945520\CRX_INSTALL\_locales\da\messages.json C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir1196_1833945520\CRX_INSTALL\main.html C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir1196_1833945520\CRX_INSTALL\_locales\sl\messages.json C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir1196_1833945520\CRX_INSTALL\_locales\ru\messages.json C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir1196_1833945520\CRX_INSTALL\_locales\pt_PT\messages.json C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir1196_1833945520\CRX_INSTALL\_locales\ja\messages.json C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir1196_1833945520\CRX_INSTALL\_locales\es_419\messages.json C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir1196_1833945520\CRX_INSTALL\_locales\en_GB\messages.json C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir1196_1833945520\CRX_INSTALL\_locales\de\messages.json C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir1196_1833945520\CRX_INSTALL\_locales\pl\messages.json C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir1196_1833945520\CRX_INSTALL\_locales\et\messages.json C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir1196_1833945520\CRX_INSTALL\icon_128.png C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir1196_1833945520\CRX_INSTALL\_locales\zh_CN\messages.json C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir1196_1833945520\CRX_INSTALL\_locales\ro\messages.json C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir1196_1833945520\CRX_INSTALL\_locales\no\messages.json C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir1196_1833945520\CRX_INSTALL\_locales\hu\messages.json C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir1196_1833945520\CRX_INSTALL\_locales\fil\messages.json C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir1196_1833945520\CRX_INSTALL\_locales\fi\messages.json C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir1196_1833945520\CRX_INSTALL\_locales\es\messages.json C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir1196_1833945520\CRX_INSTALL\_locales\en_US\messages.json C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir1196_1833945520\CRX_INSTALL\_locales\ca\messages.json C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir1196_1833945520\CRX_INSTALL\icon_16.png C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir1196_1833945520\CRX_INSTALL\manifest.json C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir1196_1833945520\CRX_INSTALL\_locales\vi\messages.json C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir1196_1833945520\CRX_INSTALL\_locales\sr\messages.json C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir1196_1833945520\CRX_INSTALL\_locales\lv\messages.json C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir1196_1833945520\CRX_INSTALL\_locales\lt\messages.json C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir1196_1833945520\CRX_INSTALL\_locales\fr\messages.json C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir1196_1833945520\CRX_INSTALL\_locales\el\messages.json C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir1196_1833945520\CRX_INSTALL\main.js C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir1196_1833945520\CRX_INSTALL\_locales\zh_TW\messages.json C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir1196_1833945520\CRX_INSTALL\_locales\uk\messages.json C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir1196_1833945520\CRX_INSTALL\_locales\sk\messages.json C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir1196_1833945520\CRX_INSTALL\_locales\nl\messages.json C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir1196_1833945520\CRX_INSTALL\_locales\ms\messages.json C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir1196_1833945520\CRX_INSTALL\_locales\id\messages.json C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir1196_1833945520\CRX_INSTALL\_locales\cs\messages.json C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir1196_1833945520\CRX_INSTALL\_locales\bg\messages.json C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir1196_1833945520\CRX_INSTALL\_locales\ar\messages.json C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.10_0\_metadata\computed_hashes.json C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir1196_1833945520\CRX_INSTALL\_locales\ko\messages.json C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir1196_1833945520\CRX_INSTALL\_locales\he\messages.json C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Modifies service

persistence
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NapAgent\Shas C:\Windows\SysWOW64\ipconfig.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NapAgent\Qecs C:\Windows\SysWOW64\ipconfig.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification \??\c:\windows\installer\{ac76ba86-7ad7-1033-7b44-a90000000001}\sc_reader.exe C:\Windows\Explorer.EXE N/A

Checks processor information in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Mozilla Firefox\firefox.exe N/A

Creates scheduled task(s)

persistence
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\schtasks.exe N/A

Discovers systems in the same network

discovery
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\net.exe N/A

Gathers network information

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\ipconfig.exe N/A
N/A N/A C:\Windows\SysWOW64\netstat.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-293278959-2699126792-324916226-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-293278959-2699126792-324916226-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-293278959-2699126792-324916226-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff3d0000003d000000c3040000a2020000 C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-293278959-2699126792-324916226-1000\Software\Microsoft\Internet Explorer\Main C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-293278959-2699126792-324916226-1000\Software\Microsoft\Internet Explorer\GPU C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-293278959-2699126792-324916226-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-293278959-2699126792-324916226-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-293278959-2699126792-324916226-1000\Software\Microsoft\Internet Explorer\DomainSuggestion C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-293278959-2699126792-324916226-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\FileNames C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-293278959-2699126792-324916226-1000\Software\Microsoft\Internet Explorer\IETld\LowMic C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-293278959-2699126792-324916226-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-293278959-2699126792-324916226-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-293278959-2699126792-324916226-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-293278959-2699126792-324916226-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-293278959-2699126792-324916226-1000\Software\Microsoft\Internet Explorer\InternetRegistry C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-293278959-2699126792-324916226-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-293278959-2699126792-324916226-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\FileNames\ C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-293278959-2699126792-324916226-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "311975405" C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-293278959-2699126792-324916226-1000\Software\Microsoft\Internet Explorer\Main C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-293278959-2699126792-324916226-1000\Software\Microsoft\Internet Explorer\PageSetup C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-293278959-2699126792-324916226-1000\Software\Microsoft\Internet Explorer\Toolbar C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-293278959-2699126792-324916226-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-293278959-2699126792-324916226-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-293278959-2699126792-324916226-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-293278959-2699126792-324916226-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = d0f8ca9e2cb9d601 C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-293278959-2699126792-324916226-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-293278959-2699126792-324916226-1000\Software\Microsoft\Internet Explorer\LowRegistry C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-293278959-2699126792-324916226-1000\Software\Microsoft\Internet Explorer\IntelliForms C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-293278959-2699126792-324916226-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-293278959-2699126792-324916226-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{B7EB5CC1-251F-11EB-885E-DA18B1AB4242} = "0" C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-293278959-2699126792-324916226-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-293278959-2699126792-324916226-1000\Software\Microsoft\Internet Explorer\Main C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-293278959-2699126792-324916226-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-293278959-2699126792-324916226-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000033044fc40189d459fe40d0e3dcc9b660000000002000000000010660000000100002000000032d1ee6ec2bc6916d6f3df3d70495d4d75e582b5a02cfe9d2bb65ede25e34aed000000000e800000000200002000000019b4fe21a0f0aeaace3b351c058dc63b9c96409e13cb5275e1f009e5a0b6e8d620000000ee41b1f48871117850c2f5d62498f3a60899a529fd48a4aa60cf85c7de7d9ee5400000000bbf951cd682269090ff20a55708bf2c1eb0475c7399cb56ab1158450d7c97d6b7aae46b36ea3da5d379a4d7232568717bf6c9bb3d619ee169c5d9207d9c1fa9 C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-293278959-2699126792-324916226-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\FileNames\en-US = "en-US.1" C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-293278959-2699126792-324916226-1000\Software\Microsoft\Internet Explorer\Zoom C:\Program Files\Internet Explorer\iexplore.exe N/A

Runs net.exe

Runs ping.exe

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\ping.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\kv10.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\kv10.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\kv10.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\kv10.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Users\Admin\tlhadkvakbcpeunjmqetige.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\system32\taskhost.exe N/A
N/A N/A C:\Windows\system32\Dwm.exe N/A
N/A N/A C:\Windows\Explorer.EXE N/A
N/A N/A C:\Windows\system32\DllHost.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\kv10.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\system32\taskhost.exe N/A
N/A N/A C:\Windows\system32\Dwm.exe N/A
N/A N/A C:\Windows\Explorer.EXE N/A
N/A N/A C:\Windows\system32\DllHost.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\system32\taskhost.exe N/A
N/A N/A C:\Windows\system32\Dwm.exe N/A
N/A N/A C:\Windows\Explorer.EXE N/A
N/A N/A C:\Windows\system32\DllHost.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\system32\DllHost.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Program Files\Internet Explorer\iexplore.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\system32\DllHost.exe N/A
N/A N/A C:\Windows\system32\DllHost.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
N/A N/A C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Windows\SysWOW64\explorer.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\whoami.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\whoami.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\whoami.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\whoami.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\whoami.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\whoami.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\whoami.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\whoami.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\whoami.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\whoami.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\whoami.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\whoami.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\whoami.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\whoami.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\whoami.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\whoami.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\whoami.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\whoami.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\whoami.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\whoami.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\whoami.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\whoami.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\whoami.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\netstat.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeManageVolumePrivilege N/A C:\Windows\SysWOW64\explorer.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeShutdownPrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeShutdownPrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeShutdownPrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeShutdownPrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeShutdownPrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeShutdownPrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeShutdownPrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeShutdownPrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeShutdownPrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeShutdownPrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeShutdownPrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeShutdownPrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeShutdownPrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeShutdownPrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeShutdownPrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeShutdownPrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeShutdownPrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeShutdownPrivilege N/A C:\Windows\Explorer.EXE N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 748 wrote to memory of 1160 N/A C:\Users\Admin\AppData\Local\Temp\kv10.exe C:\Users\Admin\AppData\Local\Temp\kv10.exe
PID 748 wrote to memory of 1160 N/A C:\Users\Admin\AppData\Local\Temp\kv10.exe C:\Users\Admin\AppData\Local\Temp\kv10.exe
PID 748 wrote to memory of 1160 N/A C:\Users\Admin\AppData\Local\Temp\kv10.exe C:\Users\Admin\AppData\Local\Temp\kv10.exe
PID 748 wrote to memory of 1160 N/A C:\Users\Admin\AppData\Local\Temp\kv10.exe C:\Users\Admin\AppData\Local\Temp\kv10.exe
PID 748 wrote to memory of 1132 N/A C:\Users\Admin\AppData\Local\Temp\kv10.exe C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe
PID 748 wrote to memory of 1132 N/A C:\Users\Admin\AppData\Local\Temp\kv10.exe C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe
PID 748 wrote to memory of 1132 N/A C:\Users\Admin\AppData\Local\Temp\kv10.exe C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe
PID 748 wrote to memory of 1132 N/A C:\Users\Admin\AppData\Local\Temp\kv10.exe C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe
PID 748 wrote to memory of 1528 N/A C:\Users\Admin\AppData\Local\Temp\kv10.exe C:\Windows\SysWOW64\schtasks.exe
PID 748 wrote to memory of 1528 N/A C:\Users\Admin\AppData\Local\Temp\kv10.exe C:\Windows\SysWOW64\schtasks.exe
PID 748 wrote to memory of 1528 N/A C:\Users\Admin\AppData\Local\Temp\kv10.exe C:\Windows\SysWOW64\schtasks.exe
PID 748 wrote to memory of 1528 N/A C:\Users\Admin\AppData\Local\Temp\kv10.exe C:\Windows\SysWOW64\schtasks.exe
PID 1132 wrote to memory of 1452 N/A C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe
PID 1132 wrote to memory of 1452 N/A C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe
PID 1132 wrote to memory of 1452 N/A C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe
PID 1132 wrote to memory of 1452 N/A C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe
PID 1132 wrote to memory of 1728 N/A C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe C:\Windows\SysWOW64\explorer.exe
PID 1132 wrote to memory of 1728 N/A C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe C:\Windows\SysWOW64\explorer.exe
PID 1132 wrote to memory of 1728 N/A C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe C:\Windows\SysWOW64\explorer.exe
PID 1132 wrote to memory of 1728 N/A C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe C:\Windows\SysWOW64\explorer.exe
PID 1132 wrote to memory of 1728 N/A C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe C:\Windows\SysWOW64\explorer.exe
PID 948 wrote to memory of 560 N/A C:\Windows\system32\taskeng.exe C:\Users\Admin\AppData\Local\Temp\kv10.exe
PID 948 wrote to memory of 560 N/A C:\Windows\system32\taskeng.exe C:\Users\Admin\AppData\Local\Temp\kv10.exe
PID 948 wrote to memory of 560 N/A C:\Windows\system32\taskeng.exe C:\Users\Admin\AppData\Local\Temp\kv10.exe
PID 948 wrote to memory of 560 N/A C:\Windows\system32\taskeng.exe C:\Users\Admin\AppData\Local\Temp\kv10.exe
PID 1728 wrote to memory of 1236 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\whoami.exe
PID 1728 wrote to memory of 1236 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\whoami.exe
PID 1728 wrote to memory of 1236 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\whoami.exe
PID 1728 wrote to memory of 1236 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\whoami.exe
PID 1728 wrote to memory of 1892 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\cmd.exe
PID 1728 wrote to memory of 1892 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\cmd.exe
PID 1728 wrote to memory of 1892 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\cmd.exe
PID 1728 wrote to memory of 1892 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\cmd.exe
PID 1728 wrote to memory of 608 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\arp.exe
PID 1728 wrote to memory of 608 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\arp.exe
PID 1728 wrote to memory of 608 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\arp.exe
PID 1728 wrote to memory of 608 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\arp.exe
PID 1728 wrote to memory of 1460 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\ipconfig.exe
PID 1728 wrote to memory of 1460 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\ipconfig.exe
PID 1728 wrote to memory of 1460 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\ipconfig.exe
PID 1728 wrote to memory of 1460 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\ipconfig.exe
PID 1728 wrote to memory of 360 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\net.exe
PID 1728 wrote to memory of 360 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\net.exe
PID 1728 wrote to memory of 360 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\net.exe
PID 1728 wrote to memory of 360 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\net.exe
PID 1728 wrote to memory of 2020 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\nslookup.exe
PID 1728 wrote to memory of 2020 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\nslookup.exe
PID 1728 wrote to memory of 2020 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\nslookup.exe
PID 1728 wrote to memory of 2020 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\nslookup.exe
PID 1728 wrote to memory of 1088 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\net.exe
PID 1728 wrote to memory of 1088 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\net.exe
PID 1728 wrote to memory of 1088 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\net.exe
PID 1728 wrote to memory of 1088 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\net.exe
PID 1088 wrote to memory of 1824 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 1088 wrote to memory of 1824 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 1088 wrote to memory of 1824 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 1088 wrote to memory of 1824 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 1728 wrote to memory of 1092 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\route.exe
PID 1728 wrote to memory of 1092 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\route.exe
PID 1728 wrote to memory of 1092 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\route.exe
PID 1728 wrote to memory of 1092 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\route.exe
PID 1728 wrote to memory of 1056 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\netstat.exe
PID 1728 wrote to memory of 1056 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\netstat.exe
PID 1728 wrote to memory of 1056 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\netstat.exe
PID 1728 wrote to memory of 1056 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\netstat.exe
PID 1728 wrote to memory of 732 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\net.exe
PID 1728 wrote to memory of 732 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\net.exe
PID 1728 wrote to memory of 732 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\net.exe
PID 1728 wrote to memory of 732 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\net.exe
PID 732 wrote to memory of 1964 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 732 wrote to memory of 1964 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 732 wrote to memory of 1964 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 732 wrote to memory of 1964 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 1728 wrote to memory of 1332 N/A C:\Windows\SysWOW64\explorer.exe C:\Users\Admin\tlhadkvakbcpeunjmqetige.exe
PID 1728 wrote to memory of 1332 N/A C:\Windows\SysWOW64\explorer.exe C:\Users\Admin\tlhadkvakbcpeunjmqetige.exe
PID 1728 wrote to memory of 1332 N/A C:\Windows\SysWOW64\explorer.exe C:\Users\Admin\tlhadkvakbcpeunjmqetige.exe
PID 1728 wrote to memory of 1332 N/A C:\Windows\SysWOW64\explorer.exe C:\Users\Admin\tlhadkvakbcpeunjmqetige.exe
PID 1728 wrote to memory of 1944 N/A C:\Windows\SysWOW64\explorer.exe C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe
PID 1728 wrote to memory of 1944 N/A C:\Windows\SysWOW64\explorer.exe C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe
PID 1728 wrote to memory of 1944 N/A C:\Windows\SysWOW64\explorer.exe C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe
PID 1728 wrote to memory of 1944 N/A C:\Windows\SysWOW64\explorer.exe C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe
PID 1728 wrote to memory of 1848 N/A C:\Windows\SysWOW64\explorer.exe C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe
PID 1728 wrote to memory of 1848 N/A C:\Windows\SysWOW64\explorer.exe C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe
PID 1728 wrote to memory of 1848 N/A C:\Windows\SysWOW64\explorer.exe C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe
PID 1728 wrote to memory of 1848 N/A C:\Windows\SysWOW64\explorer.exe C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe
PID 1848 wrote to memory of 824 N/A C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe
PID 1848 wrote to memory of 824 N/A C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe
PID 1848 wrote to memory of 824 N/A C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe
PID 1848 wrote to memory of 824 N/A C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe
PID 1848 wrote to memory of 2016 N/A C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe C:\Windows\SysWOW64\explorer.exe
PID 1848 wrote to memory of 2016 N/A C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe C:\Windows\SysWOW64\explorer.exe
PID 1848 wrote to memory of 2016 N/A C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe C:\Windows\SysWOW64\explorer.exe
PID 1848 wrote to memory of 2016 N/A C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe C:\Windows\SysWOW64\explorer.exe
PID 1848 wrote to memory of 2016 N/A C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe C:\Windows\SysWOW64\explorer.exe
PID 2016 wrote to memory of 1076 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\explorer.exe
PID 2016 wrote to memory of 1076 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\explorer.exe
PID 2016 wrote to memory of 1076 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\explorer.exe
PID 2016 wrote to memory of 1076 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\explorer.exe
PID 2016 wrote to memory of 1076 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\explorer.exe
PID 2016 wrote to memory of 1076 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\explorer.exe
PID 2016 wrote to memory of 1004 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\explorer.exe
PID 2016 wrote to memory of 1004 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\explorer.exe
PID 2016 wrote to memory of 1004 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\explorer.exe
PID 2016 wrote to memory of 1004 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\explorer.exe
PID 2016 wrote to memory of 1004 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\explorer.exe
PID 2016 wrote to memory of 1004 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\explorer.exe
PID 1004 wrote to memory of 1056 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\ping.exe
PID 1004 wrote to memory of 1056 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\ping.exe
PID 1004 wrote to memory of 1056 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\ping.exe
PID 1004 wrote to memory of 1056 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\ping.exe
PID 1004 wrote to memory of 1056 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\ping.exe
PID 1004 wrote to memory of 1056 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\ping.exe
PID 1004 wrote to memory of 1056 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\ping.exe
PID 1056 wrote to memory of 1508 N/A C:\Windows\SysWOW64\ping.exe C:\Windows\SysWOW64\cmd.exe
PID 1056 wrote to memory of 1508 N/A C:\Windows\SysWOW64\ping.exe C:\Windows\SysWOW64\cmd.exe
PID 1056 wrote to memory of 1508 N/A C:\Windows\SysWOW64\ping.exe C:\Windows\SysWOW64\cmd.exe
PID 1056 wrote to memory of 1508 N/A C:\Windows\SysWOW64\ping.exe C:\Windows\SysWOW64\cmd.exe
PID 1056 wrote to memory of 860 N/A C:\Windows\SysWOW64\ping.exe C:\Windows\SysWOW64\cmd.exe
PID 1056 wrote to memory of 860 N/A C:\Windows\SysWOW64\ping.exe C:\Windows\SysWOW64\cmd.exe
PID 1056 wrote to memory of 860 N/A C:\Windows\SysWOW64\ping.exe C:\Windows\SysWOW64\cmd.exe
PID 1056 wrote to memory of 860 N/A C:\Windows\SysWOW64\ping.exe C:\Windows\SysWOW64\cmd.exe
PID 2016 wrote to memory of 996 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\explorer.exe
PID 2016 wrote to memory of 996 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\explorer.exe
PID 2016 wrote to memory of 996 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\explorer.exe
PID 2016 wrote to memory of 996 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\explorer.exe
PID 2016 wrote to memory of 996 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\explorer.exe
PID 2016 wrote to memory of 996 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\explorer.exe
PID 996 wrote to memory of 1116 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\system32\taskhost.exe
PID 996 wrote to memory of 1116 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\system32\taskhost.exe
PID 996 wrote to memory of 1116 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\system32\taskhost.exe
PID 996 wrote to memory of 1116 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\system32\taskhost.exe
PID 996 wrote to memory of 1176 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\system32\Dwm.exe
PID 996 wrote to memory of 1176 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\system32\Dwm.exe
PID 996 wrote to memory of 1176 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\system32\Dwm.exe
PID 996 wrote to memory of 1176 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\system32\Dwm.exe
PID 996 wrote to memory of 1252 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\Explorer.EXE
PID 996 wrote to memory of 1252 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\Explorer.EXE
PID 996 wrote to memory of 1252 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\Explorer.EXE
PID 996 wrote to memory of 1252 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\Explorer.EXE
PID 996 wrote to memory of 1560 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\system32\DllHost.exe
PID 996 wrote to memory of 1560 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\system32\DllHost.exe
PID 996 wrote to memory of 1560 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\system32\DllHost.exe
PID 996 wrote to memory of 1560 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\system32\DllHost.exe
PID 996 wrote to memory of 2016 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\explorer.exe
PID 996 wrote to memory of 2016 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\explorer.exe
PID 996 wrote to memory of 2016 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\explorer.exe
PID 996 wrote to memory of 2016 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\explorer.exe
PID 840 wrote to memory of 1132 N/A C:\Windows\system32\taskeng.exe C:\Users\Admin\AppData\Local\Temp\kv10.exe
PID 840 wrote to memory of 1132 N/A C:\Windows\system32\taskeng.exe C:\Users\Admin\AppData\Local\Temp\kv10.exe
PID 840 wrote to memory of 1132 N/A C:\Windows\system32\taskeng.exe C:\Users\Admin\AppData\Local\Temp\kv10.exe
PID 840 wrote to memory of 1132 N/A C:\Windows\system32\taskeng.exe C:\Users\Admin\AppData\Local\Temp\kv10.exe
PID 2016 wrote to memory of 2036 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\explorer.exe
PID 2016 wrote to memory of 2036 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\explorer.exe
PID 2016 wrote to memory of 2036 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\explorer.exe
PID 2016 wrote to memory of 2036 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\explorer.exe
PID 2016 wrote to memory of 2036 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\explorer.exe
PID 2016 wrote to memory of 2036 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\explorer.exe
PID 2036 wrote to memory of 1116 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\system32\taskhost.exe
PID 2036 wrote to memory of 1116 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\system32\taskhost.exe
PID 2036 wrote to memory of 1116 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\system32\taskhost.exe
PID 2036 wrote to memory of 1116 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\system32\taskhost.exe
PID 2036 wrote to memory of 1116 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\system32\taskhost.exe
PID 2036 wrote to memory of 1176 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\system32\Dwm.exe
PID 2036 wrote to memory of 1176 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\system32\Dwm.exe
PID 2036 wrote to memory of 1176 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\system32\Dwm.exe
PID 2036 wrote to memory of 1176 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\system32\Dwm.exe
PID 2036 wrote to memory of 1176 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\system32\Dwm.exe
PID 2036 wrote to memory of 1252 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\Explorer.EXE
PID 2036 wrote to memory of 1252 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\Explorer.EXE
PID 2036 wrote to memory of 1252 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\Explorer.EXE
PID 2036 wrote to memory of 1252 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\Explorer.EXE
PID 2036 wrote to memory of 1252 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\Explorer.EXE
PID 2036 wrote to memory of 1560 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\system32\DllHost.exe
PID 2036 wrote to memory of 1560 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\system32\DllHost.exe
PID 2036 wrote to memory of 1560 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\system32\DllHost.exe
PID 2036 wrote to memory of 1560 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\system32\DllHost.exe
PID 2036 wrote to memory of 1560 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\system32\DllHost.exe
PID 2036 wrote to memory of 2016 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\explorer.exe
PID 2036 wrote to memory of 2016 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\explorer.exe
PID 2036 wrote to memory of 2016 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\explorer.exe
PID 2036 wrote to memory of 2016 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\explorer.exe
PID 2036 wrote to memory of 2016 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\explorer.exe
PID 2016 wrote to memory of 1576 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\explorer.exe
PID 2016 wrote to memory of 1576 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\explorer.exe
PID 2016 wrote to memory of 1576 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\explorer.exe
PID 2016 wrote to memory of 1576 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\explorer.exe
PID 2016 wrote to memory of 1576 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\explorer.exe
PID 2016 wrote to memory of 1576 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\explorer.exe
PID 1576 wrote to memory of 1196 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1576 wrote to memory of 1196 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1576 wrote to memory of 1196 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1576 wrote to memory of 1196 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 684 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 684 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 684 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 1196 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 1196 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 1196 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 1196 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 1196 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 684 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 684 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 684 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 684 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 684 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1896 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1896 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1896 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1896 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1896 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1896 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1896 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1896 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1896 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1896 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1896 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1896 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1896 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1896 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1896 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1896 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1896 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1896 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1896 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1896 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1896 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1896 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1896 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1896 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1896 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1896 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1896 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1896 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1896 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1896 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1896 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1896 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1896 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1896 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1896 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1896 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1896 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1896 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1896 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1896 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1896 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 112 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 112 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 112 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 1896 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 1896 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 1896 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 1896 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 1896 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 112 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 112 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 112 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 112 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 112 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2024 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2024 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2024 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2024 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2024 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2024 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2024 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2024 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2024 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2024 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2024 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2024 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2024 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2024 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2024 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2024 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2024 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2024 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2024 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2024 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2024 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2024 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2024 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2024 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2024 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2024 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2024 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2024 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2024 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2024 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2024 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2024 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2024 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2024 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2024 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2024 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2024 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2024 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2024 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2024 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2024 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2024 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2024 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1752 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1752 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1752 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1752 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1752 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1752 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1752 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1752 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1752 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1752 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1752 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1752 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1752 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1752 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1752 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1752 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1752 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1752 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1752 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1752 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1752 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1752 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1752 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1752 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1752 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1752 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1752 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1752 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1752 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1752 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1752 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1752 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1752 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1752 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1752 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1752 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1752 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1752 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1752 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1752 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1752 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1752 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1752 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 660 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 660 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 660 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 660 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 660 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 660 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 660 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 660 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 660 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 660 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 660 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 660 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 660 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 660 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 660 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 660 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 660 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 660 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 660 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 660 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 660 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 660 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 660 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 660 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 660 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 660 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 660 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 660 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 660 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 660 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 660 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 660 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 660 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 660 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 660 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 660 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 660 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 660 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 660 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 2024 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 2024 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 2024 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 2024 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 2024 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 1752 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 1752 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 1752 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 1752 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 1752 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 660 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 660 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 660 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 660 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 660 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 2100 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\system32\DllHost.exe
PID 2036 wrote to memory of 2100 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\system32\DllHost.exe
PID 2036 wrote to memory of 2100 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\system32\DllHost.exe
PID 2036 wrote to memory of 2100 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\system32\DllHost.exe
PID 2036 wrote to memory of 2100 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\system32\DllHost.exe
PID 1576 wrote to memory of 2728 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1576 wrote to memory of 2728 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1576 wrote to memory of 2728 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1576 wrote to memory of 2728 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2728 wrote to memory of 2744 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2728 wrote to memory of 2744 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2728 wrote to memory of 2744 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1576 wrote to memory of 2792 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1576 wrote to memory of 2792 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1576 wrote to memory of 2792 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1576 wrote to memory of 2792 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2792 wrote to memory of 2804 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2792 wrote to memory of 2804 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2792 wrote to memory of 2804 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2792 wrote to memory of 2804 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2792 wrote to memory of 2804 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2792 wrote to memory of 2804 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2792 wrote to memory of 2804 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2792 wrote to memory of 2804 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2792 wrote to memory of 2804 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2792 wrote to memory of 2804 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2036 wrote to memory of 2792 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2036 wrote to memory of 2792 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2036 wrote to memory of 2792 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2036 wrote to memory of 2792 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2036 wrote to memory of 2792 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2036 wrote to memory of 2804 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2036 wrote to memory of 2804 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2036 wrote to memory of 2804 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2036 wrote to memory of 2804 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2036 wrote to memory of 2804 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1576 wrote to memory of 2644 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1576 wrote to memory of 2644 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1576 wrote to memory of 2644 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1576 wrote to memory of 2644 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2644 wrote to memory of 2664 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2644 wrote to memory of 2664 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2644 wrote to memory of 2664 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2644 wrote to memory of 2664 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2644 wrote to memory of 2664 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2644 wrote to memory of 2664 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2644 wrote to memory of 2664 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2644 wrote to memory of 2664 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2644 wrote to memory of 2664 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2644 wrote to memory of 2664 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2036 wrote to memory of 2644 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2036 wrote to memory of 2644 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2036 wrote to memory of 2644 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2036 wrote to memory of 2644 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2036 wrote to memory of 2644 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2036 wrote to memory of 2664 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2036 wrote to memory of 2664 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2036 wrote to memory of 2664 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2036 wrote to memory of 2664 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2036 wrote to memory of 2664 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1576 wrote to memory of 2236 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Internet Explorer\iexplore.exe
PID 1576 wrote to memory of 2236 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Internet Explorer\iexplore.exe
PID 1576 wrote to memory of 2236 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Internet Explorer\iexplore.exe
PID 1576 wrote to memory of 2236 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Internet Explorer\iexplore.exe
PID 2036 wrote to memory of 2236 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Internet Explorer\iexplore.exe
PID 2036 wrote to memory of 2236 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Internet Explorer\iexplore.exe
PID 2036 wrote to memory of 2236 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Internet Explorer\iexplore.exe
PID 2036 wrote to memory of 2236 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Internet Explorer\iexplore.exe
PID 2036 wrote to memory of 2236 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Internet Explorer\iexplore.exe
PID 2804 wrote to memory of 2280 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 2280 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 2280 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1196 wrote to memory of 660 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2344 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2344 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2344 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2344 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2344 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2344 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2344 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2344 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2344 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2344 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2344 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2344 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2344 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2344 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2344 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2344 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2344 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2344 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2344 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2344 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2344 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2344 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2344 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2344 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2344 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2344 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2344 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2344 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2344 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2344 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2344 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2344 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2344 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2344 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2344 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2344 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2344 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2344 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2344 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2344 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2344 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2344 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2344 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2400 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2400 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2400 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2400 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2400 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2400 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2400 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2400 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2400 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2400 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2400 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2400 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2400 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2400 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2400 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2400 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2400 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2400 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2400 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2400 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2400 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2400 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2400 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2400 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2400 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2400 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2400 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2400 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2400 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2400 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2400 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2400 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2400 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2400 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2400 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2400 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2236 wrote to memory of 2432 N/A C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
PID 2236 wrote to memory of 2432 N/A C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
PID 2236 wrote to memory of 2432 N/A C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
PID 2236 wrote to memory of 2432 N/A C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
PID 1196 wrote to memory of 2400 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2400 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2400 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2400 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2400 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2464 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 2280 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2036 wrote to memory of 2280 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2036 wrote to memory of 2280 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2036 wrote to memory of 2280 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2036 wrote to memory of 2280 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2036 wrote to memory of 2344 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 2344 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 2344 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 2344 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 2344 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 2400 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 2400 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 2400 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 2400 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 2400 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2100 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2100 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2100 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 2432 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
PID 2036 wrote to memory of 2432 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
PID 2036 wrote to memory of 2432 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
PID 2036 wrote to memory of 2432 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
PID 2036 wrote to memory of 2432 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
PID 1196 wrote to memory of 2100 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2100 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2100 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2100 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2100 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2100 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2100 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2100 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2100 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2100 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2100 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2100 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2100 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2100 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2100 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2100 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2100 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2100 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2100 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2100 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2100 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2100 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2100 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2100 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2100 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2100 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2100 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2100 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2100 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2100 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2100 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2100 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2100 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2100 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2100 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2100 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 2464 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 2464 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 2464 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 2464 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 2464 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2100 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2100 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2100 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2100 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 2532 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 2532 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 2532 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 2532 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 2532 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 2580 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 2580 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 2580 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 2580 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 2580 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 2788 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 2788 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 2788 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 2788 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 2788 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 2100 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 2100 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 2100 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 2100 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 2100 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2664 wrote to memory of 2556 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2664 wrote to memory of 2556 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2664 wrote to memory of 2556 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2036 wrote to memory of 2556 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2036 wrote to memory of 2556 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2036 wrote to memory of 2556 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2036 wrote to memory of 2556 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2036 wrote to memory of 2556 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1196 wrote to memory of 2636 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2636 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2636 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2636 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2636 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2636 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2636 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2636 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2636 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2636 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2636 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2636 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2636 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2636 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2636 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2636 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2636 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2636 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2636 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2636 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2636 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2636 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2636 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2636 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2636 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2636 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2636 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2636 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2636 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2636 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2636 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2636 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2636 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2636 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2636 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2636 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2636 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2636 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2636 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2636 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2636 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2036 wrote to memory of 2592 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\system32\DllHost.exe
PID 2036 wrote to memory of 2592 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\system32\DllHost.exe
PID 2036 wrote to memory of 2592 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\system32\DllHost.exe
PID 2036 wrote to memory of 2592 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\system32\DllHost.exe
PID 2036 wrote to memory of 2592 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\system32\DllHost.exe
PID 1576 wrote to memory of 2652 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Internet Explorer\iexplore.exe
PID 1576 wrote to memory of 2652 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Internet Explorer\iexplore.exe
PID 1576 wrote to memory of 2652 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Internet Explorer\iexplore.exe
PID 1576 wrote to memory of 2652 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files\Internet Explorer\iexplore.exe
PID 2236 wrote to memory of 3248 N/A C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
PID 2236 wrote to memory of 3248 N/A C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
PID 2236 wrote to memory of 3248 N/A C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
PID 2236 wrote to memory of 3248 N/A C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
PID 1576 wrote to memory of 3404 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\cmd.exe
PID 1576 wrote to memory of 3404 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\cmd.exe
PID 1576 wrote to memory of 3404 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\cmd.exe
PID 1576 wrote to memory of 3404 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\cmd.exe
PID 2036 wrote to memory of 3248 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
PID 2036 wrote to memory of 3248 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
PID 2036 wrote to memory of 3248 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
PID 2036 wrote to memory of 3248 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
PID 2036 wrote to memory of 3248 N/A C:\Windows\SysWOW64\explorer.exe C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
PID 2036 wrote to memory of 3404 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\cmd.exe
PID 2036 wrote to memory of 3404 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\cmd.exe
PID 2036 wrote to memory of 3404 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\cmd.exe
PID 2036 wrote to memory of 3404 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\cmd.exe
PID 2036 wrote to memory of 3404 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\cmd.exe
PID 2804 wrote to memory of 3796 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3796 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3796 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3796 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3796 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3796 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3796 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3796 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3796 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3796 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3796 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3796 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3796 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3796 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3796 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3796 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3796 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3796 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3796 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3796 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3796 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3796 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3796 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3796 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3796 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3796 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3796 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3796 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3796 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3796 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3796 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3796 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3796 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3796 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3796 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3796 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3796 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3796 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3796 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3796 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3796 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3796 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3796 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3796 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2016 wrote to memory of 3424 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\explorer.exe
PID 2016 wrote to memory of 3424 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\explorer.exe
PID 2016 wrote to memory of 3424 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\explorer.exe
PID 2016 wrote to memory of 3424 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\explorer.exe
PID 2016 wrote to memory of 3424 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\explorer.exe
PID 1196 wrote to memory of 3540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2016 wrote to memory of 3424 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\explorer.exe
PID 2804 wrote to memory of 3748 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3748 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3748 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3748 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3748 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3748 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3748 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3748 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3748 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3748 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3748 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3748 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3748 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3748 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3748 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3748 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3748 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3748 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3748 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3748 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3748 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3748 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3748 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3748 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3748 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3748 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3748 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3748 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3748 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3748 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3748 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3748 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3748 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3748 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3748 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3748 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3748 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3748 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3748 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3748 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3748 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3748 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3748 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2804 wrote to memory of 3748 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1576 wrote to memory of 3036 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\cmd.exe
PID 1576 wrote to memory of 3036 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\cmd.exe
PID 1576 wrote to memory of 3036 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\cmd.exe
PID 1576 wrote to memory of 3036 N/A C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\cmd.exe
PID 1196 wrote to memory of 2880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3240 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3240 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3240 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3240 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3240 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3240 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3240 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3240 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3240 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3240 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3240 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3240 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3240 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3240 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3240 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3240 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3240 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3240 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3240 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3240 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3240 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3240 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3240 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3240 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3240 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3240 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3240 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3240 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3240 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3240 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3240 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3240 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3240 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3240 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3240 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3240 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3240 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3240 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3240 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3240 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3240 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3296 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3296 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3296 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3296 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3296 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3296 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3296 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3296 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3296 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3296 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3296 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3296 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3296 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3296 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3296 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3296 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3296 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3296 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3296 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3296 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3296 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3296 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3296 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3296 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3296 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3296 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3296 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3296 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3296 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3296 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3296 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3296 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3296 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3296 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3296 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3296 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3296 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3296 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3296 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3296 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3296 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2828 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2828 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2828 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2828 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2828 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2828 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2828 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2828 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2828 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2828 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2828 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2828 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2828 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2828 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2828 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2828 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2828 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2828 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2828 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2828 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2828 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2828 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2828 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2828 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2828 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2828 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2828 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2828 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2828 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2828 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2828 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2828 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2828 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2828 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2828 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2828 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2828 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2828 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2828 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2828 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2828 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2400 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\86.0.4240.111\Installer\chrmstp.exe
PID 1196 wrote to memory of 2400 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\86.0.4240.111\Installer\chrmstp.exe
PID 1196 wrote to memory of 2400 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\86.0.4240.111\Installer\chrmstp.exe
PID 1196 wrote to memory of 2796 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2796 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2796 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1908 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1908 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1908 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3616 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3616 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3616 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3616 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3616 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3616 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3616 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3616 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3616 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3616 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3616 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3616 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3616 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3616 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3616 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3616 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3616 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3616 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3616 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3616 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3616 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3616 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3616 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3616 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3616 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3616 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3616 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3616 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3616 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3616 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3616 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3616 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3616 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3616 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3616 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3616 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3616 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3616 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3616 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3616 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3616 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3712 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3712 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3712 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3712 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3712 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3712 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3712 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3712 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3712 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3712 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3712 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3712 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3712 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3712 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3712 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3712 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3712 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3712 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3712 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3712 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3712 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3712 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3712 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3712 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3712 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3712 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3712 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3712 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3712 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3712 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3712 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3712 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3712 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3712 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3712 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3712 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3712 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3712 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3712 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3712 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3712 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3940 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3940 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3940 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3940 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3940 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3940 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3940 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3940 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3940 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3940 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3940 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3940 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3940 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3940 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3940 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3940 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3940 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3940 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3940 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3940 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3940 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3940 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3940 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3940 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3940 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3940 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3940 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3940 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3940 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3940 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3940 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3940 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3940 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3940 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3940 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3940 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3940 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3940 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3940 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3940 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3940 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2000 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2000 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2000 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2000 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2000 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2000 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2000 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2000 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2000 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2000 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2000 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2000 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2000 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2000 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2000 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2000 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2000 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2000 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2000 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2000 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2000 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2000 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2000 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2000 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2000 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2000 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2000 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2000 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2000 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2000 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2000 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2000 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2000 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2000 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2000 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2000 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2000 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2000 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2000 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2000 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2000 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3288 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3288 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3288 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3288 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3288 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3288 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3288 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3288 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3288 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3288 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3288 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3288 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3288 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3288 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3288 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3288 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3288 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3288 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3288 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3288 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3288 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3288 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3288 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3288 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3288 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3288 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3288 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3288 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3288 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3288 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3288 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3288 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3288 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3288 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3288 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3288 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3288 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3288 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3288 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3288 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3288 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 3104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2104 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1376 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1376 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1376 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1376 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1376 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1376 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1376 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1376 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1376 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1376 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1376 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1376 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1376 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1376 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1376 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1376 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1376 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1376 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1376 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1376 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1376 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1376 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1376 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1376 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1376 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1376 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1376 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1376 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1376 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1376 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1376 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1376 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1376 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1376 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1376 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1376 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1376 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1376 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1376 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1376 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 1376 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 4008 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 4008 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 4008 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 4008 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 4008 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 4008 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 4008 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 4008 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 4008 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 4008 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 4008 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 4008 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 4008 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 4008 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 4008 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 4008 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 4008 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 4008 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 4008 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 4008 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 4008 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 4008 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 4008 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 4008 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 4008 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 4008 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 4008 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 4008 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 4008 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 4008 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 4008 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 4008 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 4008 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 4008 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 4008 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 4008 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 4008 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 4008 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 4008 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 4008 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 4008 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2132 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2132 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2132 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2132 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2132 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2132 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2132 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2132 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2132 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2132 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2132 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2132 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2132 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2132 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2132 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2132 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2132 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2132 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2132 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2132 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2132 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2132 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2132 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2132 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2132 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2132 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2132 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2132 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2132 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2132 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2132 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2132 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2132 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2132 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2132 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2132 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2132 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2132 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2132 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2132 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1196 wrote to memory of 2132 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe

Processes

C:\Windows\system32\taskhost.exe

"taskhost.exe"

C:\Windows\system32\Dwm.exe

"C:\Windows\system32\Dwm.exe"

C:\Windows\Explorer.EXE

C:\Windows\Explorer.EXE

C:\Users\Admin\AppData\Local\Temp\kv10.exe

"C:\Users\Admin\AppData\Local\Temp\kv10.exe"

C:\Users\Admin\AppData\Local\Temp\kv10.exe

C:\Users\Admin\AppData\Local\Temp\kv10.exe /C

C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe

C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe

C:\Windows\SysWOW64\schtasks.exe

"C:\Windows\system32\schtasks.exe" /Create /RU "NT AUTHORITY\SYSTEM" /tn fhftxdxg /tr "\"C:\Users\Admin\AppData\Local\Temp\kv10.exe\" /I fhftxdxg" /SC ONCE /Z /ST 19:33 /ET 19:45

C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe

C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe /C

C:\Windows\SysWOW64\explorer.exe

C:\Windows\SysWOW64\explorer.exe

C:\Windows\system32\taskeng.exe

taskeng.exe {85655635-F0DB-4445-8EB4-FE2655C49B7E} S-1-5-18:NT AUTHORITY\System:Service:

C:\Users\Admin\AppData\Local\Temp\kv10.exe

C:\Users\Admin\AppData\Local\Temp\kv10.exe /I fhftxdxg

C:\Windows\SysWOW64\whoami.exe

whoami /all

C:\Windows\SysWOW64\cmd.exe

cmd /c set

C:\Windows\SysWOW64\arp.exe

arp -a

C:\Windows\SysWOW64\ipconfig.exe

ipconfig /all

C:\Windows\SysWOW64\net.exe

net view /all

C:\Windows\SysWOW64\nslookup.exe

nslookup -querytype=ALL -timeout=10 _ldap._tcp.dc._msdcs.WORKGROUP

C:\Windows\SysWOW64\net.exe

net share

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 share

C:\Windows\SysWOW64\route.exe

route print

C:\Windows\SysWOW64\netstat.exe

netstat -nao

C:\Windows\SysWOW64\net.exe

net localgroup

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 localgroup

C:\Windows\system32\msiexec.exe

C:\Windows\system32\msiexec.exe /V

C:\Windows\system32\DllHost.exe

C:\Windows\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}

C:\Users\Admin\tlhadkvakbcpeunjmqetige.exe

"C:\Users\Admin\tlhadkvakbcpeunjmqetige.exe" /W

C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe

"C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe" /W

C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe

C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe

C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe

C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe /C

C:\Windows\SysWOW64\explorer.exe

C:\Windows\SysWOW64\explorer.exe

C:\Windows\SysWOW64\explorer.exe

C:\Windows\SysWOW64\explorer.exe

C:\Windows\SysWOW64\explorer.exe

C:\Windows\SysWOW64\explorer.exe

C:\Windows\SysWOW64\ping.exe

C:\Windows\SysWOW64\ping.exe -t 127.0.0.1

C:\Windows\SysWOW64\cmd.exe

cmd.exe /c "rmdir /S /Q "C:\Users\Admin\EmailStorage_TUICJFPF-Admin_1605210130""

C:\Windows\SysWOW64\cmd.exe

cmd.exe /c rmdir /S /Q "C:\Users\Admin\EmailStorage_TUICJFPF-Admin_1605210130"

C:\Windows\SysWOW64\explorer.exe

C:\Windows\SysWOW64\explorer.exe

C:\Windows\system32\taskeng.exe

taskeng.exe {7EAAB344-D005-4C95-932B-35EF2902DE60} S-1-5-18:NT AUTHORITY\System:Service:

C:\Users\Admin\AppData\Local\Temp\kv10.exe

C:\Users\Admin\AppData\Local\Temp\kv10.exe /I fhftxdxg

C:\Windows\SysWOW64\explorer.exe

C:\Windows\SysWOW64\explorer.exe

C:\Windows\SysWOW64\explorer.exe

C:\Windows\SysWOW64\explorer.exe

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" http://a.strandsglobal.com/redir_chrome.html

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=86.0.4240.111 --initial-client-data=0xbc,0xc0,0xc4,0x90,0xc8,0x7fef6a96e00,0x7fef6a96e10,0x7fef6a96e20

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1088,10283675490902903614,2724949351601097612,131072 --gpu-preferences=MAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAQAAAAAAAAAAAAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAA= --mojo-platform-channel-handle=1120 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1088,10283675490902903614,2724949351601097612,131072 --lang=en-US --service-sandbox-type=network --mojo-platform-channel-handle=1272 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1088,10283675490902903614,2724949351601097612,131072 --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1956 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1088,10283675490902903614,2724949351601097612,131072 --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=4 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1964 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1088,10283675490902903614,2724949351601097612,131072 --lang=en-US --extension-process --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2480 /prefetch:1

C:\Windows\system32\DllHost.exe

C:\Windows\system32\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" https://en.wikipedia.org/wiki/Google_Chrome

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=86.0.4240.111 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fef6a96e00,0x7fef6a96e10,0x7fef6a96e20

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" http://a.strandsglobal.com/redir_ff.html

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" http://a.strandsglobal.com/redir_ff.html

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" https://www.mozilla.org/en-US/firefox/new/

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" https://www.mozilla.org/en-US/firefox/new/

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe" http://a.strandsglobal.com/redir_ie.html

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2804.0.1241448328\1346151935" -parentBuildID 20200403170909 -prefsHandle 1204 -prefMapHandle 1196 -prefsLen 1 -prefMapSize 219537 -appdir "C:\Program Files\Mozilla Firefox\browser" - 2804 "\\.\pipe\gecko-crash-server-pipe.2804" 1280 gpu

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1088,10283675490902903614,2724949351601097612,131072 --lang=en-US --extension-process --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2516 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1088,10283675490902903614,2724949351601097612,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2528 /prefetch:8

C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE

"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2236 CREDAT:275457 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1088,10283675490902903614,2724949351601097612,131072 --lang=en-US --extension-process --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2540 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1088,10283675490902903614,2724949351601097612,131072 --lang=en-US --extension-process --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2548 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1088,10283675490902903614,2724949351601097612,131072 --gpu-preferences=MAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAQAAAAAAAAAAAAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAA= --use-gl=swiftshader-webgl --mojo-platform-channel-handle=2928 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1088,10283675490902903614,2724949351601097612,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1436 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1088,10283675490902903614,2724949351601097612,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3056 /prefetch:1

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2664.0.29283604\1845237362" -parentBuildID 20200403170909 -prefsHandle 1136 -prefMapHandle 1120 -prefsLen 1 -prefMapSize 214080 -appdir "C:\Program Files\Mozilla Firefox\browser" - 2664 "\\.\pipe\gecko-crash-server-pipe.2664" 1220 gpu

C:\Windows\system32\DllHost.exe

C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1088,10283675490902903614,2724949351601097612,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=3776 /prefetch:8

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe" http://a.strandsglobal.com/redir_ie.html

C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE

"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2236 CREDAT:209930 /prefetch:2

C:\Windows\SysWOW64\cmd.exe

cmd.exe /C start microsoft-edge:http://a.strandsglobal.com/redir_ie.html

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2804.3.962797603\593932514" -childID 1 -isForBrowser -prefsHandle 1616 -prefMapHandle 1740 -prefsLen 122 -prefMapSize 219537 -parentBuildID 20200403170909 -appdir "C:\Program Files\Mozilla Firefox\browser" - 2804 "\\.\pipe\gecko-crash-server-pipe.2804" 1776 tab

C:\Windows\SysWOW64\explorer.exe

C:\Windows\SysWOW64\explorer.exe

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1088,10283675490902903614,2724949351601097612,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2508 /prefetch:8

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2804.13.1079957723\1880348539" -childID 2 -isForBrowser -prefsHandle 2496 -prefMapHandle 2492 -prefsLen 989 -prefMapSize 219537 -parentBuildID 20200403170909 -appdir "C:\Program Files\Mozilla Firefox\browser" - 2804 "\\.\pipe\gecko-crash-server-pipe.2804" 2556 tab

C:\Windows\SysWOW64\cmd.exe

cmd.exe /C start microsoft-edge: https://www.msn.com

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1088,10283675490902903614,2724949351601097612,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2940 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1088,10283675490902903614,2724949351601097612,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1320 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1088,10283675490902903614,2724949351601097612,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=3744 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1088,10283675490902903614,2724949351601097612,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=3740 /prefetch:8

C:\Program Files\Google\Chrome\Application\86.0.4240.111\Installer\chrmstp.exe

"C:\Program Files\Google\Chrome\Application\86.0.4240.111\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --force-configure-user-settings

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1088,10283675490902903614,2724949351601097612,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2836 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1088,10283675490902903614,2724949351601097612,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=732 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1088,10283675490902903614,2724949351601097612,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3248 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1088,10283675490902903614,2724949351601097612,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1688 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1088,10283675490902903614,2724949351601097612,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2492 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1088,10283675490902903614,2724949351601097612,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=3052 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1088,10283675490902903614,2724949351601097612,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2684 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1088,10283675490902903614,2724949351601097612,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1964 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1088,10283675490902903614,2724949351601097612,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=3360 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1088,10283675490902903614,2724949351601097612,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4296 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1088,10283675490902903614,2724949351601097612,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2652 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1088,10283675490902903614,2724949351601097612,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=3096 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1088,10283675490902903614,2724949351601097612,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4316 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1088,10283675490902903614,2724949351601097612,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4368 /prefetch:8

Network

Country Destination Domain Proto
N/A 8.8.8.8:53 8.8.8.8.in-addr.arpa udp
N/A 8.8.8.8:53 _ldap._tcp.dc._msdcs.WORKGROUP udp
N/A 8.8.8.8:53 _ldap._tcp.dc._msdcs.WORKGROUP udp
N/A 8.8.8.8:53 ocsp.verisign.com udp
N/A 23.46.123.27:80 ocsp.verisign.com tcp
N/A 86.248.30.56:2222 86.248.30.56 tcp
N/A 8.8.8.8:53 www.download.windowsupdate.com udp
N/A 86.248.30.56:2222 86.248.30.56 tcp
N/A 86.248.30.56:2222 86.248.30.56 tcp
N/A 86.248.30.56:2222 86.248.30.56 tcp
N/A 8.8.8.8:53 crl.verisign.com udp
N/A 86.248.30.56:2222 86.248.30.56 tcp
N/A 86.248.30.56:2222 86.248.30.56 tcp
N/A 86.248.30.56:2222 86.248.30.56 tcp
N/A 8.8.8.8:53 www.download.windowsupdate.com udp
N/A 86.248.30.56:2222 86.248.30.56 tcp
N/A 86.248.30.56:2222 86.248.30.56 tcp
N/A 86.248.30.56:2222 86.248.30.56 tcp
N/A 86.248.30.56:2222 86.248.30.56 tcp
N/A 8.8.8.8:53 www.download.windowsupdate.com udp
N/A 86.248.30.56:2222 86.248.30.56 tcp
N/A 10.7.0.30:5355 udp
N/A 10.7.0.22:5355 udp
N/A 10.7.0.11:5355 udp
N/A 10.7.0.35:5355 udp
N/A 10.7.0.24:5355 udp
N/A 10.7.0.15:5355 udp
N/A 10.7.0.26:5355 udp
N/A 10.7.0.10:5355 udp
N/A 86.248.30.56:2222 86.248.30.56 tcp
N/A 8.8.8.8:53 www.download.windowsupdate.com udp
N/A 86.248.30.56:2222 86.248.30.56 tcp
N/A 86.248.30.56:2222 86.248.30.56 tcp
N/A 86.248.30.56:2222 86.248.30.56 tcp
N/A 86.248.30.56:2222 86.248.30.56 tcp
N/A 86.248.30.56:2222 86.248.30.56 tcp
N/A 86.248.30.56:2222 86.248.30.56 tcp
N/A 8.8.8.8:53 www.download.windowsupdate.com udp
N/A 86.248.30.56:2222 86.248.30.56 tcp
N/A 8.8.8.8:53 clientservices.googleapis.com udp
N/A 216.58.211.99:443 clientservices.googleapis.com tcp
N/A 8.8.8.8:53 a.strandsglobal.com udp
N/A 8.8.8.8:53 redirector.gvt1.com udp
N/A 8.8.8.8:53 clients2.google.com udp
N/A 216.58.208.110:443 redirector.gvt1.com tcp
N/A 216.58.214.14:443 clients2.google.com tcp
N/A 89.105.198.119:80 a.strandsglobal.com tcp
N/A 89.105.198.119:80 a.strandsglobal.com tcp
N/A 239.255.255.250:1900 udp
N/A 8.8.8.8:53 r2---sn-q4fl6nlz.gvt1.com udp
N/A 74.125.1.167:443 r2---sn-q4fl6nlz.gvt1.com tcp
N/A 8.8.8.8:53 accounts.google.com udp
N/A 216.58.208.109:443 accounts.google.com tcp
N/A 8.8.8.8:53 dns.google udp
N/A 8.8.8.8:53 dns.google udp
N/A 8.8.4.4:443 dns.google tcp
N/A 8.8.8.8:443 dns.google tcp
N/A 8.8.8.8:443 dns.google tcp
N/A 8.8.8.8:443 dns.google udp
N/A 172.217.20.99:443 tcp
N/A 208.80.154.224:443 tcp
N/A 208.80.154.224:443 tcp
N/A 127.0.0.1:52601 tcp
N/A 8.8.8.8:53 dns.google udp
N/A 8.8.8.8:53 dns.google udp
N/A 172.217.17.33:443 tcp
N/A 208.80.154.240:443 tcp
N/A 208.80.154.240:443 tcp
N/A 208.80.154.240:443 tcp
N/A 208.80.154.240:443 tcp
N/A 208.80.154.240:443 tcp
N/A 208.80.154.240:443 tcp
N/A 89.105.198.119:80 a.strandsglobal.com tcp
N/A 89.105.198.119:80 a.strandsglobal.com tcp
N/A 127.0.0.1:52979 tcp
N/A 216.58.214.14:443 clients2.google.com udp
N/A 216.58.214.10:443 tcp
N/A 89.105.198.119:80 a.strandsglobal.com tcp
N/A 89.105.198.119:80 a.strandsglobal.com tcp
N/A 127.0.0.1:53590 tcp
N/A 86.248.30.56:2222 86.248.30.56 tcp
N/A 8.8.4.4:443 dns.google udp
N/A 172.217.20.67:443 tcp
N/A 86.248.30.56:2222 86.248.30.56 tcp
N/A 89.105.198.119:80 a.strandsglobal.com tcp
N/A 8.8.8.8:53 dns.google udp
N/A 8.8.8.8:53 dns.google udp
N/A 89.105.198.119:80 a.strandsglobal.com tcp
N/A 89.105.198.119:80 a.strandsglobal.com tcp
N/A 89.105.198.119:80 a.strandsglobal.com tcp
N/A 89.105.198.119:80 a.strandsglobal.com tcp
N/A 8.8.8.8:53 dns.google udp
N/A 13.227.209.129:443 firefox.settings.services.mozilla.com tcp
N/A 8.8.8.8:53 dns.google udp
N/A 8.8.8.8:53 dns.google udp
N/A 89.105.198.119:80 a.strandsglobal.com tcp
N/A 89.105.198.119:80 a.strandsglobal.com tcp
N/A 8.8.8.8:53 dns.google udp
N/A 13.227.209.85:443 content-signature-2.cdn.mozilla.net tcp
N/A 8.8.8.8:53 dns.google udp
N/A 8.8.8.8:53 dns.google udp
N/A 89.105.198.119:80 a.strandsglobal.com tcp
N/A 89.105.198.119:80 a.strandsglobal.com tcp
N/A 8.8.8.8:53 dns.google udp
N/A 34.107.221.82:80 detectportal.firefox.com tcp
N/A 8.8.8.8:53 dns.google udp
N/A 8.8.8.8:53 dns.google udp
N/A 8.8.8.8:53 dns.google udp
N/A 34.107.221.82:80 prod.detectportal.prod.cloudops.mozgcp.net tcp
N/A 8.8.8.8:53 dns.google udp
N/A 224.0.0.251:5353 udp
N/A 8.8.8.8:53 dns.google udp
N/A 204.79.197.200:443 ieonline.microsoft.com tcp
N/A 127.0.0.1:53822 tcp
N/A 8.8.8.8:53 dns.google udp
N/A 239.255.255.250:1900 udp
N/A 172.217.17.33:443 udp
N/A 8.8.8.8:443 dns.google udp
N/A 8.8.8.8:53 dns.google udp
N/A 216.58.208.110:80 redirector.gvt1.com tcp
N/A 8.8.8.8:53 dns.google udp
N/A 173.194.191.138:80 r5---sn-q4fl6ns7.gvt1.com tcp
N/A 8.8.8.8:53 dns.google udp
N/A 86.248.30.56:2222 86.248.30.56 tcp
N/A 86.248.30.56:2222 86.248.30.56 tcp
N/A 8.8.8.8:53 dns.google udp
N/A 172.217.17.33:443 udp
N/A 8.8.8.8:443 dns.google udp
N/A 216.58.211.106:443 tcp
N/A 86.248.30.56:2222 86.248.30.56 tcp
N/A 86.248.30.56:2222 86.248.30.56 tcp
N/A 86.248.30.56:2222 86.248.30.56 tcp
N/A 86.248.30.56:2222 86.248.30.56 tcp
N/A 216.58.208.110:80 redirector.gvt1.com tcp
N/A 173.194.191.138:80 r5---sn-q4fl6ns7.gvt1.com tcp
N/A 8.8.8.8:443 dns.google tcp
N/A 8.8.8.8:443 dns.google udp
N/A 172.217.17.106:443 tcp
N/A 172.217.17.33:443 udp
N/A 216.58.211.106:443 udp
N/A 8.8.8.8:443 dns.google udp
N/A 216.58.208.110:80 redirector.gvt1.com tcp
N/A 216.58.208.110:80 redirector.gvt1.com tcp
N/A 173.194.24.249:80 r3---sn-q4fl6ney.gvt1.com tcp
N/A 8.8.8.8:443 dns.google udp
N/A 8.8.8.8:443 dns.google udp
N/A 8.8.8.8:443 dns.google tcp
N/A 8.8.8.8:443 dns.google udp
N/A 8.8.8.8:443 dns.google udp
N/A 8.8.8.8:443 dns.google udp
N/A 8.8.8.8:443 dns.google udp
N/A 8.8.8.8:443 dns.google udp
N/A 216.58.208.110:80 redirector.gvt1.com tcp
N/A 173.194.191.138:80 r5---sn-q4fl6ns7.gvt1.com tcp
N/A 8.8.8.8:53 dns.google udp
N/A 8.8.4.4:443 dns.google udp
N/A 8.8.4.4:443 dns.google udp
N/A 8.8.4.4:443 dns.google udp
N/A 8.8.4.4:443 dns.google udp
N/A 172.217.17.33:443 udp
N/A 8.8.4.4:443 dns.google tcp
N/A 8.8.8.8:53 dns.google udp
N/A 8.8.8.8:53 dns.google udp
N/A 8.8.8.8:53 dns.google udp
N/A 172.217.20.106:443 udp
N/A 216.58.214.14:443 clients2.google.com udp
N/A 216.58.208.110:80 redirector.gvt1.com tcp
N/A 173.194.191.138:80 r5---sn-q4fl6ns7.gvt1.com tcp
N/A 10.7.0.27:5355 udp
N/A 10.7.0.37:5355 udp
N/A 10.7.0.20:5355 udp
N/A 10.7.0.24:5355 udp
N/A 10.7.0.41:5355 udp
N/A 10.7.0.14:5355 udp
N/A 10.7.0.10:5355 udp
N/A 216.58.208.110:80 redirector.gvt1.com tcp
N/A 173.194.191.138:80 r5---sn-q4fl6ns7.gvt1.com tcp

Files

memory/1160-0-0x0000000000000000-mapping.dmp

memory/1160-1-0x0000000002610000-0x0000000002621000-memory.dmp

\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe

MD5 4b276f3dce7f4c9ee152cb4efe2a5782
SHA1 16160357fe9913eef0002d10dcbe2355e364e867
SHA256 b412e06d880e1b2771a405d1db70d4f6935de16f5f7c9c61a12555ed9537f45f
SHA512 7079f86b0bb994bcb0e153a16cc24a01a203510962c6b35d43bcb8c5a454743a70297a057c9fc2922e198634c7ea101abaf7f3e16a619c8b87aaf26bcc191035

\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe

MD5 4b276f3dce7f4c9ee152cb4efe2a5782
SHA1 16160357fe9913eef0002d10dcbe2355e364e867
SHA256 b412e06d880e1b2771a405d1db70d4f6935de16f5f7c9c61a12555ed9537f45f
SHA512 7079f86b0bb994bcb0e153a16cc24a01a203510962c6b35d43bcb8c5a454743a70297a057c9fc2922e198634c7ea101abaf7f3e16a619c8b87aaf26bcc191035

memory/1132-4-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe

MD5 4b276f3dce7f4c9ee152cb4efe2a5782
SHA1 16160357fe9913eef0002d10dcbe2355e364e867
SHA256 b412e06d880e1b2771a405d1db70d4f6935de16f5f7c9c61a12555ed9537f45f
SHA512 7079f86b0bb994bcb0e153a16cc24a01a203510962c6b35d43bcb8c5a454743a70297a057c9fc2922e198634c7ea101abaf7f3e16a619c8b87aaf26bcc191035

memory/1528-6-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe

MD5 4b276f3dce7f4c9ee152cb4efe2a5782
SHA1 16160357fe9913eef0002d10dcbe2355e364e867
SHA256 b412e06d880e1b2771a405d1db70d4f6935de16f5f7c9c61a12555ed9537f45f
SHA512 7079f86b0bb994bcb0e153a16cc24a01a203510962c6b35d43bcb8c5a454743a70297a057c9fc2922e198634c7ea101abaf7f3e16a619c8b87aaf26bcc191035

memory/1452-8-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe

MD5 4b276f3dce7f4c9ee152cb4efe2a5782
SHA1 16160357fe9913eef0002d10dcbe2355e364e867
SHA256 b412e06d880e1b2771a405d1db70d4f6935de16f5f7c9c61a12555ed9537f45f
SHA512 7079f86b0bb994bcb0e153a16cc24a01a203510962c6b35d43bcb8c5a454743a70297a057c9fc2922e198634c7ea101abaf7f3e16a619c8b87aaf26bcc191035

\??\PIPE\wkssvc

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

memory/1452-11-0x00000000025D0000-0x00000000025E1000-memory.dmp

memory/1132-12-0x0000000000510000-0x000000000054A000-memory.dmp

memory/1728-13-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.dat

MD5 cb6d511d96708da0d91d91d5dab7eff7
SHA1 d433018aa4dbf9ca62ad90ded7581f4d8227507d
SHA256 1dec14a1d1cc3bc122a93e3d8e0b7e563da87c859c4adc24f0a5897313ccc866
SHA512 9977a56618832e1786a6fedab8ad2fb07d6126d1e3bec84f1e3cd526b65de6f235977e6ab69f875455abb31ba29648d0ea057c37230f97a8ac99ffba15afb210

memory/560-15-0x0000000000000000-mapping.dmp

memory/1236-16-0x0000000000000000-mapping.dmp

memory/1892-17-0x0000000000000000-mapping.dmp

memory/608-18-0x0000000000000000-mapping.dmp

memory/1460-19-0x0000000000000000-mapping.dmp

memory/360-20-0x0000000000000000-mapping.dmp

memory/2020-21-0x0000000000000000-mapping.dmp

memory/1088-22-0x0000000000000000-mapping.dmp

memory/1824-23-0x0000000000000000-mapping.dmp

memory/1092-24-0x0000000000000000-mapping.dmp

memory/1056-25-0x0000000000000000-mapping.dmp

memory/732-26-0x0000000000000000-mapping.dmp

memory/1964-27-0x0000000000000000-mapping.dmp

memory/1560-28-0x000007FEF7500000-0x000007FEF777A000-memory.dmp

\Users\Admin\tlhadkvakbcpeunjmqetige.exe

MD5 2ec8a77b774feb879d39a2ec534aacf6
SHA1 8145f7be26c8a6f37ee110723c39fe1e706d9d08
SHA256 949edb4aad47447f2083fbf0bc5e7add110361892e8813dc17e213c31f80a5e3
SHA512 1c7effd007174eecd9b1288dc9579b62a3f3ddc5bc8365dca0f3e446794e9b82ecfc59fb515fb7e60227d1376d0dffe776ac575c3358860e1e54abdab6b25532

\Users\Admin\tlhadkvakbcpeunjmqetige.exe

MD5 2ec8a77b774feb879d39a2ec534aacf6
SHA1 8145f7be26c8a6f37ee110723c39fe1e706d9d08
SHA256 949edb4aad47447f2083fbf0bc5e7add110361892e8813dc17e213c31f80a5e3
SHA512 1c7effd007174eecd9b1288dc9579b62a3f3ddc5bc8365dca0f3e446794e9b82ecfc59fb515fb7e60227d1376d0dffe776ac575c3358860e1e54abdab6b25532

memory/1332-31-0x0000000000000000-mapping.dmp

C:\Users\Admin\tlhadkvakbcpeunjmqetige.exe

MD5 2ec8a77b774feb879d39a2ec534aacf6
SHA1 8145f7be26c8a6f37ee110723c39fe1e706d9d08
SHA256 949edb4aad47447f2083fbf0bc5e7add110361892e8813dc17e213c31f80a5e3
SHA512 1c7effd007174eecd9b1288dc9579b62a3f3ddc5bc8365dca0f3e446794e9b82ecfc59fb515fb7e60227d1376d0dffe776ac575c3358860e1e54abdab6b25532

\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe

MD5 2ec8a77b774feb879d39a2ec534aacf6
SHA1 8145f7be26c8a6f37ee110723c39fe1e706d9d08
SHA256 949edb4aad47447f2083fbf0bc5e7add110361892e8813dc17e213c31f80a5e3
SHA512 1c7effd007174eecd9b1288dc9579b62a3f3ddc5bc8365dca0f3e446794e9b82ecfc59fb515fb7e60227d1376d0dffe776ac575c3358860e1e54abdab6b25532

\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe

MD5 2ec8a77b774feb879d39a2ec534aacf6
SHA1 8145f7be26c8a6f37ee110723c39fe1e706d9d08
SHA256 949edb4aad47447f2083fbf0bc5e7add110361892e8813dc17e213c31f80a5e3
SHA512 1c7effd007174eecd9b1288dc9579b62a3f3ddc5bc8365dca0f3e446794e9b82ecfc59fb515fb7e60227d1376d0dffe776ac575c3358860e1e54abdab6b25532

memory/1944-35-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe

MD5 2ec8a77b774feb879d39a2ec534aacf6
SHA1 8145f7be26c8a6f37ee110723c39fe1e706d9d08
SHA256 949edb4aad47447f2083fbf0bc5e7add110361892e8813dc17e213c31f80a5e3
SHA512 1c7effd007174eecd9b1288dc9579b62a3f3ddc5bc8365dca0f3e446794e9b82ecfc59fb515fb7e60227d1376d0dffe776ac575c3358860e1e54abdab6b25532

\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe

MD5 2ec8a77b774feb879d39a2ec534aacf6
SHA1 8145f7be26c8a6f37ee110723c39fe1e706d9d08
SHA256 949edb4aad47447f2083fbf0bc5e7add110361892e8813dc17e213c31f80a5e3
SHA512 1c7effd007174eecd9b1288dc9579b62a3f3ddc5bc8365dca0f3e446794e9b82ecfc59fb515fb7e60227d1376d0dffe776ac575c3358860e1e54abdab6b25532

memory/1848-38-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe

MD5 2ec8a77b774feb879d39a2ec534aacf6
SHA1 8145f7be26c8a6f37ee110723c39fe1e706d9d08
SHA256 949edb4aad47447f2083fbf0bc5e7add110361892e8813dc17e213c31f80a5e3
SHA512 1c7effd007174eecd9b1288dc9579b62a3f3ddc5bc8365dca0f3e446794e9b82ecfc59fb515fb7e60227d1376d0dffe776ac575c3358860e1e54abdab6b25532

C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe

MD5 2ec8a77b774feb879d39a2ec534aacf6
SHA1 8145f7be26c8a6f37ee110723c39fe1e706d9d08
SHA256 949edb4aad47447f2083fbf0bc5e7add110361892e8813dc17e213c31f80a5e3
SHA512 1c7effd007174eecd9b1288dc9579b62a3f3ddc5bc8365dca0f3e446794e9b82ecfc59fb515fb7e60227d1376d0dffe776ac575c3358860e1e54abdab6b25532

memory/824-41-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe

MD5 2ec8a77b774feb879d39a2ec534aacf6
SHA1 8145f7be26c8a6f37ee110723c39fe1e706d9d08
SHA256 949edb4aad47447f2083fbf0bc5e7add110361892e8813dc17e213c31f80a5e3
SHA512 1c7effd007174eecd9b1288dc9579b62a3f3ddc5bc8365dca0f3e446794e9b82ecfc59fb515fb7e60227d1376d0dffe776ac575c3358860e1e54abdab6b25532

\??\PIPE\wkssvc

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

memory/824-44-0x0000000002680000-0x0000000002691000-memory.dmp

memory/1848-45-0x00000000003C0000-0x00000000003FA000-memory.dmp

memory/2016-46-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.dat

MD5 7e246a5bb7686dbe5ac18688d0ce72c6
SHA1 82266bb8e51604de3ae0ac757ba0e50e43d8cdc7
SHA256 28e0e3e685f522fe246c5b6106ec6944b273951bb8c4202c99de1d5c7dc792de
SHA512 6c8ca9b34d6548057158a1087cbad177fd1aa7527b6c6ed4b6cf7d56205d9651475aa0d012aeca12488134cae63fb45a9d87370670bd9874176d33396931155a

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 e3015bd96c5fed7a12ccb5edca406535
SHA1 16a051352424f1d0b1b5eac6b93988abd4e0940a
SHA256 52873a0c1773ba491675d1e6c891c44b57b64fd4671be0924a4fda9889a2b8a2
SHA512 83525180aaf864d3111df440af7686e49098930e4ab02685b69354e6cb1bfba5681b513650f69021deef11ff588d0276786258a4b4ad234f6e4257ee9364b311

memory/2016-49-0x0000000002840000-0x0000000002872000-memory.dmp

memory/1076-50-0x0000000000000000-mapping.dmp

memory/2016-51-0x00000000004F0000-0x0000000000522000-memory.dmp

memory/1004-52-0x0000000000000000-mapping.dmp

memory/1056-53-0x0000000000000000-mapping.dmp

memory/1056-54-0x00000000000A0000-0x00000000000A1000-memory.dmp

memory/1056-55-0x0000000000000000-mapping.dmp

\??\PIPE\wkssvc

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

memory/1508-57-0x0000000000000000-mapping.dmp

memory/860-58-0x0000000000000000-mapping.dmp

C:\Users\Admin\EmailStorage_TUICJFPF-Admin_1605210130\COLLEC~1.TXT

MD5 df5d693082ab32f1e7aa5ed29d69924d
SHA1 be4c956a725d9b36c2b37c2a0ed9726d60b693ec
SHA256 3ac3af8980f61be90186e2b52b75e9582e5fc87686a41a531d7bff9da011b4fa
SHA512 57ac22f315ab42e1f33f782b22f23f92e0d5edcafc73cae8f48c75cbba01384ef087ca643954239a81335e1cea76dcf5ff3e59f69146e0b6a26b3bff878f487b

memory/2016-60-0x00000000004F0000-0x0000000000522000-memory.dmp

memory/996-61-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.dat

MD5 87a51fb548a569433e911cf4b104900f
SHA1 bce20ce85763c4a3fcdebb91f6d4769013a13fd7
SHA256 9fb474ebd213915114bd1d35fb59a50f58372dff1bbbf5591f621960f62223b4
SHA512 045e101d0ec22011744dac5f8b685411a38995d3d53dd56196a19c56768f31eb32aafd9e687fda9a0c64ab6a609aaf78d503f1c6a0e409419c4b17aca111b029

memory/1116-63-0x0000000001C50000-0x0000000001C51000-memory.dmp

memory/2016-68-0x0000000000000000-mapping.dmp

memory/1132-69-0x0000000000000000-mapping.dmp

memory/2016-70-0x0000000002840000-0x0000000002872000-memory.dmp

memory/2036-71-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.dat

MD5 77a5591464e1f423f3cd13fd5a14409f
SHA1 8e16c78512ce00251f3c9a123440639c1193b358
SHA256 361ff03a6330d1af816fdbe9e73f309331f7220a61b59b99fb70c130e60e92ae
SHA512 6e65197fb98b4826a133cd81007563b49167854b5d203f199cd2ef375b6e94449d7c1bf04742fdda038cf7cdc4276b7fea1d87b961e01fa30eda3a349514bafb

C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\ybnpdan.mjv

MD5 ee955a2d7a1ace8674a5ac2e5fbdd956
SHA1 ed0d0ce655edbb38a2452c02600fd484c65512cc
SHA256 46fd44ed36f6c4abbc958fbc83a63ec8a5f10df208b4fe9e1353b78375896e35
SHA512 7ed9af318497927f71bdd459c58c6038dc63f03b0b25d98a25024ac7924cfce1342500ac469152e9f2b15e0c8e055828f7e77895b8420cfff55ab07925ae8ec6

\??\PIPE\wkssvc

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

memory/2016-80-0x0000000000000000-mapping.dmp

memory/2016-81-0x0000000002CF0000-0x0000000002D22000-memory.dmp

memory/1576-82-0x0000000000000000-mapping.dmp

memory/1576-83-0x0000000073E30000-0x0000000073FD3000-memory.dmp

memory/1576-84-0x00000000022E0000-0x00000000022F0000-memory.dmp

memory/1576-90-0x0000000000910000-0x0000000000920000-memory.dmp

memory/1576-102-0x0000000000910000-0x0000000000970000-memory.dmp

memory/1576-108-0x00000000022E0000-0x0000000002340000-memory.dmp

memory/1576-121-0x00000000021F0000-0x0000000002200000-memory.dmp

memory/1576-120-0x00000000021E0000-0x0000000002200000-memory.dmp

memory/1576-124-0x00000000031A0000-0x0000000003220000-memory.dmp

memory/1576-125-0x0000000002340000-0x0000000002350000-memory.dmp

memory/1196-139-0x0000000000000000-mapping.dmp

memory/684-140-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

MD5 2b6a36b9bd1413a914ba3e17636e3a2b
SHA1 d1337b2581f4db2bb8114e76add9caecd24ded7a
SHA256 7913ce4ec440cfed732d079282ee3b9727449158441b5c801285d09dd0843232
SHA512 325d3989c05d25b9ec20674012263c0702d7807c9fde95e867ce1968cdef0685a418077159d534a28f07f42a37ec032f404da1c1ec6869b48a287b5d0c028ba2

\??\PIPE\wkssvc

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

memory/1896-145-0x0000000000060000-0x0000000000061000-memory.dmp

memory/1896-146-0x000000013F893F60-0x000000013F894020-memory.dmp

memory/1896-149-0x0000000000000000-mapping.dmp

memory/112-150-0x0000000000000000-mapping.dmp

memory/1896-151-0x00000000774E0000-0x00000000774E1000-memory.dmp

\??\pipe\crashpad_1196_FMAQTLGHXTPRZODC

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

memory/2024-161-0x0000000000000000-mapping.dmp

memory/1752-169-0x0000000000000000-mapping.dmp

\??\PIPE\srvsvc

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

memory/1752-178-0x000002FF00040000-0x000002FF00041000-memory.dmp

memory/1752-179-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/1752-180-0x000000000A5C0000-0x000000000A5D1000-memory.dmp

memory/1752-182-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/1752-181-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/1752-185-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/1752-188-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/1752-196-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/1752-207-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/1752-222-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/1752-223-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/1752-221-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/1752-220-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/1752-219-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/1752-218-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/1752-217-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/1752-216-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/1752-215-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/1752-214-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/1752-213-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/1752-212-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/1752-211-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/1752-210-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/1752-209-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/1752-208-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/1752-206-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/1752-205-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/1752-204-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/1752-203-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/1752-202-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/1752-201-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/1752-200-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/1752-199-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/1752-198-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/1752-197-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/1752-195-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/1752-194-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/1752-193-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/1752-192-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/1752-191-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/1752-190-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/1752-189-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/1752-187-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/1752-186-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/1752-184-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/1752-183-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2024-228-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2024-230-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2024-231-0x000000000A2D0000-0x000000000A2E1000-memory.dmp

memory/2024-232-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2024-233-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2024-234-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2024-235-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2024-236-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2024-237-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2024-238-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2024-239-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2024-240-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2024-241-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2024-242-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2024-243-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2024-245-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2024-246-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2024-247-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2024-248-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2024-249-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2024-250-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2024-251-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2024-252-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2024-253-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2024-254-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2024-255-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2024-256-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2024-257-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2024-258-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2024-259-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2024-260-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2024-261-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2024-262-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2024-263-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2024-264-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2024-265-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2024-266-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2024-267-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2024-268-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2024-269-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2024-270-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2024-271-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2024-272-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2024-273-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2024-274-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2024-275-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2100-277-0x0000000001C00000-0x0000000001C01000-memory.dmp

memory/2100-278-0x0000000001C00000-0x0000000001C01000-memory.dmp

memory/2728-279-0x0000000000000000-mapping.dmp

memory/2744-280-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

MD5 2b6a36b9bd1413a914ba3e17636e3a2b
SHA1 d1337b2581f4db2bb8114e76add9caecd24ded7a
SHA256 7913ce4ec440cfed732d079282ee3b9727449158441b5c801285d09dd0843232
SHA512 325d3989c05d25b9ec20674012263c0702d7807c9fde95e867ce1968cdef0685a418077159d534a28f07f42a37ec032f404da1c1ec6869b48a287b5d0c028ba2

memory/2792-282-0x0000000000000000-mapping.dmp

memory/2804-284-0x0000000000000000-mapping.dmp

\??\PIPE\samr

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

memory/2644-417-0x0000000000000000-mapping.dmp

memory/2664-420-0x0000000000000000-mapping.dmp

memory/2644-423-0x00000000008D0000-0x00000000008E0000-memory.dmp

\??\PIPE\wkssvc

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

memory/2236-508-0x0000000000000000-mapping.dmp

memory/2280-514-0x0000000000000000-mapping.dmp

memory/2344-521-0x0000000000000000-mapping.dmp

memory/2432-525-0x0000000000000000-mapping.dmp

memory/2400-528-0x0000000000000000-mapping.dmp

memory/2464-536-0x0000000000000000-mapping.dmp

memory/2532-544-0x0000000000000000-mapping.dmp

memory/2580-550-0x0000000000000000-mapping.dmp

memory/2788-578-0x0000000000000000-mapping.dmp

memory/2432-582-0x0000000000000000-mapping.dmp

memory/2100-593-0x0000000000000000-mapping.dmp

memory/2464-605-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2464-606-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2464-607-0x000000000A090000-0x000000000A0A1000-memory.dmp

memory/2464-608-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2464-611-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2464-618-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2464-629-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2464-648-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2464-650-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2464-649-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2464-647-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2464-646-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2464-645-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2464-644-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2464-643-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2464-642-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2464-641-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2464-640-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2464-639-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2464-638-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2464-637-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2464-636-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2464-635-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2464-634-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2464-633-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2464-632-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2464-631-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2464-630-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2464-628-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2464-627-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2464-626-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2464-625-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2464-624-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2464-623-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2464-622-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2464-621-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2464-620-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2464-619-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2464-617-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2464-616-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2464-615-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2464-614-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2464-613-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2464-612-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2464-610-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2464-609-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2532-656-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2344-659-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2344-660-0x000000000A1A0000-0x000000000A1B1000-memory.dmp

memory/2532-662-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2532-666-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2344-665-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2344-664-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2532-667-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2344-669-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2344-673-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2532-676-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2532-681-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2532-682-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2532-683-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2532-684-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2532-685-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2532-686-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2532-687-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2344-680-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2344-679-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2532-678-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2344-674-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2532-671-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2532-663-0x000000000A2B0000-0x000000000A2C1000-memory.dmp

memory/2344-661-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2344-688-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2344-689-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2344-690-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2344-691-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2344-692-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2344-693-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2344-694-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2344-695-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2344-696-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2344-697-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2344-698-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2344-699-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2344-700-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2344-701-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2344-702-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2344-703-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2344-704-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2344-705-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2344-706-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2344-707-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2344-708-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2344-709-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2532-710-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2532-711-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2532-712-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2532-713-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2532-714-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2532-715-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2532-716-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2532-717-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2532-718-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2532-719-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2532-720-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2532-721-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2532-722-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2532-723-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2532-724-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2344-726-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2532-729-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2532-732-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2344-735-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2532-738-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2344-744-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2532-743-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2532-747-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2344-746-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2344-750-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2532-753-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2344-756-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2344-759-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2532-762-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2532-764-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2532-767-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2532-769-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2532-771-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2344-761-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2532-757-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2532-755-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2344-752-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2532-749-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2532-741-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2344-740-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2344-737-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2532-734-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2344-730-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2344-728-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2788-808-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2788-810-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2788-809-0x000000000A390000-0x000000000A3A1000-memory.dmp

memory/2788-811-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2788-812-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2788-813-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2788-814-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2788-815-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2788-816-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2788-817-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2788-818-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2788-819-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2788-821-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2556-822-0x0000000000000000-mapping.dmp

memory/2788-820-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2788-840-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2788-839-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2788-841-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2788-838-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2788-837-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2788-836-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2788-835-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2788-842-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2788-843-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2788-844-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2788-845-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2788-846-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2788-850-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2788-859-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2788-865-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2788-864-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2788-863-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2788-862-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2788-861-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2788-860-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2788-858-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2788-857-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2788-856-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2788-855-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2788-854-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2788-853-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2788-852-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2788-851-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2788-849-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2788-848-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2788-847-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2636-931-0x0000000000000000-mapping.dmp

\??\PIPE\wkssvc

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

memory/2652-1097-0x0000000000000000-mapping.dmp

memory/2100-1100-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2100-1101-0x000000000A170000-0x000000000A181000-memory.dmp

memory/2100-1103-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2100-1105-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2100-1108-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2100-1113-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2100-1126-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2100-1144-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2100-1143-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2100-1142-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2100-1141-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2100-1140-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2100-1139-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2100-1138-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2100-1137-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2100-1136-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2100-1135-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2100-1134-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2100-1133-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2100-1132-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2100-1131-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2100-1130-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2100-1129-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2100-1128-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2100-1127-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2100-1125-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2100-1124-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2100-1123-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2100-1122-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2100-1121-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2100-1120-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2100-1119-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2100-1118-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2100-1117-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2100-1116-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2100-1115-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2100-1114-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2100-1112-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2100-1111-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2100-1110-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2100-1109-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2100-1107-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2100-1106-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2100-1104-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2100-1102-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/3248-1151-0x0000000000000000-mapping.dmp

memory/3404-1181-0x0000000000000000-mapping.dmp

memory/3248-1250-0x0000000000000000-mapping.dmp

memory/3796-1257-0x0000000000000000-mapping.dmp

memory/2016-1386-0x0000000002240000-0x0000000002272000-memory.dmp

memory/3540-1409-0x0000000000000000-mapping.dmp

memory/3424-1411-0x0000000000000000-mapping.dmp

memory/3748-1446-0x0000000000000000-mapping.dmp

memory/3036-1447-0x0000000000000000-mapping.dmp

memory/1196-1993-0x0000000009860000-0x0000000009871000-memory.dmp

memory/1560-2034-0x0000000002620000-0x0000000002628000-memory.dmp

memory/1560-2085-0x0000000002610000-0x0000000002618000-memory.dmp

memory/1560-2087-0x0000000002530000-0x0000000002538000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7ISB2KAC\dnserror[1]

MD5 73c70b34b5f8f158d38a94b9d7766515
SHA1 e9eaa065bd6585a1b176e13615fd7e6ef96230a9
SHA256 3ebd34328a4386b4eba1f3d5f1252e7bd13744a6918720735020b4689c13fcf4
SHA512 927dcd4a8cfdeb0f970cb4ee3f059168b37e1e4e04733ed3356f77ca0448d2145e1abdd4f7ce1c6ca23c1e3676056894625b17987cc56c84c78e73f60e08fc0d

C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3O0J2C38\NewErrorPageTemplate[1]

MD5 cdf81e591d9cbfb47a7f97a2bcdb70b9
SHA1 8f12010dfaacdecad77b70a3e781c707cf328496
SHA256 204d95c6fb161368c795bb63e538fe0b11f9e406494bb5758b3b0d60c5f651bd
SHA512 977dcc2c6488acaf0e5970cef1a7a72c9f9dc6bb82da54f057e0853c8e939e4ab01b163eb7a5058e093a8bc44ecad9d06880fdc883e67e28ac67fee4d070a4cc

C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\I4HTQEUG\errorPageStrings[1]

MD5 e3e4a98353f119b80b323302f26b78fa
SHA1 20ee35a370cdd3a8a7d04b506410300fd0a6a864
SHA256 9466d620dc57835a2475f8f71e304f54aee7160e134ba160baae0f19e5e71e66
SHA512 d8e4d73c76804a5abebd5dbc3a86dcdb6e73107b873175a8de67332c113fb7c4899890bf7972e467866fa4cd100a7e2a10a770e5a9c41cbf23b54351b771dcee

memory/1560-2137-0x00000000025A0000-0x00000000025A8000-memory.dmp

memory/1560-2138-0x00000000025B0000-0x00000000025B8000-memory.dmp

memory/1560-2139-0x00000000025C0000-0x00000000025C8000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IK0XRGX9\httpErrorPagesScripts[1]

MD5 3f57b781cb3ef114dd0b665151571b7b
SHA1 ce6a63f996df3a1cccb81720e21204b825e0238c
SHA256 46e019fa34465f4ed096a9665d1827b54553931ad82e98be01edb1ddbc94d3ad
SHA512 8cbf4ef582332ae7ea605f910ad6f8a4bc28513482409fa84f08943a72cac2cf0fa32b6af4c20c697e1fac2c5ba16b5a64a23af0c11eefbf69625b8f9f90c8fa

memory/2804-2141-0x000000DBB9881000-0x000000DBB9891000-memory.dmp

memory/1196-2142-0x0000000009860000-0x0000000009871000-memory.dmp

memory/1196-2143-0x0000000009860000-0x0000000009871000-memory.dmp

memory/1196-2144-0x0000000009860000-0x0000000009871000-memory.dmp

memory/1196-2145-0x0000000009860000-0x0000000009871000-memory.dmp

memory/1196-2147-0x0000000009860000-0x0000000009871000-memory.dmp

memory/1196-2148-0x0000000009860000-0x0000000009871000-memory.dmp

memory/1196-2149-0x0000000009860000-0x0000000009871000-memory.dmp

memory/1196-2150-0x0000000009860000-0x0000000009871000-memory.dmp

memory/1196-2151-0x000000001D370000-0x000000001D393000-memory.dmp

memory/1196-2152-0x0000000009860000-0x0000000009871000-memory.dmp

memory/1196-2153-0x0000000009860000-0x0000000009871000-memory.dmp

memory/1196-2154-0x0000000009860000-0x0000000009871000-memory.dmp

memory/1196-2155-0x0000000009860000-0x0000000009871000-memory.dmp

memory/1196-2156-0x0000000009860000-0x0000000009871000-memory.dmp

memory/1196-2157-0x0000000009860000-0x0000000009871000-memory.dmp

memory/1196-2158-0x0000000009860000-0x0000000009871000-memory.dmp

memory/1196-2159-0x0000000009860000-0x0000000009871000-memory.dmp

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 429f518cbd18c73d9268c4bf9d3cccc9
SHA1 82d09d1d74ca751a080bb311f67b46ef6fc692e4
SHA256 2526c1cda6da6fe14f3d77aebea3aa56ccbefd1aad56e77c5494d350152f4243
SHA512 c7e4c4ca4a4c0456a376f45a6ea4b660b77d933e6ddbf53bb5aae548a411505bc9bea9e4cef22f581b1e1f182815f17c269567bc1858abb1f9188230bca22099

memory/1196-2161-0x0000000009860000-0x0000000009871000-memory.dmp

memory/1196-2162-0x0000000009860000-0x0000000009871000-memory.dmp

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\XJKDFLFI.txt

MD5 c7f603e5cde7854658070021e49a17ab
SHA1 2af9d2021eb76f226502ee4a1518c794d60325d7
SHA256 4833fdc328a5198a9280201e743e50f89f768812d79cd2024578da113d79c922
SHA512 58ab1d5af2401bfa16cbeb3e32288dd1a866d2ce597c8f1e85af9ce9d13da3600cb29cd4a94c9f8b17f1022897050d7df2fc95a2b4904413ec9cb49978dcbd91

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\ZM4UNWBV.txt

MD5 6a36c7945da68de37654ee496c2f3dce
SHA1 921bab271921fbfcf376ab3df5d0f1ee8f3cf6d1
SHA256 476940f830c0f149290b96cac653b391f9bcf245ec3d59970cf677e4ee254530
SHA512 8b00adb3ce7e49d204f6c65bbb6248465302feaf2dfc26615314db539a47ead886cf8418a4b448b183eb33a32468f1b816dd3ed1e324f98b42fea58c619d9e3d

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\L4TKYMK8.txt

MD5 ec0a361bdb8ef1e5c4ac383b34582847
SHA1 77aa7a756002ea5d20a87c07d29a29fc891a061d
SHA256 5a3b361fb3aaf18447f7d7682c39e5b532868fdb5e2fb90d1c7945eb015814e6
SHA512 f2430dbafaa40034e05b5949b51c3a27b783cb87c65bbdfb65aeb3971b135903c0fe192cfd43532869f51aaae80df0b0fc453edbae8245e87d98f8e300a87b62

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\EHAYVQNV.txt

MD5 7f79c5a10fed34fb7661eacd2ef94063
SHA1 228d2d8ac4de39f45e78d5ba55926a28528bf7b7
SHA256 8be553042b943a764b694f833f3db6db95326ecf1492b4d0f1d993660cfba9c2
SHA512 f725109683df71146276a2f8e7b37f8f6befa1b97b591ace5fd0905ac90d5693be62b60135c2e3f3195f12553ddbebfdf838345c1cfebab23785ed6449ecb5db

memory/1196-2167-0x0000000009860000-0x0000000009871000-memory.dmp

memory/1196-2168-0x0000000009860000-0x0000000009871000-memory.dmp

memory/1196-2169-0x0000000009860000-0x0000000009871000-memory.dmp

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\Q75OAMUL.txt

MD5 b80dfdfb6a30780cb6c7faa5d313da59
SHA1 8b495388994cc0370a87c958366c19b388aee874
SHA256 de1de33f477888e01b3a9cfc9825b8facefe8b9663daf9eb15bfa1a00143801d
SHA512 ee8cac23cfd75fdf17ae235491df58b70701f0015d607f75ae77d02a527adbeb3264071766cd3cd13dec9f96b75ea2cad66b657beab1a54f622753023c15cb75

memory/1196-2171-0x0000000009860000-0x0000000009871000-memory.dmp

memory/1196-2172-0x0000000009860000-0x0000000009871000-memory.dmp

memory/1196-2173-0x0000000009860000-0x0000000009871000-memory.dmp

memory/1196-2174-0x0000000009860000-0x0000000009871000-memory.dmp

memory/1196-2175-0x0000000009860000-0x0000000009871000-memory.dmp

memory/1196-2176-0x0000000009860000-0x0000000009871000-memory.dmp

memory/1196-2177-0x0000000009860000-0x0000000009871000-memory.dmp

memory/1196-2178-0x0000000009860000-0x0000000009871000-memory.dmp

memory/1196-2179-0x0000000009860000-0x0000000009871000-memory.dmp

memory/1196-2180-0x0000000009860000-0x0000000009871000-memory.dmp

memory/1196-2181-0x0000000009860000-0x0000000009871000-memory.dmp

memory/1196-2182-0x0000000009860000-0x0000000009871000-memory.dmp

memory/1196-2183-0x0000000009930000-0x0000000009953000-memory.dmp

memory/1196-2184-0x0000000009860000-0x0000000009871000-memory.dmp

memory/1196-2185-0x0000000009860000-0x0000000009871000-memory.dmp

memory/1196-2186-0x0000000009860000-0x0000000009871000-memory.dmp

memory/1196-2187-0x0000000009860000-0x0000000009871000-memory.dmp

memory/1196-2188-0x0000000009860000-0x0000000009871000-memory.dmp

memory/1196-2189-0x0000000009860000-0x0000000009871000-memory.dmp

memory/1196-2190-0x0000000009860000-0x0000000009871000-memory.dmp

memory/1196-2191-0x0000000009860000-0x0000000009871000-memory.dmp

memory/1196-2192-0x0000000009860000-0x0000000009871000-memory.dmp

memory/1196-2193-0x0000000009860000-0x0000000009871000-memory.dmp

memory/1196-2194-0x0000000009860000-0x0000000009871000-memory.dmp

memory/1196-2195-0x0000000009860000-0x0000000009871000-memory.dmp

memory/1196-2196-0x0000000009860000-0x0000000009871000-memory.dmp

memory/2880-2201-0x0000000000000000-mapping.dmp

memory/3240-2207-0x0000000000000000-mapping.dmp

memory/3296-2213-0x0000000000000000-mapping.dmp

memory/2828-2219-0x0000000000000000-mapping.dmp

memory/2400-2221-0x0000000000000000-mapping.dmp

memory/2796-2222-0x0000000000000000-mapping.dmp

memory/1196-2223-0x0000000009AD0000-0x0000000009AD2000-memory.dmp

memory/1196-2224-0x0000000009860000-0x0000000009871000-memory.dmp

memory/1196-2225-0x0000000009976000-0x00000000099AB000-memory.dmp

C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd32.dll

MD5 bf619eac0cdf3f68d496ea9344137e8b
SHA1 5c3eb80066420002bc3dcc7ca4ab6efad7ed4ae5
SHA256 076a27c79e5ace2a3d47f9dd2e83e4ff6ea8872b3c2218f66c92b89b55f36560
SHA512 df40d4a774e0b453a5b87c00d6f0ef5d753143454e88ee5f7b607134598294c7905ccbcf94bbc46e474db6eb44e56a6dbb6d9a1be9d4fb5d1b5f2d0c6ed34bfe

memory/1560-2230-0x0000000002600000-0x0000000002608000-memory.dmp

memory/2016-2233-0x0000000004350000-0x0000000004361000-memory.dmp

memory/1908-2240-0x0000000000000000-mapping.dmp

memory/3548-2239-0x0000000000000000-mapping.dmp

memory/1196-2242-0x0000000009860000-0x0000000009871000-memory.dmp

memory/1196-2243-0x0000000009953000-0x0000000009974000-memory.dmp

memory/3616-2248-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 1681bdc07e1cf613516eb0847dd2dc29
SHA1 85ecd196e4d6369f4d9449475235f8d3a4e04785
SHA256 55843d947b56ef70f2335512a0ee84ad845e87e732e77cb8c9e5a830fc68896d
SHA512 4a584dc8c91b0d923f252035928675bc812915b9e436258c6321cc29646b1e3b67313f960699d4a05322c37fcd4d02dee4acd3fdb400c6e5043207a4efd62e82

memory/2016-2251-0x0000000004350000-0x0000000004361000-memory.dmp

memory/3712-2256-0x0000000000000000-mapping.dmp

memory/3940-2262-0x0000000000000000-mapping.dmp

memory/2000-2268-0x0000000000000000-mapping.dmp

memory/1196-2270-0x0000000009953000-0x0000000009974000-memory.dmp

memory/1196-2271-0x0000000009B09000-0x0000000009B2B000-memory.dmp

memory/3288-2276-0x0000000000000000-mapping.dmp

memory/3104-2282-0x0000000000000000-mapping.dmp

memory/2052-2288-0x0000000000000000-mapping.dmp

memory/2016-2290-0x0000000004350000-0x0000000004361000-memory.dmp

memory/1196-2291-0x00000000099DE000-0x0000000009A00000-memory.dmp

memory/1196-2294-0x0000000009AD0000-0x0000000009AD2000-memory.dmp

memory/1196-2298-0x0000000009B2B000-0x0000000009B56000-memory.dmp

memory/1196-2297-0x0000000009AB0000-0x0000000009AB1000-memory.dmp

memory/1196-2300-0x0000000009BA8000-0x0000000009BD4000-memory.dmp

memory/2016-2301-0x0000000004350000-0x0000000004361000-memory.dmp

memory/2016-2304-0x0000000004350000-0x0000000004361000-memory.dmp

memory/2016-2307-0x0000000004350000-0x0000000004361000-memory.dmp

memory/2016-2309-0x0000000004350000-0x0000000004361000-memory.dmp

memory/2016-2311-0x0000000004350000-0x0000000004361000-memory.dmp

memory/2104-2319-0x0000000000000000-mapping.dmp

memory/1196-2321-0x00000000099DE000-0x0000000009A00000-memory.dmp

memory/1376-2326-0x0000000000000000-mapping.dmp

memory/4008-2332-0x0000000000000000-mapping.dmp

memory/2132-2338-0x0000000000000000-mapping.dmp

memory/1196-2340-0x0000000009B09000-0x0000000009B2B000-memory.dmp

memory/1196-2344-0x0000000009953000-0x0000000009974000-memory.dmp

memory/1196-2349-0x0000000009860000-0x0000000009871000-memory.dmp

memory/1196-2360-0x00000000099DE000-0x0000000009A00000-memory.dmp

memory/4044-2407-0x0000000000000000-mapping.dmp

memory/3300-2428-0x0000000000000000-mapping.dmp

memory/3360-2434-0x0000000000000000-mapping.dmp

memory/3136-2440-0x0000000000000000-mapping.dmp

memory/1196-2445-0x0000000009953000-0x0000000009974000-memory.dmp

memory/1196-2449-0x0000000009B09000-0x0000000009B2B000-memory.dmp

memory/1196-2442-0x0000000009AB0000-0x0000000009AB1000-memory.dmp

memory/2052-2455-0x0000000000000000-mapping.dmp

memory/1196-2457-0x00000000099DE000-0x0000000009A00000-memory.dmp

memory/1196-2461-0x0000000009860000-0x0000000009871000-memory.dmp

memory/1196-2463-0x0000000009AD0000-0x0000000009BD0000-memory.dmp

memory/1196-2466-0x0000000009860000-0x0000000009871000-memory.dmp

memory/1196-2470-0x0000000009860000-0x0000000009871000-memory.dmp

memory/1196-2468-0x0000000009860000-0x0000000009871000-memory.dmp

memory/2052-2471-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2052-2472-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/2496-2477-0x0000000000000000-mapping.dmp

memory/3844-2483-0x0000000000000000-mapping.dmp

memory/2052-2484-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/3180-2490-0x0000000000000000-mapping.dmp

memory/2604-2496-0x0000000000000000-mapping.dmp

memory/1196-2498-0x0000000009860000-0x0000000009871000-memory.dmp

memory/2052-2500-0x000000000A250000-0x000000000A261000-memory.dmp

memory/1196-2501-0x0000000009976000-0x00000000099AB000-memory.dmp

memory/1196-2503-0x0000000009AD0000-0x0000000009BD0000-memory.dmp

memory/1196-2505-0x0000000009D10000-0x0000000009D23000-memory.dmp

memory/1196-2507-0x0000000009953000-0x0000000009974000-memory.dmp

memory/2052-2508-0x0000000000880000-0x00000000008800B0-memory.dmp

memory/3680-2510-0x0000000000000000-mapping.dmp

memory/3912-2511-0x0000000000000000-mapping.dmp

memory/2964-2512-0x0000000000000000-mapping.dmp

memory/3964-2513-0x0000000000000000-mapping.dmp

memory/3168-2514-0x0000000000000000-mapping.dmp

memory/3496-2515-0x0000000000000000-mapping.dmp

\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe

MD5 2ec8a77b774feb879d39a2ec534aacf6
SHA1 8145f7be26c8a6f37ee110723c39fe1e706d9d08
SHA256 949edb4aad47447f2083fbf0bc5e7add110361892e8813dc17e213c31f80a5e3
SHA512 1c7effd007174eecd9b1288dc9579b62a3f3ddc5bc8365dca0f3e446794e9b82ecfc59fb515fb7e60227d1376d0dffe776ac575c3358860e1e54abdab6b25532

memory/3064-2520-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Microsoft\Qhnoxt\bftvmgcd.exe

MD5 2ec8a77b774feb879d39a2ec534aacf6
SHA1 8145f7be26c8a6f37ee110723c39fe1e706d9d08
SHA256 949edb4aad47447f2083fbf0bc5e7add110361892e8813dc17e213c31f80a5e3
SHA512 1c7effd007174eecd9b1288dc9579b62a3f3ddc5bc8365dca0f3e446794e9b82ecfc59fb515fb7e60227d1376d0dffe776ac575c3358860e1e54abdab6b25532

memory/3232-2526-0x0000000000000000-mapping.dmp

memory/2248-2532-0x0000000000000000-mapping.dmp

memory/1916-2539-0x0000000000000000-mapping.dmp

memory/2388-2545-0x0000000000000000-mapping.dmp

memory/1196-2547-0x0000000009AB0000-0x0000000009AB1000-memory.dmp

memory/2592-2558-0x0000000000000000-mapping.dmp

memory/1196-2560-0x0000000009860000-0x0000000009871000-memory.dmp

memory/1196-2561-0x0000000009953000-0x0000000009974000-memory.dmp

memory/3464-2563-0x0000000000000000-mapping.dmp

memory/1196-2569-0x0000000009860000-0x0000000009871000-memory.dmp

memory/2592-2572-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/3956-2573-0x0000000000000000-mapping.dmp

memory/2592-2574-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2588-2581-0x0000000000000000-mapping.dmp

memory/972-2587-0x0000000000000000-mapping.dmp

memory/2644-2590-0x0000000000000000-mapping.dmp

memory/3880-2594-0x0000000000000000-mapping.dmp

memory/3612-2596-0x0000000000000000-mapping.dmp

memory/4080-2601-0x0000000000000000-mapping.dmp

memory/2592-2613-0x000000000AE10000-0x000000000AE21000-memory.dmp

memory/3636-2617-0x0000000000000000-mapping.dmp

memory/1196-2619-0x0000000009953000-0x0000000009974000-memory.dmp

memory/1196-2622-0x00000000099DE000-0x0000000009A00000-memory.dmp

memory/1196-2628-0x00000000099DE000-0x0000000009A00000-memory.dmp

memory/3636-2631-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/3636-2634-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2592-2633-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/3636-2635-0x000000000A230000-0x000000000A241000-memory.dmp

memory/2592-2632-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/1196-2636-0x0000000009860000-0x0000000009871000-memory.dmp

memory/1196-2640-0x0000000009AB0000-0x0000000009AB1000-memory.dmp

memory/1400-2646-0x0000000000000000-mapping.dmp

memory/3708-2652-0x0000000000000000-mapping.dmp

memory/3400-2658-0x0000000000000000-mapping.dmp

memory/2016-2660-0x0000000004350000-0x0000000004361000-memory.dmp

memory/4092-2665-0x0000000000000000-mapping.dmp

memory/3636-2667-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/1196-2668-0x0000000009860000-0x0000000009871000-memory.dmp

memory/1196-2670-0x0000000009953000-0x0000000009974000-memory.dmp

memory/1196-2676-0x0000000009A00000-0x0000000009A01000-memory.dmp

memory/3636-2678-0x0000000000080000-0x00000000000800B0-memory.dmp

memory/2016-2679-0x0000000004350000-0x0000000004361000-memory.dmp

memory/2016-2682-0x0000000004350000-0x0000000004361000-memory.dmp

memory/2016-2683-0x0000000004350000-0x0000000004361000-memory.dmp

memory/2016-2684-0x0000000004350000-0x0000000004361000-memory.dmp

memory/2016-2685-0x0000000004350000-0x0000000004361000-memory.dmp

memory/2016-2687-0x0000000004350000-0x0000000004361000-memory.dmp

memory/2016-2688-0x0000000004350000-0x0000000004361000-memory.dmp

memory/2016-2689-0x0000000004350000-0x0000000004361000-memory.dmp