a49d6efa641852bd8bf501ee0aa414626c334af6f707ab8a04cf16b8957e13aa

Analysis

max time kernel
46s
max time network
123s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
16/03/2024, 07:53

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

cd849346a352a38feb22d8941d2068d8.exe
Size

49KB
MD5

cd849346a352a38feb22d8941d2068d8
SHA1

9eb6a524d9185af11be1189bf583abde194dd35d
SHA256

a49d6efa641852bd8bf501ee0aa414626c334af6f707ab8a04cf16b8957e13aa
SHA512

bb940cecbc923f8e691fe077bc255bbc78e2ee3142eba9e698be6f6597c37f61b395188016db1b6b38f632f9ab7b47ecd79c062a2bf14fd1ad3a2a716ea4b7be
SSDEEP

768:0kv2vcaKsl+ZcUEsOLSQ/tWZqkPoK7UZbwHZe4inoejTGt2Caou33CbFrl2xy:0kv2XslyktwZUHZknoejT9IcCbFrIY

Score

7^/10

Malware Config

Signatures

Executes dropped EXE 64 IoCs

pid	Process
2060	SOUNDMAN.EXE
2688	SOUNDMAN.EXE
2764	SOUNDMAN.EXE
1720	SOUNDMAN.EXE
2600	SOUNDMAN.EXE
2932	SOUNDMAN.EXE
2424	SOUNDMAN.EXE
2736	SOUNDMAN.EXE
692	SOUNDMAN.EXE
1404	SOUNDMAN.EXE
2808	SOUNDMAN.EXE
2188	SOUNDMAN.EXE
2028	SOUNDMAN.EXE
2344	SOUNDMAN.EXE
756	SOUNDMAN.EXE
2716	SOUNDMAN.EXE
1472	SOUNDMAN.EXE
1524	SOUNDMAN.EXE
1780	SOUNDMAN.EXE
2336	SOUNDMAN.EXE
2864	SOUNDMAN.EXE
3064	SOUNDMAN.EXE
2876	SOUNDMAN.EXE
1848	SOUNDMAN.EXE
1568	SOUNDMAN.EXE
1808	SOUNDMAN.EXE
2076	SOUNDMAN.EXE
2132	SOUNDMAN.EXE
1040	SOUNDMAN.EXE
1816	SOUNDMAN.EXE
1488	SOUNDMAN.EXE
1632	SOUNDMAN.EXE
1752	SOUNDMAN.EXE
1464	SOUNDMAN.EXE
2120	SOUNDMAN.EXE
2260	SOUNDMAN.EXE
2288	SOUNDMAN.EXE
3012	SOUNDMAN.EXE
3068	SOUNDMAN.EXE
2840	SOUNDMAN.EXE
2184	SOUNDMAN.EXE
2064	SOUNDMAN.EXE
1616	SOUNDMAN.EXE
2564	SOUNDMAN.EXE
2592	SOUNDMAN.EXE
2280	SOUNDMAN.EXE
2844	SOUNDMAN.EXE
2624	SOUNDMAN.EXE
2764	SOUNDMAN.EXE
1720	SOUNDMAN.EXE
2972	SOUNDMAN.EXE
2924	SOUNDMAN.EXE
2020	SOUNDMAN.EXE
932	SOUNDMAN.EXE
1148	SOUNDMAN.EXE
1008	SOUNDMAN.EXE
1288	SOUNDMAN.EXE
1388	SOUNDMAN.EXE
2776	SOUNDMAN.EXE
3032	SOUNDMAN.EXE
1772	SOUNDMAN.EXE
1904	SOUNDMAN.EXE
1908	SOUNDMAN.EXE
784	SOUNDMAN.EXE

Loads dropped DLL 64 IoCs

pid	Process
1184	cd849346a352a38feb22d8941d2068d8.exe
1184	cd849346a352a38feb22d8941d2068d8.exe
2060	SOUNDMAN.EXE
2060	SOUNDMAN.EXE
2688	SOUNDMAN.EXE
2688	SOUNDMAN.EXE
2764	SOUNDMAN.EXE
2764	SOUNDMAN.EXE
1720	SOUNDMAN.EXE
1720	SOUNDMAN.EXE
2600	SOUNDMAN.EXE
2600	SOUNDMAN.EXE
2932	SOUNDMAN.EXE
2932	SOUNDMAN.EXE
2424	SOUNDMAN.EXE
2424	SOUNDMAN.EXE
2736	SOUNDMAN.EXE
2736	SOUNDMAN.EXE
692	SOUNDMAN.EXE
692	SOUNDMAN.EXE
1404	SOUNDMAN.EXE
1404	SOUNDMAN.EXE
2808	SOUNDMAN.EXE
2808	SOUNDMAN.EXE
2188	SOUNDMAN.EXE
2188	SOUNDMAN.EXE
2028	SOUNDMAN.EXE
2028	SOUNDMAN.EXE
2344	SOUNDMAN.EXE
2344	SOUNDMAN.EXE
756	SOUNDMAN.EXE
756	SOUNDMAN.EXE
2716	SOUNDMAN.EXE
2716	SOUNDMAN.EXE
1472	SOUNDMAN.EXE
1472	SOUNDMAN.EXE
1524	SOUNDMAN.EXE
1524	SOUNDMAN.EXE
1780	SOUNDMAN.EXE
1780	SOUNDMAN.EXE
2336	SOUNDMAN.EXE
2336	SOUNDMAN.EXE
2864	SOUNDMAN.EXE
2864	SOUNDMAN.EXE
3064	SOUNDMAN.EXE
3064	SOUNDMAN.EXE
2876	SOUNDMAN.EXE
2876	SOUNDMAN.EXE
1848	SOUNDMAN.EXE
1848	SOUNDMAN.EXE
1568	SOUNDMAN.EXE
1568	SOUNDMAN.EXE
1808	SOUNDMAN.EXE
1808	SOUNDMAN.EXE
2076	SOUNDMAN.EXE
2076	SOUNDMAN.EXE
2132	SOUNDMAN.EXE
2132	SOUNDMAN.EXE
1040	SOUNDMAN.EXE
1040	SOUNDMAN.EXE
1816	SOUNDMAN.EXE
1816	SOUNDMAN.EXE
1488	SOUNDMAN.EXE
1488	SOUNDMAN.EXE

Drops file in System32 directory 64 IoCs

description	ioc	Process
File opened for modification	C:\WINDOWS\SysWOW64\SOUNDMAN.EXE	SOUNDMAN.EXE
File opened for modification	C:\WINDOWS\SysWOW64\SOUNDMAN.EXE	SOUNDMAN.EXE
File opened for modification	C:\Windows\SysWOW64\error.dat	SOUNDMAN.EXE
File created	C:\WINDOWS\SysWOW64\SOUNDMAN.EXE	SOUNDMAN.EXE
File created	C:\WINDOWS\SysWOW64\SOUNDMAN.EXE	SOUNDMAN.EXE
File opened for modification	C:\Windows\SysWOW64\error.dat	SOUNDMAN.EXE
File opened for modification	C:\WINDOWS\SysWOW64\SOUNDMAN.EXE	SOUNDMAN.EXE
File created	C:\WINDOWS\SysWOW64\SOUNDMAN.EXE	SOUNDMAN.EXE
File opened for modification	C:\Windows\SysWOW64\error.dat	SOUNDMAN.EXE
File opened for modification	C:\Windows\SysWOW64\error.dat	SOUNDMAN.EXE
File created	C:\WINDOWS\SysWOW64\SOUNDMAN.EXE	SOUNDMAN.EXE
File opened for modification	C:\WINDOWS\SysWOW64\SOUNDMAN.EXE	cd849346a352a38feb22d8941d2068d8.exe
File created	C:\WINDOWS\SysWOW64\SOUNDMAN.EXE	SOUNDMAN.EXE
File opened for modification	C:\WINDOWS\SysWOW64\SOUNDMAN.EXE	SOUNDMAN.EXE
File opened for modification	C:\WINDOWS\SysWOW64\SOUNDMAN.EXE	SOUNDMAN.EXE
File opened for modification	C:\Windows\SysWOW64\error.dat	SOUNDMAN.EXE
File opened for modification	C:\WINDOWS\SysWOW64\SOUNDMAN.EXE	SOUNDMAN.EXE
File created	C:\WINDOWS\SysWOW64\SOUNDMAN.EXE	SOUNDMAN.EXE
File created	C:\WINDOWS\SysWOW64\SOUNDMAN.EXE	SOUNDMAN.EXE
File opened for modification	C:\WINDOWS\SysWOW64\SOUNDMAN.EXE	SOUNDMAN.EXE
File opened for modification	C:\WINDOWS\SysWOW64\SOUNDMAN.EXE	SOUNDMAN.EXE
File opened for modification	C:\Windows\SysWOW64\error.dat	SOUNDMAN.EXE
File opened for modification	C:\WINDOWS\SysWOW64\SOUNDMAN.EXE	SOUNDMAN.EXE
File opened for modification	C:\WINDOWS\SysWOW64\SOUNDMAN.EXE	SOUNDMAN.EXE
File opened for modification	C:\Windows\SysWOW64\error.dat	SOUNDMAN.EXE
File created	C:\WINDOWS\SysWOW64\SOUNDMAN.EXE	SOUNDMAN.EXE
File opened for modification	C:\Windows\SysWOW64\error.dat	SOUNDMAN.EXE
File opened for modification	C:\Windows\SysWOW64\error.dat	SOUNDMAN.EXE
File opened for modification	C:\Windows\SysWOW64\error.dat	SOUNDMAN.EXE
File opened for modification	C:\WINDOWS\SysWOW64\SOUNDMAN.EXE	SOUNDMAN.EXE
File opened for modification	C:\WINDOWS\SysWOW64\SOUNDMAN.EXE	SOUNDMAN.EXE
File opened for modification	C:\Windows\SysWOW64\error.dat	SOUNDMAN.EXE
File opened for modification	C:\WINDOWS\SysWOW64\SOUNDMAN.EXE	SOUNDMAN.EXE
File opened for modification	C:\Windows\SysWOW64\error.dat	SOUNDMAN.EXE
File created	C:\WINDOWS\SysWOW64\SOUNDMAN.EXE	SOUNDMAN.EXE
File created	C:\WINDOWS\SysWOW64\SOUNDMAN.EXE	SOUNDMAN.EXE
File opened for modification	C:\Windows\SysWOW64\error.dat	SOUNDMAN.EXE
File opened for modification	C:\Windows\SysWOW64\error.dat	SOUNDMAN.EXE
File opened for modification	C:\Windows\SysWOW64\error.dat	SOUNDMAN.EXE
File opened for modification	C:\Windows\SysWOW64\error.dat	SOUNDMAN.EXE
File opened for modification	C:\WINDOWS\SysWOW64\SOUNDMAN.EXE	SOUNDMAN.EXE
File opened for modification	C:\Windows\SysWOW64\error.dat	SOUNDMAN.EXE
File opened for modification	C:\WINDOWS\SysWOW64\SOUNDMAN.EXE	SOUNDMAN.EXE
File opened for modification	C:\WINDOWS\SysWOW64\SOUNDMAN.EXE	SOUNDMAN.EXE
File opened for modification	C:\WINDOWS\SysWOW64\SOUNDMAN.EXE	SOUNDMAN.EXE
File opened for modification	C:\Windows\SysWOW64\error.dat	SOUNDMAN.EXE
File created	C:\WINDOWS\SysWOW64\SOUNDMAN.EXE	SOUNDMAN.EXE
File opened for modification	C:\WINDOWS\SysWOW64\SOUNDMAN.EXE	SOUNDMAN.EXE
File opened for modification	C:\WINDOWS\SysWOW64\SOUNDMAN.EXE	SOUNDMAN.EXE
File opened for modification	C:\WINDOWS\SysWOW64\SOUNDMAN.EXE	SOUNDMAN.EXE
File created	C:\WINDOWS\SysWOW64\SOUNDMAN.EXE	SOUNDMAN.EXE
File created	C:\WINDOWS\SysWOW64\SOUNDMAN.EXE	SOUNDMAN.EXE
File opened for modification	C:\WINDOWS\SysWOW64\SOUNDMAN.EXE	SOUNDMAN.EXE
File opened for modification	C:\Windows\SysWOW64\error.dat	SOUNDMAN.EXE
File opened for modification	C:\WINDOWS\SysWOW64\SOUNDMAN.EXE	SOUNDMAN.EXE
File opened for modification	C:\Windows\SysWOW64\error.dat	SOUNDMAN.EXE
File opened for modification	C:\WINDOWS\SysWOW64\SOUNDMAN.EXE	SOUNDMAN.EXE
File opened for modification	C:\WINDOWS\SysWOW64\SOUNDMAN.EXE	SOUNDMAN.EXE
File created	C:\WINDOWS\SysWOW64\SOUNDMAN.EXE	SOUNDMAN.EXE
File opened for modification	C:\WINDOWS\SysWOW64\SOUNDMAN.EXE	SOUNDMAN.EXE
File opened for modification	C:\WINDOWS\SysWOW64\SOUNDMAN.EXE	SOUNDMAN.EXE
File created	C:\WINDOWS\SysWOW64\SOUNDMAN.EXE	SOUNDMAN.EXE
File opened for modification	C:\WINDOWS\SysWOW64\SOUNDMAN.EXE	SOUNDMAN.EXE
File opened for modification	C:\Windows\SysWOW64\error.dat	SOUNDMAN.EXE

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious use of SetWindowsHookEx 64 IoCs

pid	Process
1184	cd849346a352a38feb22d8941d2068d8.exe
2060	SOUNDMAN.EXE
2688	SOUNDMAN.EXE
2764	SOUNDMAN.EXE
1720	SOUNDMAN.EXE
2600	SOUNDMAN.EXE
2932	SOUNDMAN.EXE
2424	SOUNDMAN.EXE
2736	SOUNDMAN.EXE
692	SOUNDMAN.EXE
1404	SOUNDMAN.EXE
2808	SOUNDMAN.EXE
2188	SOUNDMAN.EXE
2028	SOUNDMAN.EXE
2344	SOUNDMAN.EXE
756	SOUNDMAN.EXE
2716	SOUNDMAN.EXE
1472	SOUNDMAN.EXE
1524	SOUNDMAN.EXE
1780	SOUNDMAN.EXE
2336	SOUNDMAN.EXE
2864	SOUNDMAN.EXE
3064	SOUNDMAN.EXE
2876	SOUNDMAN.EXE
1848	SOUNDMAN.EXE
1568	SOUNDMAN.EXE
1808	SOUNDMAN.EXE
2076	SOUNDMAN.EXE
2132	SOUNDMAN.EXE
1040	SOUNDMAN.EXE
1816	SOUNDMAN.EXE
1488	SOUNDMAN.EXE
1632	SOUNDMAN.EXE
1752	SOUNDMAN.EXE
1464	SOUNDMAN.EXE
2120	SOUNDMAN.EXE
2260	SOUNDMAN.EXE
2288	SOUNDMAN.EXE
3012	SOUNDMAN.EXE
3068	SOUNDMAN.EXE
2840	SOUNDMAN.EXE
2184	SOUNDMAN.EXE
1616	SOUNDMAN.EXE
2564	SOUNDMAN.EXE
2592	SOUNDMAN.EXE
2280	SOUNDMAN.EXE
2844	SOUNDMAN.EXE
2624	SOUNDMAN.EXE
2764	SOUNDMAN.EXE
1720	SOUNDMAN.EXE
2972	SOUNDMAN.EXE
2924	SOUNDMAN.EXE
2020	SOUNDMAN.EXE
932	SOUNDMAN.EXE
1148	SOUNDMAN.EXE
1008	SOUNDMAN.EXE
1288	SOUNDMAN.EXE
1388	SOUNDMAN.EXE
2776	SOUNDMAN.EXE
3032	SOUNDMAN.EXE
1772	SOUNDMAN.EXE
1904	SOUNDMAN.EXE
1908	SOUNDMAN.EXE
784	SOUNDMAN.EXE

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1184 wrote to memory of 2060	1184	cd849346a352a38feb22d8941d2068d8.exe	28
PID 1184 wrote to memory of 2060	1184	cd849346a352a38feb22d8941d2068d8.exe	28
PID 1184 wrote to memory of 2060	1184	cd849346a352a38feb22d8941d2068d8.exe	28
PID 1184 wrote to memory of 2060	1184	cd849346a352a38feb22d8941d2068d8.exe	28
PID 2060 wrote to memory of 2688	2060	SOUNDMAN.EXE	29
PID 2060 wrote to memory of 2688	2060	SOUNDMAN.EXE	29
PID 2060 wrote to memory of 2688	2060	SOUNDMAN.EXE	29
PID 2060 wrote to memory of 2688	2060	SOUNDMAN.EXE	29
PID 2688 wrote to memory of 2764	2688	SOUNDMAN.EXE	30
PID 2688 wrote to memory of 2764	2688	SOUNDMAN.EXE	30
PID 2688 wrote to memory of 2764	2688	SOUNDMAN.EXE	30
PID 2688 wrote to memory of 2764	2688	SOUNDMAN.EXE	30
PID 2764 wrote to memory of 1720	2764	SOUNDMAN.EXE	31
PID 2764 wrote to memory of 1720	2764	SOUNDMAN.EXE	31
PID 2764 wrote to memory of 1720	2764	SOUNDMAN.EXE	31
PID 2764 wrote to memory of 1720	2764	SOUNDMAN.EXE	31
PID 1720 wrote to memory of 2600	1720	SOUNDMAN.EXE	32
PID 1720 wrote to memory of 2600	1720	SOUNDMAN.EXE	32
PID 1720 wrote to memory of 2600	1720	SOUNDMAN.EXE	32
PID 1720 wrote to memory of 2600	1720	SOUNDMAN.EXE	32
PID 2600 wrote to memory of 2932	2600	SOUNDMAN.EXE	33
PID 2600 wrote to memory of 2932	2600	SOUNDMAN.EXE	33
PID 2600 wrote to memory of 2932	2600	SOUNDMAN.EXE	33
PID 2600 wrote to memory of 2932	2600	SOUNDMAN.EXE	33
PID 2932 wrote to memory of 2424	2932	SOUNDMAN.EXE	34
PID 2932 wrote to memory of 2424	2932	SOUNDMAN.EXE	34
PID 2932 wrote to memory of 2424	2932	SOUNDMAN.EXE	34
PID 2932 wrote to memory of 2424	2932	SOUNDMAN.EXE	34
PID 2424 wrote to memory of 2736	2424	SOUNDMAN.EXE	35
PID 2424 wrote to memory of 2736	2424	SOUNDMAN.EXE	35
PID 2424 wrote to memory of 2736	2424	SOUNDMAN.EXE	35
PID 2424 wrote to memory of 2736	2424	SOUNDMAN.EXE	35
PID 2736 wrote to memory of 692	2736	SOUNDMAN.EXE	36
PID 2736 wrote to memory of 692	2736	SOUNDMAN.EXE	36
PID 2736 wrote to memory of 692	2736	SOUNDMAN.EXE	36
PID 2736 wrote to memory of 692	2736	SOUNDMAN.EXE	36
PID 692 wrote to memory of 1404	692	SOUNDMAN.EXE	37
PID 692 wrote to memory of 1404	692	SOUNDMAN.EXE	37
PID 692 wrote to memory of 1404	692	SOUNDMAN.EXE	37
PID 692 wrote to memory of 1404	692	SOUNDMAN.EXE	37
PID 1404 wrote to memory of 2808	1404	SOUNDMAN.EXE	38
PID 1404 wrote to memory of 2808	1404	SOUNDMAN.EXE	38
PID 1404 wrote to memory of 2808	1404	SOUNDMAN.EXE	38
PID 1404 wrote to memory of 2808	1404	SOUNDMAN.EXE	38
PID 2808 wrote to memory of 2188	2808	SOUNDMAN.EXE	39
PID 2808 wrote to memory of 2188	2808	SOUNDMAN.EXE	39
PID 2808 wrote to memory of 2188	2808	SOUNDMAN.EXE	39
PID 2808 wrote to memory of 2188	2808	SOUNDMAN.EXE	39
PID 2188 wrote to memory of 2028	2188	SOUNDMAN.EXE	40
PID 2188 wrote to memory of 2028	2188	SOUNDMAN.EXE	40
PID 2188 wrote to memory of 2028	2188	SOUNDMAN.EXE	40
PID 2188 wrote to memory of 2028	2188	SOUNDMAN.EXE	40
PID 2028 wrote to memory of 2344	2028	SOUNDMAN.EXE	41
PID 2028 wrote to memory of 2344	2028	SOUNDMAN.EXE	41
PID 2028 wrote to memory of 2344	2028	SOUNDMAN.EXE	41
PID 2028 wrote to memory of 2344	2028	SOUNDMAN.EXE	41
PID 2344 wrote to memory of 756	2344	SOUNDMAN.EXE	42
PID 2344 wrote to memory of 756	2344	SOUNDMAN.EXE	42
PID 2344 wrote to memory of 756	2344	SOUNDMAN.EXE	42
PID 2344 wrote to memory of 756	2344	SOUNDMAN.EXE	42
PID 756 wrote to memory of 2716	756	SOUNDMAN.EXE	43
PID 756 wrote to memory of 2716	756	SOUNDMAN.EXE	43
PID 756 wrote to memory of 2716	756	SOUNDMAN.EXE	43
PID 756 wrote to memory of 2716	756	SOUNDMAN.EXE	43

C:\Users\Admin\AppData\Local\Temp\cd849346a352a38feb22d8941d2068d8.exe
"C:\Users\Admin\AppData\Local\Temp\cd849346a352a38feb22d8941d2068d8.exe"
1⤵
- Loads dropped DLL
- Drops file in System32 directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1184
- C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
  "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:2060
- - C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
    "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Suspicious use of SetWindowsHookEx
    - Suspicious use of WriteProcessMemory
    PID:2688
  - - C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
      "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      Suspicious use of SetWindowsHookEx
      Suspicious use of WriteProcessMemory
      PID:2764
    - - C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        Suspicious use of SetWindowsHookEx
        Suspicious use of WriteProcessMemory
        
        PID:1720
      - C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        6⤵
        Executes dropped EXE
        Loads dropped DLL
        Suspicious use of SetWindowsHookEx
        Suspicious use of WriteProcessMemory
        
        PID:2600
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        7⤵
        Executes dropped EXE
        Loads dropped DLL
        Suspicious use of SetWindowsHookEx
        Suspicious use of WriteProcessMemory
        
        PID:2932
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        8⤵
        Executes dropped EXE
        Loads dropped DLL
        Suspicious use of SetWindowsHookEx
        Suspicious use of WriteProcessMemory
        
        PID:2424
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        9⤵
        Executes dropped EXE
        Loads dropped DLL
        Suspicious use of SetWindowsHookEx
        Suspicious use of WriteProcessMemory
        
        PID:2736
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        10⤵
        Executes dropped EXE
        Loads dropped DLL
        Suspicious use of SetWindowsHookEx
        Suspicious use of WriteProcessMemory
        
        PID:692
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        11⤵
        Executes dropped EXE
        Loads dropped DLL
        Suspicious use of SetWindowsHookEx
        Suspicious use of WriteProcessMemory
        
        PID:1404
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        12⤵
        Executes dropped EXE
        Loads dropped DLL
        Suspicious use of SetWindowsHookEx
        Suspicious use of WriteProcessMemory
        
        PID:2808
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        13⤵
        Executes dropped EXE
        Loads dropped DLL
        Suspicious use of SetWindowsHookEx
        Suspicious use of WriteProcessMemory
        
        PID:2188
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        14⤵
        Executes dropped EXE
        Loads dropped DLL
        Suspicious use of SetWindowsHookEx
        Suspicious use of WriteProcessMemory
        
        PID:2028
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        15⤵
        Executes dropped EXE
        Loads dropped DLL
        Suspicious use of SetWindowsHookEx
        Suspicious use of WriteProcessMemory
        
        PID:2344
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        16⤵
        Executes dropped EXE
        Loads dropped DLL
        Drops file in System32 directory
        Suspicious use of SetWindowsHookEx
        Suspicious use of WriteProcessMemory
        
        PID:756
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        17⤵
        Executes dropped EXE
        Loads dropped DLL
        Suspicious use of SetWindowsHookEx
        
        PID:2716
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        18⤵
        Executes dropped EXE
        Loads dropped DLL
        Suspicious use of SetWindowsHookEx
        
        PID:1472
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        19⤵
        Executes dropped EXE
        Loads dropped DLL
        Suspicious use of SetWindowsHookEx
        
        PID:1524
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        20⤵
        Executes dropped EXE
        Loads dropped DLL
        Suspicious use of SetWindowsHookEx
        
        PID:1780
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        21⤵
        Executes dropped EXE
        Loads dropped DLL
        Suspicious use of SetWindowsHookEx
        
        PID:2336
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        22⤵
        Executes dropped EXE
        Loads dropped DLL
        Drops file in System32 directory
        Suspicious use of SetWindowsHookEx
        
        PID:2864
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        23⤵
        Executes dropped EXE
        Loads dropped DLL
        Drops file in System32 directory
        Suspicious use of SetWindowsHookEx
        
        PID:3064
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        24⤵
        Executes dropped EXE
        Loads dropped DLL
        Suspicious use of SetWindowsHookEx
        
        PID:2876
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        25⤵
        Executes dropped EXE
        Loads dropped DLL
        Drops file in System32 directory
        Suspicious use of SetWindowsHookEx
        
        PID:1848
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        26⤵
        Executes dropped EXE
        Loads dropped DLL
        Suspicious use of SetWindowsHookEx
        
        PID:1568
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        27⤵
        Executes dropped EXE
        Loads dropped DLL
        Suspicious use of SetWindowsHookEx
        
        PID:1808
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        28⤵
        Executes dropped EXE
        Loads dropped DLL
        Suspicious use of SetWindowsHookEx
        
        PID:2076
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        29⤵
        Executes dropped EXE
        Loads dropped DLL
        Suspicious use of SetWindowsHookEx
        
        PID:2132
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        30⤵
        Executes dropped EXE
        Loads dropped DLL
        Suspicious use of SetWindowsHookEx
        
        PID:1040
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        31⤵
        Executes dropped EXE
        Loads dropped DLL
        Suspicious use of SetWindowsHookEx
        
        PID:1816
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        32⤵
        Executes dropped EXE
        Loads dropped DLL
        Suspicious use of SetWindowsHookEx
        
        PID:1488
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        33⤵
        Executes dropped EXE
        Suspicious use of SetWindowsHookEx
        
        PID:1632
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        34⤵
        Executes dropped EXE
        Suspicious use of SetWindowsHookEx
        
        PID:1752
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        35⤵
        Executes dropped EXE
        Suspicious use of SetWindowsHookEx
        
        PID:1464
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        36⤵
        Executes dropped EXE
        Drops file in System32 directory
        Suspicious use of SetWindowsHookEx
        
        PID:2120
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        37⤵
        Executes dropped EXE
        Suspicious use of SetWindowsHookEx
        
        PID:2260
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        38⤵
        Executes dropped EXE
        Suspicious use of SetWindowsHookEx
        
        PID:2288
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        39⤵
        Executes dropped EXE
        Suspicious use of SetWindowsHookEx
        
        PID:3012
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        40⤵
        Executes dropped EXE
        Suspicious use of SetWindowsHookEx
        
        PID:3068
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        41⤵
        Executes dropped EXE
        Drops file in System32 directory
        Suspicious use of SetWindowsHookEx
        
        PID:2840
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        42⤵
        Executes dropped EXE
        Drops file in System32 directory
        Suspicious use of SetWindowsHookEx
        
        PID:2184
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        43⤵
        Executes dropped EXE
        
        PID:2064
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        44⤵
        Executes dropped EXE
        Suspicious use of SetWindowsHookEx
        
        PID:1616
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        45⤵
        Executes dropped EXE
        Suspicious use of SetWindowsHookEx
        
        PID:2564
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        46⤵
        Executes dropped EXE
        Drops file in System32 directory
        Suspicious use of SetWindowsHookEx
        
        PID:2592
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        47⤵
        Executes dropped EXE
        Suspicious use of SetWindowsHookEx
        
        PID:2280
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        48⤵
        Executes dropped EXE
        Suspicious use of SetWindowsHookEx
        
        PID:2844
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        49⤵
        Executes dropped EXE
        Suspicious use of SetWindowsHookEx
        
        PID:2624
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        50⤵
        Executes dropped EXE
        Suspicious use of SetWindowsHookEx
        
        PID:2764
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        51⤵
        Executes dropped EXE
        Suspicious use of SetWindowsHookEx
        
        PID:1720
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        52⤵
        Executes dropped EXE
        Suspicious use of SetWindowsHookEx
        
        PID:2972
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        53⤵
        Executes dropped EXE
        Suspicious use of SetWindowsHookEx
        
        PID:2924
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        54⤵
        Executes dropped EXE
        Suspicious use of SetWindowsHookEx
        
        PID:2020
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        55⤵
        Executes dropped EXE
        Suspicious use of SetWindowsHookEx
        
        PID:932
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        56⤵
        Executes dropped EXE
        Suspicious use of SetWindowsHookEx
        
        PID:1148
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        57⤵
        Executes dropped EXE
        Suspicious use of SetWindowsHookEx
        
        PID:1008
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        58⤵
        Executes dropped EXE
        Suspicious use of SetWindowsHookEx
        
        PID:1288
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        59⤵
        Executes dropped EXE
        Suspicious use of SetWindowsHookEx
        
        PID:1388
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        60⤵
        Executes dropped EXE
        Drops file in System32 directory
        Suspicious use of SetWindowsHookEx
        
        PID:2776
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        61⤵
        Executes dropped EXE
        Suspicious use of SetWindowsHookEx
        
        PID:3032
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        62⤵
        Executes dropped EXE
        Suspicious use of SetWindowsHookEx
        
        PID:1772
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        63⤵
        Executes dropped EXE
        Suspicious use of SetWindowsHookEx
        
        PID:1904
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        64⤵
        Executes dropped EXE
        Drops file in System32 directory
        Suspicious use of SetWindowsHookEx
        
        PID:1908
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        65⤵
        Executes dropped EXE
        Suspicious use of SetWindowsHookEx
        
        PID:784
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        66⤵
        Drops file in System32 directory
        
        PID:1952
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        67⤵
        
        PID:1924
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        68⤵
        
        PID:792
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        69⤵
        
        PID:924
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        70⤵
        
        PID:756
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        71⤵
        
        PID:1328
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        72⤵
        
        PID:1268
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        73⤵
        
        PID:2100
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        74⤵
        Drops file in System32 directory
        
        PID:820
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        75⤵
        
        PID:2536
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        76⤵
        Drops file in System32 directory
        
        PID:2984
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        77⤵
        Drops file in System32 directory
        
        PID:2160
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        78⤵
        
        PID:2868
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        79⤵
        Drops file in System32 directory
        
        PID:2852
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        80⤵
        
        PID:888
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        81⤵
        
        PID:764
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        82⤵
        
        PID:2140
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        83⤵
        Drops file in System32 directory
        
        PID:1508
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        84⤵
        
        PID:1040
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        85⤵
        Drops file in System32 directory
        
        PID:2980
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        86⤵
        Drops file in System32 directory
        
        PID:1372
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        87⤵
        Drops file in System32 directory
        
        PID:1200
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        88⤵
        
        PID:884
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        89⤵
        
        PID:596
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        90⤵
        
        PID:2120
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        91⤵
        
        PID:1664
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        92⤵
        Drops file in System32 directory
        
        PID:2104
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        93⤵
        
        PID:2244
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        94⤵
        
        PID:2252
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        95⤵
        
        PID:2524
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        96⤵
        
        PID:1624
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        97⤵
        
        PID:2296
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        98⤵
        Drops file in System32 directory
        
        PID:2956
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        99⤵
        
        PID:2660
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        100⤵
        
        PID:364
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        101⤵
        Drops file in System32 directory
        
        PID:2632
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        102⤵
        Drops file in System32 directory
        
        PID:2688
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        103⤵
        
        PID:2968
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        104⤵
        Drops file in System32 directory
        
        PID:2460
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        105⤵
        
        PID:1056
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        106⤵
        Drops file in System32 directory
        
        PID:2636
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        107⤵
        
        PID:2224
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        108⤵
        Drops file in System32 directory
        
        PID:2924
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        109⤵
        
        PID:2020
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        110⤵
        Drops file in System32 directory
        
        PID:2704
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        111⤵
        
        PID:2784
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        112⤵
        
        PID:276
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        113⤵
        Drops file in System32 directory
        
        PID:2828
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        114⤵
        Drops file in System32 directory
        
        PID:2824
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        115⤵
        
        PID:2776
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        116⤵
        
        PID:3032
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        117⤵
        
        PID:1772
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        118⤵
        
        PID:1904
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        119⤵
        
        PID:1908
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        120⤵
        
        PID:1656
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        121⤵
        
        PID:1952
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        122⤵
        Drops file in System32 directory
        
        PID:1924
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        123⤵
        
        PID:1208
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        124⤵
        Drops file in System32 directory
        
        PID:2036
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        125⤵
        
        PID:1452
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        126⤵
        
        PID:2324
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        127⤵
        
        PID:2312
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        128⤵
        
        PID:2308
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        129⤵
        
        PID:2152
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        130⤵
        
        PID:2620
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        131⤵
        
        PID:2160
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        132⤵
        
        PID:396
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        133⤵
        
        PID:1808
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        134⤵
        
        PID:2056
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        135⤵
        
        PID:3052
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        136⤵
        
        PID:1844
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        137⤵
        Drops file in System32 directory
        
        PID:1488
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        138⤵
        Drops file in System32 directory
        
        PID:816
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        139⤵
        
        PID:1752
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        140⤵
        Drops file in System32 directory
        
        PID:624
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        141⤵
        
        PID:596
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        142⤵
        Drops file in System32 directory
        
        PID:2360
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        143⤵
        Drops file in System32 directory
        
        PID:1412
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        144⤵
        
        PID:1172
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        145⤵
        
        PID:3068
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        146⤵
        Drops file in System32 directory
        
        PID:1620
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        147⤵
        
        PID:3060
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        148⤵
        
        PID:1628
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        149⤵
        
        PID:2584
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        150⤵
        
        PID:2956
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        151⤵
        Drops file in System32 directory
        
        PID:2680
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        152⤵
        
        PID:364
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        153⤵
        
        PID:2772
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        154⤵
        Drops file in System32 directory
        
        PID:2552
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        155⤵
        Drops file in System32 directory
        
        PID:2572
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        156⤵
        
        PID:2624
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        157⤵
        
        PID:1056
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        158⤵
        
        PID:2388
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        159⤵
        
        PID:1740
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        160⤵
        Drops file in System32 directory
        
        PID:2720
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        161⤵
        
        PID:2704
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        162⤵
        Drops file in System32 directory
        
        PID:2820
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        163⤵
        Drops file in System32 directory
        
        PID:1484
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        164⤵
        
        PID:2828
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        165⤵
        
        PID:2188
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        166⤵
        
        PID:1532
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        167⤵
        
        PID:1660
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        168⤵
        
        PID:1672
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        169⤵
        
        PID:2428
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        170⤵
        
        PID:1656
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        171⤵
        
        PID:1948
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        172⤵
        
        PID:1376
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        173⤵
        
        PID:1548
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        174⤵
        
        PID:2008
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        175⤵
        Drops file in System32 directory
        
        PID:2200
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        176⤵
        
        PID:2308
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        177⤵
        
        PID:1848
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        178⤵
        
        PID:2160
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        179⤵
        
        PID:1780
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        180⤵
        
        PID:2132
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        181⤵
        
        PID:1816
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        182⤵
        
        PID:3052
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        183⤵
        
        PID:1844
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        184⤵
        
        PID:1196
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        185⤵
        Drops file in System32 directory
        
        PID:2264
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        186⤵
        
        PID:3040
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        187⤵
        Drops file in System32 directory
        
        PID:1856
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        188⤵
        
        PID:988
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        189⤵
        
        PID:1144
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        190⤵
        
        PID:556
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        191⤵
        Drops file in System32 directory
        
        PID:1736
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        192⤵
        Drops file in System32 directory
        
        PID:1620
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        193⤵
        
        PID:2520
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        194⤵
        
        PID:2296
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        195⤵
        
        PID:2676
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        196⤵
        Drops file in System32 directory
        
        PID:2560
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        197⤵
        
        PID:2680
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        198⤵
        
        PID:2464
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        199⤵
        
        PID:2920
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        200⤵
        
        PID:2580
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        201⤵
        
        PID:2512
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        202⤵
        
        PID:2052
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        203⤵
        Drops file in System32 directory
        
        PID:1056
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        204⤵
        
        PID:2388
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        205⤵
        
        PID:268
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        206⤵
        
        PID:1476
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        207⤵
        Drops file in System32 directory
        
        PID:2784
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        208⤵
        
        PID:2820
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        209⤵
        
        PID:2812
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        210⤵
        
        PID:2824
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        211⤵
        Drops file in System32 directory
        
        PID:2188
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        212⤵
        
        PID:1688
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        213⤵
        
        PID:604
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        214⤵
        
        PID:1636
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        215⤵
        
        PID:1572
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        216⤵
        
        PID:2500
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        217⤵
        
        PID:1952
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        218⤵
        Drops file in System32 directory
        
        PID:924
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        219⤵
        
        PID:1328
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        220⤵
        
        PID:1268
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        221⤵
        Drops file in System32 directory
        
        PID:1500
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        222⤵
        
        PID:1748
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        223⤵
        
        PID:1716
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        224⤵
        
        PID:764
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        225⤵
        
        PID:1780
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        226⤵
        
        PID:1576
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        227⤵
        
        PID:1308
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        228⤵
        
        PID:1372
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        229⤵
        
        PID:1972
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        230⤵
        
        PID:1060
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        231⤵
        
        PID:2384
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        232⤵
        
        PID:596
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        233⤵
        Drops file in System32 directory
        
        PID:1856
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        234⤵
        
        PID:2372
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        235⤵
        
        PID:1096
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        236⤵
        Drops file in System32 directory
        
        PID:2244
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        237⤵
        
        PID:1732
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        238⤵
        
        PID:1624
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        239⤵
        
        PID:2648
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        240⤵
        
        PID:2544
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        241⤵
        
        PID:2996
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        242⤵
        
        PID:2848
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        243⤵
        
        PID:3016
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        244⤵
        
        PID:2664
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        245⤵
        
        PID:2680
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        246⤵
        
        PID:1760
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        247⤵
        
        PID:2644
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        248⤵
        
        PID:2572
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        249⤵
        
        PID:2636
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        250⤵
        
        PID:2932
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        251⤵
        
        PID:2020
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        252⤵
        
        PID:2612
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        253⤵
        
        PID:1192
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        254⤵
        
        PID:1900
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        255⤵
        
        PID:2820
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        256⤵
        
        PID:880
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        257⤵
        
        PID:2024
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        258⤵
        
        PID:936
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        259⤵
        
        PID:1772
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        260⤵
        
        PID:2228
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        261⤵
        
        PID:1980
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        262⤵
        
        PID:740
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        263⤵
        
        PID:1236
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        264⤵
        
        PID:1540
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        265⤵
        
        PID:1524
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        266⤵
        
        PID:916
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        267⤵
        
        PID:2528
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        268⤵
        
        PID:2200
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        269⤵
        
        PID:1568
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        270⤵
        
        PID:1296
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        271⤵
        
        PID:1716
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        272⤵
        
        PID:1808
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        273⤵
        
        PID:2132
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        274⤵
        
        PID:1960
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        275⤵
        
        PID:2140
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        276⤵
        
        PID:2980
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        277⤵
        
        PID:1152
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        278⤵
        
        PID:2264
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        279⤵
        
        PID:2192
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        280⤵
        
        PID:1592
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        281⤵
        
        PID:596
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        282⤵
        
        PID:988
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        283⤵
        
        PID:2356
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        284⤵
        
        PID:856
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        285⤵
        
        PID:2244
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        286⤵
        
        PID:3060
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        287⤵
        
        PID:2964
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        288⤵
        
        PID:2148
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        289⤵
        
        PID:2568
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        290⤵
        
        PID:2564
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        291⤵
        
        PID:2632
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        292⤵
        
        PID:2608
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        293⤵
        
        PID:2552
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        294⤵
        
        PID:2940
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        295⤵
        
        PID:2660
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        296⤵
        
        PID:2224
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        297⤵
        
        PID:796
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        298⤵
        
        PID:436
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        299⤵
        
        PID:1164
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        300⤵
        
        PID:2804
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        301⤵
        
        PID:2816
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        302⤵
        
        PID:1192
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        303⤵
        
        PID:2108
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        304⤵
        
        PID:2508
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        305⤵
        
        PID:880
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        306⤵
        
        PID:2412
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        307⤵
        
        PID:1392
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        308⤵
        
        PID:1636
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        309⤵
        
        PID:1656
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        310⤵
        
        PID:2408
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        311⤵
        
        PID:1480
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        312⤵
        
        PID:1548
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        313⤵
        
        PID:1536
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        314⤵
        
        PID:328
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        315⤵
        
        PID:2620
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        316⤵
        
        PID:1748
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        317⤵
        
        PID:1552
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        318⤵
        
        PID:3000
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        319⤵
        
        PID:1780
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        320⤵
        
        PID:1576
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        321⤵
        
        PID:1852
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        322⤵
        
        PID:2040
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        323⤵
        
        PID:1132
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        324⤵
        
        PID:2260
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        325⤵
        
        PID:2304
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        326⤵
        
        PID:1560
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        327⤵
        
        PID:3044
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        328⤵
        
        PID:1108
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        329⤵
        
        PID:3012
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        330⤵
        
        PID:1096
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        331⤵
        
        PID:856
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        332⤵
        
        PID:1736
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        333⤵
        
        PID:3060
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        334⤵
        
        PID:2296
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        335⤵
        
        PID:2316
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        336⤵
        
        PID:2184
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        337⤵
        
        PID:2448
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        338⤵
        
        PID:1732
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        339⤵
        
        PID:2608
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        340⤵
        
        PID:2552
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        341⤵
        
        PID:2624
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        342⤵
        
        PID:2772
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        343⤵
        
        PID:1056
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        344⤵
        
        PID:1148
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        345⤵
        
        PID:2728
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        346⤵
        
        PID:276
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        347⤵
        
        PID:2904
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        348⤵
        
        PID:1928
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        349⤵
        
        PID:1504
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        350⤵
        
        PID:2824
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        351⤵
        
        PID:1904
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        352⤵
        
        PID:1688
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        353⤵
        
        PID:2800
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        354⤵
        
        PID:1392
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        355⤵
        
        PID:1636
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        356⤵
        
        PID:1728
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        357⤵
        
        PID:2232
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        358⤵
        
        PID:1524
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        359⤵
        
        PID:916
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        360⤵
        
        PID:1328
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        361⤵
        
        PID:2872
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        362⤵
        
        PID:2984
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        363⤵
        
        PID:1848
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        364⤵
        
        PID:2056
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        365⤵
        
        PID:1104
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        366⤵
        
        PID:1912
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        367⤵
        
        PID:1612
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        368⤵
        
        PID:1632
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        369⤵
        
        PID:1064
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        370⤵
        
        PID:2980
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        371⤵
        
        PID:676
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        372⤵
        
        PID:2260
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        373⤵
        
        PID:2000
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        374⤵
        
        PID:2884
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        375⤵
        
        PID:1412
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        376⤵
        
        PID:2372
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        377⤵
        
        PID:988
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        378⤵
        
        PID:2252
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        379⤵
        
        PID:1616
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        380⤵
        
        PID:2244
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        381⤵
        
        PID:2684
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        382⤵
        
        PID:2996
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        383⤵
        
        PID:1704
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        384⤵
        
        PID:2280
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        385⤵
        
        PID:2468
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        386⤵
        
        PID:2540
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        387⤵
        
        PID:2920
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        388⤵
        
        PID:2600
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        389⤵
        
        PID:2420
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        390⤵
        
        PID:2928
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        391⤵
        
        PID:268
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        392⤵
        
        PID:436
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        393⤵
        
        PID:1000
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        394⤵
        
        PID:2916
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        395⤵
        
        PID:2784
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        396⤵
        
        PID:1900
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        397⤵
        
        PID:2776
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        398⤵
        
        PID:2508
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        399⤵
        
        PID:880
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        400⤵
        
        PID:604
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        401⤵
        
        PID:1396
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        402⤵
        
        PID:2500
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        403⤵
        
        PID:2716
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        404⤵
        
        PID:2408
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        405⤵
        
        PID:2036
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        406⤵
        
        PID:1524
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        407⤵
        
        PID:2100
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        408⤵
        
        PID:2200
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        409⤵
        
        PID:1748
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        410⤵
        
        PID:1552
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        411⤵
        
        PID:240
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        412⤵
        
        PID:1964
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        413⤵
        
        PID:1040
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        414⤵
        
        PID:1508
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        415⤵
        
        PID:1452
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        416⤵
        
        PID:1064
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        417⤵
        
        PID:2264
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        418⤵
        
        PID:1464
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        419⤵
        
        PID:2288
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        420⤵
        
        PID:596
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        421⤵
        
        PID:2884
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        422⤵
        
        PID:3068
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        423⤵
        
        PID:2372
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        424⤵
        
        PID:988
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        425⤵
        
        PID:856
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        426⤵
        
        PID:2584
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        427⤵
        
        PID:1584
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        428⤵
        
        PID:2628
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        429⤵
        
        PID:3016
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        430⤵
        
        PID:2464
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        431⤵
        
        PID:2756
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        432⤵
        
        PID:2836
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        433⤵
        
        PID:1760
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        434⤵
        
        PID:2972
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        435⤵
        
        PID:2736
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        436⤵
        
        PID:2740
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        437⤵
        
        PID:2772
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        438⤵
        
        PID:2720
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        439⤵
        
        PID:2456
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        440⤵
        
        PID:2548
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        441⤵
        
        PID:1288
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        442⤵
        
        PID:2796
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        443⤵
        
        PID:2052
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        444⤵
        
        PID:1700
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        445⤵
        
        PID:2108
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        446⤵
        
        PID:2824
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        447⤵
        
        PID:1660
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        448⤵
        
        PID:880
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        449⤵
        
        PID:2652
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        450⤵
        
        PID:1396
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        451⤵
        
        PID:1376
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        452⤵
        
        PID:2716
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        453⤵
        
        PID:2708
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        454⤵
        
        PID:2336
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        455⤵
        
        PID:328
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        456⤵
        
        PID:1536
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        457⤵
        
        PID:1268
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        458⤵
        
        PID:2200
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        459⤵
        
        PID:2164
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        460⤵
        
        PID:2268
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        461⤵
        
        PID:1684
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        462⤵
        
        PID:888
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        463⤵
        
        PID:1612
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        464⤵
        
        PID:1508
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        465⤵
        
        PID:1152
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        466⤵
        
        PID:2392
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        467⤵
        
        PID:2364
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        468⤵
        
        PID:1856
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        469⤵
        
        PID:3044
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        470⤵
        
        PID:2992
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        471⤵
        
        PID:1412
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        472⤵
        
        PID:2840
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        473⤵
        
        PID:2372
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        474⤵
        
        PID:1096
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        475⤵
        
        PID:2252
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        476⤵
        
        PID:2296
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        477⤵
        
        PID:2064
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        478⤵
        
        PID:364
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        479⤵
        
        PID:2540
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        480⤵
        
        PID:1344
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        481⤵
        
        PID:2572
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        482⤵
        
        PID:2780
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        483⤵
        
        PID:724
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        484⤵
        
        PID:2424
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        485⤵
        
        PID:2444
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        486⤵
        
        PID:2456
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        487⤵
        
        PID:2440
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        488⤵
        
        PID:1084
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        489⤵
        
        PID:1608
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        490⤵
        
        PID:3032
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        491⤵
        
        PID:2828
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        492⤵
        
        PID:2188
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        493⤵
        
        PID:2824
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        494⤵
        
        PID:1660
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        495⤵
        
        PID:604
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        496⤵
        
        PID:1392
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        497⤵
        
        PID:1396
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        498⤵
        
        PID:1540
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        499⤵
        
        PID:2908
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        500⤵
        
        PID:2008
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        501⤵
        
        PID:1924
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        502⤵
        
        PID:328
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        503⤵
        
        PID:2308
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        504⤵
        
        PID:1568
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        505⤵
        
        PID:1848
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        506⤵
        
        PID:3056
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        507⤵
        
        PID:1964
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        508⤵
        
        PID:1136
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        509⤵
        
        PID:1372
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        510⤵
        
        PID:1452
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        511⤵
        
        PID:1296
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        512⤵
        
        PID:1712
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        513⤵
        
        PID:1996
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        514⤵
        
        PID:2364
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        515⤵
        
        PID:3040
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        516⤵
        
        PID:1488
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        517⤵
        
        PID:2532
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        518⤵
        
        PID:1412
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        519⤵
        
        PID:2124
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        520⤵
        
        PID:3060
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        521⤵
        
        PID:2404
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        522⤵
        
        PID:1584
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        523⤵
        
        PID:2564
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        524⤵
        
        PID:1784
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        525⤵
        
        PID:2468
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        526⤵
        
        PID:1732
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        527⤵
        
        PID:2220
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        528⤵
        
        PID:1760
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        529⤵
        
        PID:2512
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        530⤵
        
        PID:2320
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        531⤵
        
        PID:796
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        532⤵
        
        PID:1056
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        533⤵
        
        PID:724
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        534⤵
        
        PID:2436
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        535⤵
        
        PID:2504
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        536⤵
        
        PID:2480
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        537⤵
        
        PID:2796
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        538⤵
        
        PID:2816
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        539⤵
        
        PID:2052
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        540⤵
        
        PID:1532
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        541⤵
        
        PID:2828
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        542⤵
        
        PID:1484
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        543⤵
        
        PID:880
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        544⤵
        
        PID:2692
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        545⤵
        
        PID:2428
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        546⤵
        
        PID:2724
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        547⤵
        
        PID:1396
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        548⤵
        
        PID:1540
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        549⤵
        
        PID:2908
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        550⤵
        
        PID:1500
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        551⤵
        
        PID:2868
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        552⤵
        
        PID:328
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        553⤵
        
        PID:2984
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        554⤵
        
        PID:2056
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        555⤵
        
        PID:1848
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        556⤵
        
        PID:1684
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        557⤵
        
        PID:1308
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        558⤵
        
        PID:2140
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        559⤵
        
        PID:1752
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        560⤵
        
        PID:1452
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        561⤵
        
        PID:2384
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        562⤵
        
        PID:2376
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        563⤵
        
        PID:1708
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        564⤵
        
        PID:1144
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        565⤵
        
        PID:1092
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        566⤵
        
        PID:2732
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        567⤵
        
        PID:3012
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        568⤵
        
        PID:1200
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        569⤵
        
        PID:2124
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        570⤵
        
        PID:3060
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        571⤵
        
        PID:2296
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        572⤵
        
        PID:1704
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        573⤵
        
        PID:2564
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        574⤵
        
        PID:2632
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        575⤵
        
        PID:2064
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        576⤵
        
        PID:2580
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        577⤵
        
        PID:1344
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        578⤵
        
        PID:2772
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        579⤵
        
        PID:584
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        580⤵
        
        PID:724
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        581⤵
        
        PID:572
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        582⤵
        
        PID:1388
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        583⤵
        
        PID:1192
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        584⤵
        
        PID:2784
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        585⤵
        
        PID:1644
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        586⤵
        
        PID:2484
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        587⤵
        
        PID:2188
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        588⤵
        
        PID:2828
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        589⤵
        
        PID:1980
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        590⤵
        
        PID:1080
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        591⤵
        
        PID:2428
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        592⤵
        
        PID:2144
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        593⤵
        
        PID:2808
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        594⤵
        
        PID:2128
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        595⤵
        
        PID:2872
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        596⤵
        
        PID:2336
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        597⤵
        
        PID:1680
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        598⤵
        
        PID:2200
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        599⤵
        
        PID:2332
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        600⤵
        
        PID:2056
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        601⤵
        
        PID:1036
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        602⤵
        
        PID:1816
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        603⤵
        
        PID:1512
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        604⤵
        
        PID:1844
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        605⤵
        
        PID:2980
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        606⤵
        
        PID:1592
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        607⤵
        
        PID:1296
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        608⤵
        
        PID:2384
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        609⤵
        
        PID:956
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        610⤵
        
        PID:2884
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        611⤵
        
        PID:556
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        612⤵
        
        PID:988
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        613⤵
        
        PID:2648
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        614⤵
        
        PID:2372
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        615⤵
        
        PID:944
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        616⤵
        
        PID:1184
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        617⤵
        
        PID:2968
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        618⤵
        
        PID:2688
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        619⤵
        
        PID:2148
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        620⤵
        
        PID:2556
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        621⤵
        
        PID:1784
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        622⤵
        
        PID:2644
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        623⤵
        
        PID:1760
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        624⤵
        
        PID:2660
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        625⤵
        
        PID:2936
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        626⤵
        
        PID:2628
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        627⤵
        
        PID:2740
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        628⤵
        
        PID:1148
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        629⤵
        
        PID:584
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        630⤵
        
        PID:2728
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        631⤵
        
        PID:572
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        632⤵
        
        PID:2820
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        633⤵
        
        PID:2388
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        634⤵
        
        PID:1504
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        635⤵
        
        PID:784
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        636⤵
        
        PID:1668
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        637⤵
        
        PID:2508
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        638⤵
        
        PID:1660
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        639⤵
        
        PID:1980
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        640⤵
        
        PID:1392
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        641⤵
        
        PID:1920
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        642⤵
        
        PID:564
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        643⤵
        
        PID:2176
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        644⤵
        
        PID:916
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        645⤵
        
        PID:1548
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        646⤵
        
        PID:1116
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        647⤵
        
        PID:2100
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        648⤵
        
        PID:1716
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        649⤵
        
        PID:2200
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        650⤵
        
        PID:3052
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        651⤵
        
        PID:1552
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        652⤵
        
        PID:1040
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        653⤵
        
        PID:816
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        654⤵
        
        PID:1972
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        655⤵
        
        PID:1936
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        656⤵
        
        PID:1756
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        657⤵
        
        PID:1560
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        658⤵
        
        PID:1588
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        659⤵
        
        PID:1664
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        660⤵
        
        PID:3064
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        661⤵
        
        PID:2520
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        662⤵
        
        PID:1412
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        663⤵
        
        PID:1200
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        664⤵
        
        PID:2060
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        665⤵
        
        PID:2124
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        666⤵
        
        PID:2568
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        667⤵
        
        PID:2596
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        668⤵
        
        PID:1932
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        669⤵
        
        PID:364
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        670⤵
        
        PID:2220
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        671⤵
        
        PID:1348
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        672⤵
        
        PID:2752
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        673⤵
        
        PID:2924
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        674⤵
        
        PID:2476
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        675⤵
        
        PID:2628
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        676⤵
        
        PID:2444
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        677⤵
        
        PID:724
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        678⤵
        
        PID:2488
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        679⤵
        
        PID:2728
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        680⤵
        
        PID:2812
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        681⤵
        
        PID:1476
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        682⤵
        
        PID:692
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        683⤵
        
        PID:2748
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        684⤵
        
        PID:2484
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        685⤵
        
        PID:2412
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        686⤵
        
        PID:1772
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        687⤵
        
        PID:1952
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        688⤵
        
        PID:1980
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        689⤵
        
        PID:2692
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        690⤵
        
        PID:2024
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        691⤵
        
        PID:2708
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        692⤵
        
        PID:1524
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        693⤵
        
        PID:564
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        694⤵
        
        PID:2872
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        695⤵
        
        PID:2008
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        696⤵
        
        PID:1280
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        697⤵
        
        PID:2852
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        698⤵
        
        PID:1716
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        699⤵
        
        PID:1836
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        700⤵
        
        PID:2132
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        701⤵
        
        PID:1612
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        702⤵
        
        PID:1308
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        703⤵
        
        PID:1496
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        704⤵
        
        PID:1180
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        705⤵
        
        PID:920
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        706⤵
        
        PID:2260
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        707⤵
        
        PID:1996
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        708⤵
        
        PID:1132
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        709⤵
        
        PID:1232
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        710⤵
        
        PID:3068
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        711⤵
        
        PID:2356
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        712⤵
        
        PID:1624
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        713⤵
        
        PID:2588
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        714⤵
        
        PID:908
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        715⤵
        
        PID:3060
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        716⤵
        
        PID:2968
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        717⤵
        
        PID:2688
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        718⤵
        
        PID:2756
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        719⤵
        
        PID:2448
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        720⤵
        
        PID:2632
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        721⤵
        
        PID:2680
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        722⤵
        
        PID:2512
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        723⤵
        
        PID:2660
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        724⤵
        
        PID:2780
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        725⤵
        
        PID:2936
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        726⤵
        
        PID:1164
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        727⤵
        
        PID:2444
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        728⤵
        
        PID:724
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        729⤵
        
        PID:2548
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        730⤵
        
        PID:1288
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        731⤵
        
        PID:1476
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        732⤵
        
        PID:2052
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        733⤵
        
        PID:1504
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        734⤵
        
        PID:1672
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        735⤵
        
        PID:1572
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        736⤵
        
        PID:1636
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        737⤵
        
        PID:604
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        738⤵
        
        PID:1656
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        739⤵
        
        PID:2692
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        740⤵
        
        PID:1840
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        741⤵
        
        PID:1292
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        742⤵
        
        PID:792
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        743⤵
        
        PID:2908
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        744⤵
        
        PID:1680
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        745⤵
        
        PID:328
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        746⤵
        
        PID:1568
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        747⤵
        
        PID:2760
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        748⤵
        
        PID:1912
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        749⤵
        
        PID:1816
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        750⤵
        
        PID:1500
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        751⤵
        
        PID:1064
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        752⤵
        
        PID:1972
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        753⤵
        
        PID:1936
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        754⤵
        
        PID:868
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        755⤵
        
        PID:2260
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        756⤵
        
        PID:1664
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        757⤵
        
        PID:2532
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        758⤵
        
        PID:2520
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        759⤵
        
        PID:1092
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        760⤵
        
        PID:3012
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        761⤵
        
        PID:1624
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        762⤵
        
        PID:1616
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        763⤵
        
        PID:2252
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        764⤵
        
        PID:2656
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        765⤵
        
        PID:3016
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        766⤵
        
        PID:1720
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        767⤵
        
        PID:2900
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        768⤵
        
        PID:2220
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        769⤵
        
        PID:364
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        770⤵
        
        PID:2420
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        771⤵
        
        PID:2932
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        772⤵
        
        PID:2560
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        773⤵
        
        PID:2704
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        774⤵
        
        PID:436
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        775⤵
        
        PID:1740
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        776⤵
        
        PID:1916
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        777⤵
        
        PID:2488
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        778⤵
        
        PID:524
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        779⤵
        
        PID:1928
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        780⤵
        
        PID:1644
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        781⤵
        
        PID:2800
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        782⤵
        
        PID:2748
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        783⤵
        
        PID:1672
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        784⤵
        
        PID:1208
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        785⤵
        
        PID:1480
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        786⤵
        
        PID:1980
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        787⤵
        
        PID:2500
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        788⤵
        
        PID:2180
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        789⤵
        
        PID:2716
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        790⤵
        
        PID:1896
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        791⤵
        
        PID:792
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        792⤵
        
        PID:2868
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        793⤵
        
        PID:2332
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        794⤵
        
        PID:1960
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        795⤵
        
        PID:1716
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        796⤵
        
        PID:1552
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        797⤵
        
        PID:888
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        798⤵
        
        PID:960
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        799⤵
        
        PID:1500
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        800⤵
        
        PID:1180
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        801⤵
        
        PID:2304
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        802⤵
        
        PID:1452
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        803⤵
        
        PID:1708
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        804⤵
        
        PID:1488
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        805⤵
        
        PID:956
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        806⤵
        
        PID:2840
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        807⤵
        
        PID:1856
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        808⤵
        
        PID:1736
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        809⤵
        
        PID:2672
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        810⤵
        
        PID:2588
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        811⤵
        
        PID:2848
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        812⤵
        
        PID:2000
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        813⤵
        
        PID:2296
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        814⤵
        
        PID:2460
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        815⤵
        
        PID:1968
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        816⤵
        
        PID:2552
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        817⤵
        
        PID:2736
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        818⤵
        
        PID:2616
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        819⤵
        
        PID:364
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        820⤵
        
        PID:2512
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        821⤵
        
        PID:2932
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        822⤵
        
        PID:2972
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        823⤵
        
        PID:560
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        824⤵
        
        PID:436
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        825⤵
        
        PID:1740
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        826⤵
        
        PID:2728
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        827⤵
        
        PID:1900
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        828⤵
        
        PID:1288
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        829⤵
        
        PID:1596
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        830⤵
        
        PID:2824
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        831⤵
        
        PID:2344
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        832⤵
        
        PID:2188
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        833⤵
        
        PID:1672
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        834⤵
        
        PID:1080
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        835⤵
        
        PID:1492
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        836⤵
        
        PID:616
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        837⤵
        
        PID:1980
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        838⤵
        
        PID:2408
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        839⤵
        
        PID:1840
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        840⤵
        
        PID:564
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        841⤵
        
        PID:916
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        842⤵
        
        PID:1072
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        843⤵
        
        PID:2100
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        844⤵
        
        PID:764
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        845⤵
        
        PID:240
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        846⤵
        
        PID:1848
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        847⤵
        
        PID:1912
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        848⤵
        
        PID:1036
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        849⤵
        
        PID:2248
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        850⤵
        
        PID:2140
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        851⤵
        
        PID:1464
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        852⤵
        
        PID:1752
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        853⤵
        
        PID:2304
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        854⤵
        
        PID:2376
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        855⤵
        
        PID:596
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        856⤵
        
        PID:1144
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        857⤵
        
        PID:1496
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        858⤵
        
        PID:1204
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        859⤵
        
        PID:2768
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        860⤵
        
        PID:948
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        861⤵
        
        PID:2672
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        862⤵
        
        PID:2676
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        863⤵
        
        PID:3060
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        864⤵
        
        PID:2060
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        865⤵
        
        PID:2940
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        866⤵
        
        PID:2688
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        867⤵
        
        PID:2988
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        868⤵
        
        PID:2756
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        869⤵
        
        PID:2736
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        870⤵
        
        PID:2224
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        871⤵
        
        PID:1732
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        872⤵
        
        PID:2640
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        873⤵
        
        PID:2932
        
        C:\WINDOWS\SysWOW64\SOUNDMAN.EXE
        
        "C:\WINDOWS\SYSTEM32\SOUNDMAN.EXE"
        874⤵
        
        PID:2560

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Windows\SysWOW64\error.dat

Filesize
32B

MD5
ae4b937b548b506f15a64cdbd41b0b31

SHA1
be51a89a50261df977ad7a55d228ac40a9ba55d6

SHA256
cfe7fa7605656869b5ed9f33f567f2509e5fd241801c81b9d59fdad054221fac

SHA512
53d8c364ec8ba0a15f2dcd031228686abd92a9c431be8df3d423c81a5c8b98829e4cf358e3f8c627b7524cfd1130f41e44992edcf744c7f5d32c916169edcd61

Download Submit
\Windows\SysWOW64\SOUNDMAN.EXE

Filesize
49KB

MD5
cd849346a352a38feb22d8941d2068d8

SHA1
9eb6a524d9185af11be1189bf583abde194dd35d

SHA256
a49d6efa641852bd8bf501ee0aa414626c334af6f707ab8a04cf16b8957e13aa

SHA512
bb940cecbc923f8e691fe077bc255bbc78e2ee3142eba9e698be6f6597c37f61b395188016db1b6b38f632f9ab7b47ecd79c062a2bf14fd1ad3a2a716ea4b7be

Download Submit
memory/692-73-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/756-115-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/1040-149-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/1184-13-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/1184-0-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/1184-12-0x0000000002510000-0x000000000252A000-memory.dmp

Filesize
104KB

Download
memory/1404-81-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/1404-75-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/1464-162-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/1464-163-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/1472-122-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/1472-121-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/1488-154-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/1488-155-0x00000000027D0000-0x00000000027EA000-memory.dmp

Filesize
104KB

Download
memory/1524-123-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/1524-125-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/1568-141-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/1632-157-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/1632-158-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/1720-41-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/1752-160-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/1780-127-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/1808-143-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/1816-152-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/1816-151-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/1848-139-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/1848-138-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/2028-102-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/2028-96-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/2060-14-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/2060-20-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/2076-145-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/2120-165-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/2132-147-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/2188-95-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/2188-91-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/2260-170-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/2260-167-0x0000000002580000-0x000000000259A000-memory.dmp

Filesize
104KB

Download
memory/2288-171-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/2288-168-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/2336-129-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/2344-108-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/2344-105-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/2424-60-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/2600-48-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/2688-24-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/2688-28-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/2716-116-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/2716-119-0x00000000027C0000-0x00000000027DA000-memory.dmp

Filesize
104KB

Download
memory/2716-118-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/2736-68-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/2736-64-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/2764-38-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/2764-34-0x0000000002380000-0x000000000238D000-memory.dmp

Filesize
52KB

Download
memory/2764-33-0x00000000023E0000-0x00000000023FA000-memory.dmp

Filesize
104KB

Download
memory/2808-86-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/2808-88-0x0000000002590000-0x00000000025AA000-memory.dmp

Filesize
104KB

Download
memory/2864-131-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/2876-136-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/2932-55-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/2932-51-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/3012-173-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/3064-134-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download
memory/3064-133-0x0000000000400000-0x000000000041A000-memory.dmp

Filesize
104KB

Download