xmrig | 85ead95d2e41fa2cb24dac7938bb6e10f3e8e3e6db57303ced180451da7bd2ff

Analysis

max time kernel
118s
max time network
118s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
07/05/2024, 23:43

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
Size

1.9MB
MD5

6a49f13d6c78ef5e9d57fc8594ffea90
SHA1

3285fb81bd91eb2ebdae176b859bdf6022646c5e
SHA256

85ead95d2e41fa2cb24dac7938bb6e10f3e8e3e6db57303ced180451da7bd2ff
SHA512

39320e3a5e71b4f56f6ca03ca9f7ada32d53ffab684098225bb13f435ba4e564bc412784f25d8664457bd84e80c1568e7efbee91da9eb0945ed4159f2132d57b
SSDEEP

49152:BezaTF8FcNkNdfE0pZ9ozt4wIQW/zFdDEANW7dMn:BemTLkNdfE0pZrQM

Score

10^/10

xmrig miner upx

Malware Config

Signatures

xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
miner xmrig

XMRig Miner payload 64 IoCs

miner

resource	yara_rule
behavioral1/memory/1600-1-0x000000013FCB0000-0x0000000140004000-memory.dmp	xmrig
behavioral1/files/0x000d00000001228a-6.dat	xmrig
behavioral1/files/0x003a000000013362-10.dat	xmrig
behavioral1/memory/2752-14-0x000000013FE50000-0x00000001401A4000-memory.dmp	xmrig
behavioral1/files/0x0008000000013a15-25.dat	xmrig
behavioral1/files/0x000a000000013b02-33.dat	xmrig
behavioral1/files/0x0008000000013a85-26.dat	xmrig
behavioral1/files/0x00060000000145d4-80.dat	xmrig
behavioral1/files/0x00060000000146a7-87.dat	xmrig
behavioral1/files/0x0006000000015077-137.dat	xmrig
behavioral1/files/0x00060000000155e8-155.dat	xmrig
behavioral1/files/0x0006000000015c91-187.dat	xmrig
behavioral1/memory/2584-556-0x000000013F130000-0x000000013F484000-memory.dmp	xmrig
behavioral1/files/0x0006000000015bb5-182.dat	xmrig
behavioral1/files/0x0006000000015b72-177.dat	xmrig
behavioral1/files/0x0006000000015b37-172.dat	xmrig
behavioral1/files/0x0006000000015a15-167.dat	xmrig
behavioral1/files/0x003900000001340e-162.dat	xmrig
behavioral1/files/0x000600000001543a-152.dat	xmrig
behavioral1/files/0x000600000001523e-147.dat	xmrig
behavioral1/files/0x00060000000150aa-142.dat	xmrig
behavioral1/files/0x0006000000014fac-132.dat	xmrig
behavioral1/files/0x0006000000014c0b-122.dat	xmrig
behavioral1/files/0x0006000000014d0f-127.dat	xmrig
behavioral1/files/0x0006000000014a29-117.dat	xmrig
behavioral1/files/0x00060000000148af-112.dat	xmrig
behavioral1/files/0x000600000001475f-107.dat	xmrig
behavioral1/files/0x000600000001474b-103.dat	xmrig
behavioral1/memory/1140-98-0x000000013FEE0000-0x0000000140234000-memory.dmp	xmrig
behavioral1/memory/1600-97-0x0000000001FD0000-0x0000000002324000-memory.dmp	xmrig
behavioral1/memory/1600-96-0x000000013FCB0000-0x0000000140004000-memory.dmp	xmrig
behavioral1/files/0x0006000000014730-94.dat	xmrig
behavioral1/memory/760-91-0x000000013F690000-0x000000013F9E4000-memory.dmp	xmrig
behavioral1/memory/1828-84-0x000000013F6B0000-0x000000013FA04000-memory.dmp	xmrig
behavioral1/memory/2648-77-0x000000013FC00000-0x000000013FF54000-memory.dmp	xmrig
behavioral1/files/0x00060000000145c9-73.dat	xmrig
behavioral1/memory/2468-70-0x000000013FDC0000-0x0000000140114000-memory.dmp	xmrig
behavioral1/memory/3028-62-0x000000013FE70000-0x00000001401C4000-memory.dmp	xmrig
behavioral1/memory/2676-61-0x000000013FB30000-0x000000013FE84000-memory.dmp	xmrig
behavioral1/files/0x000800000001451d-60.dat	xmrig
behavioral1/files/0x000b000000013abd-58.dat	xmrig
behavioral1/memory/2584-56-0x000000013F130000-0x000000013F484000-memory.dmp	xmrig
behavioral1/memory/2968-55-0x000000013F7B0000-0x000000013FB04000-memory.dmp	xmrig
behavioral1/files/0x0008000000013a65-53.dat	xmrig
behavioral1/files/0x000a0000000134f5-52.dat	xmrig
behavioral1/memory/2684-51-0x000000013F2D0000-0x000000013F624000-memory.dmp	xmrig
behavioral1/memory/1600-50-0x000000013F8D0000-0x000000013FC24000-memory.dmp	xmrig
behavioral1/memory/2828-49-0x000000013F8D0000-0x000000013FC24000-memory.dmp	xmrig
behavioral1/memory/1600-45-0x0000000001FD0000-0x0000000002324000-memory.dmp	xmrig
behavioral1/memory/2980-44-0x000000013F5A0000-0x000000013F8F4000-memory.dmp	xmrig
behavioral1/files/0x0006000000014525-66.dat	xmrig
behavioral1/memory/1836-24-0x000000013FFC0000-0x0000000140314000-memory.dmp	xmrig
behavioral1/memory/3028-1077-0x000000013FE70000-0x00000001401C4000-memory.dmp	xmrig
behavioral1/memory/1140-3019-0x000000013FEE0000-0x0000000140234000-memory.dmp	xmrig
behavioral1/memory/1836-4023-0x000000013FFC0000-0x0000000140314000-memory.dmp	xmrig
behavioral1/memory/2980-4024-0x000000013F5A0000-0x000000013F8F4000-memory.dmp	xmrig
behavioral1/memory/2752-4025-0x000000013FE50000-0x00000001401A4000-memory.dmp	xmrig
behavioral1/memory/2684-4026-0x000000013F2D0000-0x000000013F624000-memory.dmp	xmrig
behavioral1/memory/2828-4027-0x000000013F8D0000-0x000000013FC24000-memory.dmp	xmrig
behavioral1/memory/2584-4028-0x000000013F130000-0x000000013F484000-memory.dmp	xmrig
behavioral1/memory/2676-4029-0x000000013FB30000-0x000000013FE84000-memory.dmp	xmrig
behavioral1/memory/760-4030-0x000000013F690000-0x000000013F9E4000-memory.dmp	xmrig
behavioral1/memory/2968-4031-0x000000013F7B0000-0x000000013FB04000-memory.dmp	xmrig
behavioral1/memory/2468-4032-0x000000013FDC0000-0x0000000140114000-memory.dmp	xmrig

Executes dropped EXE 64 IoCs

pid	Process
2752	aTaOzUc.exe
1836	oFCIOPY.exe
2980	owaumWn.exe
2684	BobJcmY.exe
2828	KoboYBx.exe
2968	kszCXKG.exe
2584	PVwATiQ.exe
2676	ZYlzrdU.exe
3028	sTsRhGp.exe
2468	tfhGXmY.exe
2648	nbJrTOg.exe
1828	CmHPuYs.exe
760	KXIJLPr.exe
1140	WEspnja.exe
2772	aMqjsTT.exe
2788	jyTNemc.exe
2380	OKlAmZt.exe
1500	bGnEGpJ.exe
2416	JbIIhOv.exe
2112	rGTVXIR.exe
1928	jQbnmYj.exe
2292	oQQIGSv.exe
2108	sdrPjSX.exe
3008	mbRbbvn.exe
2520	VhKVPZk.exe
2852	oengmxb.exe
2204	yygYKIx.exe
2200	DrRaCff.exe
908	scPeejd.exe
1092	DRLtPnX.exe
2880	McnHbel.exe
1816	dpTLRTG.exe
304	hCERbkZ.exe
448	dwAXqdl.exe
604	XaxFrXZ.exe
2360	QfWfaSd.exe
3052	GasUCBa.exe
1320	ctDGBzp.exe
1776	PnoUwYP.exe
944	bJzoOyw.exe
644	MwlREaB.exe
2308	tJsgunw.exe
2956	EMqkWDQ.exe
688	qkEQNox.exe
1032	hLEhFcL.exe
2868	HeUSFPy.exe
2052	uGRqCKa.exe
2304	zkKgsgA.exe
1732	YNUilxl.exe
2816	LUnLRdH.exe
1496	QEtdqmn.exe
2192	chkmDkB.exe
876	MEHumlX.exe
1700	Fklwfau.exe
2016	SbIXSQL.exe
1596	uPjcYKK.exe
2812	oMgyljK.exe
2272	XqaJBXU.exe
2840	Dtkohmu.exe
2432	vTmIEUv.exe
2604	BbCKDjx.exe
2784	afnpmWn.exe
2596	farpohn.exe
2528	WGqaQLE.exe

Loads dropped DLL 64 IoCs

pid	Process
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe

UPX packed file 64 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral1/memory/1600-1-0x000000013FCB0000-0x0000000140004000-memory.dmp	upx
behavioral1/files/0x000d00000001228a-6.dat	upx
behavioral1/files/0x003a000000013362-10.dat	upx
behavioral1/memory/2752-14-0x000000013FE50000-0x00000001401A4000-memory.dmp	upx
behavioral1/files/0x0008000000013a15-25.dat	upx
behavioral1/files/0x000a000000013b02-33.dat	upx
behavioral1/files/0x0008000000013a85-26.dat	upx
behavioral1/files/0x00060000000145d4-80.dat	upx
behavioral1/files/0x00060000000146a7-87.dat	upx
behavioral1/files/0x0006000000015077-137.dat	upx
behavioral1/files/0x00060000000155e8-155.dat	upx
behavioral1/files/0x0006000000015c91-187.dat	upx
behavioral1/memory/2584-556-0x000000013F130000-0x000000013F484000-memory.dmp	upx
behavioral1/files/0x0006000000015bb5-182.dat	upx
behavioral1/files/0x0006000000015b72-177.dat	upx
behavioral1/files/0x0006000000015b37-172.dat	upx
behavioral1/files/0x0006000000015a15-167.dat	upx
behavioral1/files/0x003900000001340e-162.dat	upx
behavioral1/files/0x000600000001543a-152.dat	upx
behavioral1/files/0x000600000001523e-147.dat	upx
behavioral1/files/0x00060000000150aa-142.dat	upx
behavioral1/files/0x0006000000014fac-132.dat	upx
behavioral1/files/0x0006000000014c0b-122.dat	upx
behavioral1/files/0x0006000000014d0f-127.dat	upx
behavioral1/files/0x0006000000014a29-117.dat	upx
behavioral1/files/0x00060000000148af-112.dat	upx
behavioral1/files/0x000600000001475f-107.dat	upx
behavioral1/files/0x000600000001474b-103.dat	upx
behavioral1/memory/1140-98-0x000000013FEE0000-0x0000000140234000-memory.dmp	upx
behavioral1/memory/1600-96-0x000000013FCB0000-0x0000000140004000-memory.dmp	upx
behavioral1/files/0x0006000000014730-94.dat	upx
behavioral1/memory/760-91-0x000000013F690000-0x000000013F9E4000-memory.dmp	upx
behavioral1/memory/1828-84-0x000000013F6B0000-0x000000013FA04000-memory.dmp	upx
behavioral1/memory/2648-77-0x000000013FC00000-0x000000013FF54000-memory.dmp	upx
behavioral1/files/0x00060000000145c9-73.dat	upx
behavioral1/memory/2468-70-0x000000013FDC0000-0x0000000140114000-memory.dmp	upx
behavioral1/memory/3028-62-0x000000013FE70000-0x00000001401C4000-memory.dmp	upx
behavioral1/memory/2676-61-0x000000013FB30000-0x000000013FE84000-memory.dmp	upx
behavioral1/files/0x000800000001451d-60.dat	upx
behavioral1/files/0x000b000000013abd-58.dat	upx
behavioral1/memory/2584-56-0x000000013F130000-0x000000013F484000-memory.dmp	upx
behavioral1/memory/2968-55-0x000000013F7B0000-0x000000013FB04000-memory.dmp	upx
behavioral1/files/0x0008000000013a65-53.dat	upx
behavioral1/files/0x000a0000000134f5-52.dat	upx
behavioral1/memory/2684-51-0x000000013F2D0000-0x000000013F624000-memory.dmp	upx
behavioral1/memory/2828-49-0x000000013F8D0000-0x000000013FC24000-memory.dmp	upx
behavioral1/memory/2980-44-0x000000013F5A0000-0x000000013F8F4000-memory.dmp	upx
behavioral1/files/0x0006000000014525-66.dat	upx
behavioral1/memory/1836-24-0x000000013FFC0000-0x0000000140314000-memory.dmp	upx
behavioral1/memory/3028-1077-0x000000013FE70000-0x00000001401C4000-memory.dmp	upx
behavioral1/memory/1140-3019-0x000000013FEE0000-0x0000000140234000-memory.dmp	upx
behavioral1/memory/1836-4023-0x000000013FFC0000-0x0000000140314000-memory.dmp	upx
behavioral1/memory/2980-4024-0x000000013F5A0000-0x000000013F8F4000-memory.dmp	upx
behavioral1/memory/2752-4025-0x000000013FE50000-0x00000001401A4000-memory.dmp	upx
behavioral1/memory/2684-4026-0x000000013F2D0000-0x000000013F624000-memory.dmp	upx
behavioral1/memory/2828-4027-0x000000013F8D0000-0x000000013FC24000-memory.dmp	upx
behavioral1/memory/2584-4028-0x000000013F130000-0x000000013F484000-memory.dmp	upx
behavioral1/memory/2676-4029-0x000000013FB30000-0x000000013FE84000-memory.dmp	upx
behavioral1/memory/760-4030-0x000000013F690000-0x000000013F9E4000-memory.dmp	upx
behavioral1/memory/2968-4031-0x000000013F7B0000-0x000000013FB04000-memory.dmp	upx
behavioral1/memory/2468-4032-0x000000013FDC0000-0x0000000140114000-memory.dmp	upx
behavioral1/memory/3028-4033-0x000000013FE70000-0x00000001401C4000-memory.dmp	upx
behavioral1/memory/1828-4034-0x000000013F6B0000-0x000000013FA04000-memory.dmp	upx
behavioral1/memory/1140-4035-0x000000013FEE0000-0x0000000140234000-memory.dmp	upx

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\System\xqLMdgc.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\QmmfPrS.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\BRaLKQs.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\AyqPOcY.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\MGYwIAi.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\edOxzfc.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\ldkHHie.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\KoboYBx.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\vQduAOm.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\vJmZyTM.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\MrCUOSi.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\vGMyTuM.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\qFgflPC.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\ZOQVkCJ.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\jBMTnAX.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\yJWKgdT.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\poeocRy.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\bJYsRmu.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\GGkSdSE.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\DUasgZM.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\tTcPEzR.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\ijDjsRa.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\oiJyNxW.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\iXKEXBI.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\kiNZKVd.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\uKTgWPv.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\RTqfFJH.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\OFkKaZC.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\wKklNad.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\eNmyIwv.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\RdOJfSC.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\XorQzsl.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\qVoWVcd.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\dyxAUxx.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\WQDGutC.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\lHNUqte.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\YLsgnjd.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\JFvjewu.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\GjBraZe.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\GvIIqHz.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\SdTtNFz.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\EHqHJqI.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\WVopPkQ.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\oUdjigf.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\WTpxTlS.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\fXcJZDi.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\owaumWn.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\lpMwTsJ.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\fMjYFss.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\JKlxhXn.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\kJkTaLh.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\MMCwIFK.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\ULGHiyi.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\jMpUeFn.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\hCOjhTV.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\JAXyvdU.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\pLugGub.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\kjTePAC.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\DcadCdC.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\YrbTSxZ.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\nuCOaZK.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\qsfwfro.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\TvLhVuQ.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
File created	C:\Windows\System\jhWsVbP.exe	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1600 wrote to memory of 2752	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	29
PID 1600 wrote to memory of 2752	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	29
PID 1600 wrote to memory of 2752	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	29
PID 1600 wrote to memory of 1836	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	30
PID 1600 wrote to memory of 1836	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	30
PID 1600 wrote to memory of 1836	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	30
PID 1600 wrote to memory of 2968	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	31
PID 1600 wrote to memory of 2968	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	31
PID 1600 wrote to memory of 2968	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	31
PID 1600 wrote to memory of 2980	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	32
PID 1600 wrote to memory of 2980	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	32
PID 1600 wrote to memory of 2980	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	32
PID 1600 wrote to memory of 2584	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	33
PID 1600 wrote to memory of 2584	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	33
PID 1600 wrote to memory of 2584	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	33
PID 1600 wrote to memory of 2684	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	34
PID 1600 wrote to memory of 2684	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	34
PID 1600 wrote to memory of 2684	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	34
PID 1600 wrote to memory of 2676	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	35
PID 1600 wrote to memory of 2676	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	35
PID 1600 wrote to memory of 2676	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	35
PID 1600 wrote to memory of 2828	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	36
PID 1600 wrote to memory of 2828	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	36
PID 1600 wrote to memory of 2828	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	36
PID 1600 wrote to memory of 3028	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	37
PID 1600 wrote to memory of 3028	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	37
PID 1600 wrote to memory of 3028	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	37
PID 1600 wrote to memory of 2468	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	38
PID 1600 wrote to memory of 2468	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	38
PID 1600 wrote to memory of 2468	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	38
PID 1600 wrote to memory of 2648	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	39
PID 1600 wrote to memory of 2648	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	39
PID 1600 wrote to memory of 2648	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	39
PID 1600 wrote to memory of 1828	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	40
PID 1600 wrote to memory of 1828	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	40
PID 1600 wrote to memory of 1828	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	40
PID 1600 wrote to memory of 760	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	41
PID 1600 wrote to memory of 760	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	41
PID 1600 wrote to memory of 760	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	41
PID 1600 wrote to memory of 1140	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	42
PID 1600 wrote to memory of 1140	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	42
PID 1600 wrote to memory of 1140	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	42
PID 1600 wrote to memory of 2772	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	43
PID 1600 wrote to memory of 2772	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	43
PID 1600 wrote to memory of 2772	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	43
PID 1600 wrote to memory of 2788	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	44
PID 1600 wrote to memory of 2788	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	44
PID 1600 wrote to memory of 2788	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	44
PID 1600 wrote to memory of 2380	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	45
PID 1600 wrote to memory of 2380	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	45
PID 1600 wrote to memory of 2380	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	45
PID 1600 wrote to memory of 1500	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	46
PID 1600 wrote to memory of 1500	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	46
PID 1600 wrote to memory of 1500	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	46
PID 1600 wrote to memory of 2416	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	47
PID 1600 wrote to memory of 2416	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	47
PID 1600 wrote to memory of 2416	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	47
PID 1600 wrote to memory of 2112	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	48
PID 1600 wrote to memory of 2112	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	48
PID 1600 wrote to memory of 2112	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	48
PID 1600 wrote to memory of 1928	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	49
PID 1600 wrote to memory of 1928	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	49
PID 1600 wrote to memory of 1928	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	49
PID 1600 wrote to memory of 2292	1600	6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe	50

C:\Users\Admin\AppData\Local\Temp\6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe
"C:\Users\Admin\AppData\Local\Temp\6a49f13d6c78ef5e9d57fc8594ffea90_NEIKI.exe"
1⤵
- Loads dropped DLL
- Drops file in Windows directory
- Suspicious use of WriteProcessMemory
PID:1600
- C:\Windows\System\aTaOzUc.exe
  C:\Windows\System\aTaOzUc.exe
  2⤵
  - Executes dropped EXE
  PID:2752
- C:\Windows\System\oFCIOPY.exe
  C:\Windows\System\oFCIOPY.exe
  2⤵
  - Executes dropped EXE
  PID:1836
- C:\Windows\System\kszCXKG.exe
  C:\Windows\System\kszCXKG.exe
  2⤵
  - Executes dropped EXE
  PID:2968
- C:\Windows\System\owaumWn.exe
  C:\Windows\System\owaumWn.exe
  2⤵
  - Executes dropped EXE
  PID:2980
- C:\Windows\System\PVwATiQ.exe
  C:\Windows\System\PVwATiQ.exe
  2⤵
  - Executes dropped EXE
  PID:2584
- C:\Windows\System\BobJcmY.exe
  C:\Windows\System\BobJcmY.exe
  2⤵
  - Executes dropped EXE
  PID:2684
- C:\Windows\System\ZYlzrdU.exe
  C:\Windows\System\ZYlzrdU.exe
  2⤵
  - Executes dropped EXE
  PID:2676
- C:\Windows\System\KoboYBx.exe
  C:\Windows\System\KoboYBx.exe
  2⤵
  - Executes dropped EXE
  PID:2828
- C:\Windows\System\sTsRhGp.exe
  C:\Windows\System\sTsRhGp.exe
  2⤵
  - Executes dropped EXE
  PID:3028
- C:\Windows\System\tfhGXmY.exe
  C:\Windows\System\tfhGXmY.exe
  2⤵
  - Executes dropped EXE
  PID:2468
- C:\Windows\System\nbJrTOg.exe
  C:\Windows\System\nbJrTOg.exe
  2⤵
  - Executes dropped EXE
  PID:2648
- C:\Windows\System\CmHPuYs.exe
  C:\Windows\System\CmHPuYs.exe
  2⤵
  - Executes dropped EXE
  PID:1828
- C:\Windows\System\KXIJLPr.exe
  C:\Windows\System\KXIJLPr.exe
  2⤵
  - Executes dropped EXE
  PID:760
- C:\Windows\System\WEspnja.exe
  C:\Windows\System\WEspnja.exe
  2⤵
  - Executes dropped EXE
  PID:1140
- C:\Windows\System\aMqjsTT.exe
  C:\Windows\System\aMqjsTT.exe
  2⤵
  - Executes dropped EXE
  PID:2772
- C:\Windows\System\jyTNemc.exe
  C:\Windows\System\jyTNemc.exe
  2⤵
  - Executes dropped EXE
  PID:2788
- C:\Windows\System\OKlAmZt.exe
  C:\Windows\System\OKlAmZt.exe
  2⤵
  - Executes dropped EXE
  PID:2380
- C:\Windows\System\bGnEGpJ.exe
  C:\Windows\System\bGnEGpJ.exe
  2⤵
  - Executes dropped EXE
  PID:1500
- C:\Windows\System\JbIIhOv.exe
  C:\Windows\System\JbIIhOv.exe
  2⤵
  - Executes dropped EXE
  PID:2416
- C:\Windows\System\rGTVXIR.exe
  C:\Windows\System\rGTVXIR.exe
  2⤵
  - Executes dropped EXE
  PID:2112
- C:\Windows\System\jQbnmYj.exe
  C:\Windows\System\jQbnmYj.exe
  2⤵
  - Executes dropped EXE
  PID:1928
- C:\Windows\System\oQQIGSv.exe
  C:\Windows\System\oQQIGSv.exe
  2⤵
  - Executes dropped EXE
  PID:2292
- C:\Windows\System\sdrPjSX.exe
  C:\Windows\System\sdrPjSX.exe
  2⤵
  - Executes dropped EXE
  PID:2108
- C:\Windows\System\mbRbbvn.exe
  C:\Windows\System\mbRbbvn.exe
  2⤵
  - Executes dropped EXE
  PID:3008
- C:\Windows\System\VhKVPZk.exe
  C:\Windows\System\VhKVPZk.exe
  2⤵
  - Executes dropped EXE
  PID:2520
- C:\Windows\System\oengmxb.exe
  C:\Windows\System\oengmxb.exe
  2⤵
  - Executes dropped EXE
  PID:2852
- C:\Windows\System\yygYKIx.exe
  C:\Windows\System\yygYKIx.exe
  2⤵
  - Executes dropped EXE
  PID:2204
- C:\Windows\System\DrRaCff.exe
  C:\Windows\System\DrRaCff.exe
  2⤵
  - Executes dropped EXE
  PID:2200
- C:\Windows\System\scPeejd.exe
  C:\Windows\System\scPeejd.exe
  2⤵
  - Executes dropped EXE
  PID:908
- C:\Windows\System\DRLtPnX.exe
  C:\Windows\System\DRLtPnX.exe
  2⤵
  - Executes dropped EXE
  PID:1092
- C:\Windows\System\McnHbel.exe
  C:\Windows\System\McnHbel.exe
  2⤵
  - Executes dropped EXE
  PID:2880
- C:\Windows\System\dpTLRTG.exe
  C:\Windows\System\dpTLRTG.exe
  2⤵
  - Executes dropped EXE
  PID:1816
- C:\Windows\System\hCERbkZ.exe
  C:\Windows\System\hCERbkZ.exe
  2⤵
  - Executes dropped EXE
  PID:304
- C:\Windows\System\dwAXqdl.exe
  C:\Windows\System\dwAXqdl.exe
  2⤵
  - Executes dropped EXE
  PID:448
- C:\Windows\System\XaxFrXZ.exe
  C:\Windows\System\XaxFrXZ.exe
  2⤵
  - Executes dropped EXE
  PID:604
- C:\Windows\System\QfWfaSd.exe
  C:\Windows\System\QfWfaSd.exe
  2⤵
  - Executes dropped EXE
  PID:2360
- C:\Windows\System\GasUCBa.exe
  C:\Windows\System\GasUCBa.exe
  2⤵
  - Executes dropped EXE
  PID:3052
- C:\Windows\System\ctDGBzp.exe
  C:\Windows\System\ctDGBzp.exe
  2⤵
  - Executes dropped EXE
  PID:1320
- C:\Windows\System\PnoUwYP.exe
  C:\Windows\System\PnoUwYP.exe
  2⤵
  - Executes dropped EXE
  PID:1776
- C:\Windows\System\bJzoOyw.exe
  C:\Windows\System\bJzoOyw.exe
  2⤵
  - Executes dropped EXE
  PID:944
- C:\Windows\System\MwlREaB.exe
  C:\Windows\System\MwlREaB.exe
  2⤵
  - Executes dropped EXE
  PID:644
- C:\Windows\System\tJsgunw.exe
  C:\Windows\System\tJsgunw.exe
  2⤵
  - Executes dropped EXE
  PID:2308
- C:\Windows\System\EMqkWDQ.exe
  C:\Windows\System\EMqkWDQ.exe
  2⤵
  - Executes dropped EXE
  PID:2956
- C:\Windows\System\qkEQNox.exe
  C:\Windows\System\qkEQNox.exe
  2⤵
  - Executes dropped EXE
  PID:688
- C:\Windows\System\hLEhFcL.exe
  C:\Windows\System\hLEhFcL.exe
  2⤵
  - Executes dropped EXE
  PID:1032
- C:\Windows\System\HeUSFPy.exe
  C:\Windows\System\HeUSFPy.exe
  2⤵
  - Executes dropped EXE
  PID:2868
- C:\Windows\System\uGRqCKa.exe
  C:\Windows\System\uGRqCKa.exe
  2⤵
  - Executes dropped EXE
  PID:2052
- C:\Windows\System\zkKgsgA.exe
  C:\Windows\System\zkKgsgA.exe
  2⤵
  - Executes dropped EXE
  PID:2304
- C:\Windows\System\YNUilxl.exe
  C:\Windows\System\YNUilxl.exe
  2⤵
  - Executes dropped EXE
  PID:1732
- C:\Windows\System\LUnLRdH.exe
  C:\Windows\System\LUnLRdH.exe
  2⤵
  - Executes dropped EXE
  PID:2816
- C:\Windows\System\QEtdqmn.exe
  C:\Windows\System\QEtdqmn.exe
  2⤵
  - Executes dropped EXE
  PID:1496
- C:\Windows\System\chkmDkB.exe
  C:\Windows\System\chkmDkB.exe
  2⤵
  - Executes dropped EXE
  PID:2192
- C:\Windows\System\MEHumlX.exe
  C:\Windows\System\MEHumlX.exe
  2⤵
  - Executes dropped EXE
  PID:876
- C:\Windows\System\Fklwfau.exe
  C:\Windows\System\Fklwfau.exe
  2⤵
  - Executes dropped EXE
  PID:1700
- C:\Windows\System\SbIXSQL.exe
  C:\Windows\System\SbIXSQL.exe
  2⤵
  - Executes dropped EXE
  PID:2016
- C:\Windows\System\uPjcYKK.exe
  C:\Windows\System\uPjcYKK.exe
  2⤵
  - Executes dropped EXE
  PID:1596
- C:\Windows\System\oMgyljK.exe
  C:\Windows\System\oMgyljK.exe
  2⤵
  - Executes dropped EXE
  PID:2812
- C:\Windows\System\XqaJBXU.exe
  C:\Windows\System\XqaJBXU.exe
  2⤵
  - Executes dropped EXE
  PID:2272
- C:\Windows\System\Dtkohmu.exe
  C:\Windows\System\Dtkohmu.exe
  2⤵
  - Executes dropped EXE
  PID:2840
- C:\Windows\System\vTmIEUv.exe
  C:\Windows\System\vTmIEUv.exe
  2⤵
  - Executes dropped EXE
  PID:2432
- C:\Windows\System\BbCKDjx.exe
  C:\Windows\System\BbCKDjx.exe
  2⤵
  - Executes dropped EXE
  PID:2604
- C:\Windows\System\afnpmWn.exe
  C:\Windows\System\afnpmWn.exe
  2⤵
  - Executes dropped EXE
  PID:2784
- C:\Windows\System\farpohn.exe
  C:\Windows\System\farpohn.exe
  2⤵
  - Executes dropped EXE
  PID:2596
- C:\Windows\System\WGqaQLE.exe
  C:\Windows\System\WGqaQLE.exe
  2⤵
  - Executes dropped EXE
  PID:2528
- C:\Windows\System\WGIfmYa.exe
  C:\Windows\System\WGIfmYa.exe
  2⤵
  PID:1512
- C:\Windows\System\ciUYGRg.exe
  C:\Windows\System\ciUYGRg.exe
  2⤵
  PID:2804
- C:\Windows\System\xmkCrWP.exe
  C:\Windows\System\xmkCrWP.exe
  2⤵
  PID:2776
- C:\Windows\System\zDgbFlg.exe
  C:\Windows\System\zDgbFlg.exe
  2⤵
  PID:288
- C:\Windows\System\ktVkQNu.exe
  C:\Windows\System\ktVkQNu.exe
  2⤵
  PID:2404
- C:\Windows\System\pOiCKrD.exe
  C:\Windows\System\pOiCKrD.exe
  2⤵
  PID:2792
- C:\Windows\System\tZTDjkb.exe
  C:\Windows\System\tZTDjkb.exe
  2⤵
  PID:1620
- C:\Windows\System\pLugGub.exe
  C:\Windows\System\pLugGub.exe
  2⤵
  PID:1296
- C:\Windows\System\DzRIyqX.exe
  C:\Windows\System\DzRIyqX.exe
  2⤵
  PID:2028
- C:\Windows\System\RsHstHT.exe
  C:\Windows\System\RsHstHT.exe
  2⤵
  PID:532
- C:\Windows\System\QUQOkYR.exe
  C:\Windows\System\QUQOkYR.exe
  2⤵
  PID:568
- C:\Windows\System\RxxWhvj.exe
  C:\Windows\System\RxxWhvj.exe
  2⤵
  PID:1780
- C:\Windows\System\SmpKXHd.exe
  C:\Windows\System\SmpKXHd.exe
  2⤵
  PID:752
- C:\Windows\System\QqIjPHY.exe
  C:\Windows\System\QqIjPHY.exe
  2⤵
  PID:1120
- C:\Windows\System\GroiFTQ.exe
  C:\Windows\System\GroiFTQ.exe
  2⤵
  PID:2088
- C:\Windows\System\oSZiiov.exe
  C:\Windows\System\oSZiiov.exe
  2⤵
  PID:1660
- C:\Windows\System\KqClwam.exe
  C:\Windows\System\KqClwam.exe
  2⤵
  PID:1772
- C:\Windows\System\snfSqpx.exe
  C:\Windows\System\snfSqpx.exe
  2⤵
  PID:1272
- C:\Windows\System\HLvxsKt.exe
  C:\Windows\System\HLvxsKt.exe
  2⤵
  PID:300
- C:\Windows\System\MMCwIFK.exe
  C:\Windows\System\MMCwIFK.exe
  2⤵
  PID:940
- C:\Windows\System\YEGgukj.exe
  C:\Windows\System\YEGgukj.exe
  2⤵
  PID:2256
- C:\Windows\System\bkOVAwA.exe
  C:\Windows\System\bkOVAwA.exe
  2⤵
  PID:2124
- C:\Windows\System\sIAQAKu.exe
  C:\Windows\System\sIAQAKu.exe
  2⤵
  PID:980
- C:\Windows\System\NabyJTo.exe
  C:\Windows\System\NabyJTo.exe
  2⤵
  PID:1488
- C:\Windows\System\ILCZRTO.exe
  C:\Windows\System\ILCZRTO.exe
  2⤵
  PID:2832
- C:\Windows\System\IcxOGOi.exe
  C:\Windows\System\IcxOGOi.exe
  2⤵
  PID:1556
- C:\Windows\System\soEWIyS.exe
  C:\Windows\System\soEWIyS.exe
  2⤵
  PID:2660
- C:\Windows\System\CFWdqCi.exe
  C:\Windows\System\CFWdqCi.exe
  2⤵
  PID:2608
- C:\Windows\System\ADkeubG.exe
  C:\Windows\System\ADkeubG.exe
  2⤵
  PID:2680
- C:\Windows\System\lpMwTsJ.exe
  C:\Windows\System\lpMwTsJ.exe
  2⤵
  PID:2744
- C:\Windows\System\MlMKgba.exe
  C:\Windows\System\MlMKgba.exe
  2⤵
  PID:2960
- C:\Windows\System\dUfppzg.exe
  C:\Windows\System\dUfppzg.exe
  2⤵
  PID:2764
- C:\Windows\System\iymAXHE.exe
  C:\Windows\System\iymAXHE.exe
  2⤵
  PID:1740
- C:\Windows\System\vQduAOm.exe
  C:\Windows\System\vQduAOm.exe
  2⤵
  PID:2152
- C:\Windows\System\OGStOOz.exe
  C:\Windows\System\OGStOOz.exe
  2⤵
  PID:1624
- C:\Windows\System\kjTePAC.exe
  C:\Windows\System\kjTePAC.exe
  2⤵
  PID:2388
- C:\Windows\System\jTPQbqQ.exe
  C:\Windows\System\jTPQbqQ.exe
  2⤵
  PID:772
- C:\Windows\System\dsmhBDv.exe
  C:\Windows\System\dsmhBDv.exe
  2⤵
  PID:2288
- C:\Windows\System\iCTPcrM.exe
  C:\Windows\System\iCTPcrM.exe
  2⤵
  PID:2472
- C:\Windows\System\QmmfPrS.exe
  C:\Windows\System\QmmfPrS.exe
  2⤵
  PID:2440
- C:\Windows\System\iTjIRCp.exe
  C:\Windows\System\iTjIRCp.exe
  2⤵
  PID:3088
- C:\Windows\System\MPgnFFm.exe
  C:\Windows\System\MPgnFFm.exe
  2⤵
  PID:3108
- C:\Windows\System\NCwcsXQ.exe
  C:\Windows\System\NCwcsXQ.exe
  2⤵
  PID:3128
- C:\Windows\System\YyfWDve.exe
  C:\Windows\System\YyfWDve.exe
  2⤵
  PID:3148
- C:\Windows\System\XZRhUUN.exe
  C:\Windows\System\XZRhUUN.exe
  2⤵
  PID:3168
- C:\Windows\System\gHWwlzu.exe
  C:\Windows\System\gHWwlzu.exe
  2⤵
  PID:3188
- C:\Windows\System\PSarBxr.exe
  C:\Windows\System\PSarBxr.exe
  2⤵
  PID:3208
- C:\Windows\System\JQHKhAy.exe
  C:\Windows\System\JQHKhAy.exe
  2⤵
  PID:3228
- C:\Windows\System\xjclBIu.exe
  C:\Windows\System\xjclBIu.exe
  2⤵
  PID:3248
- C:\Windows\System\RsoAslk.exe
  C:\Windows\System\RsoAslk.exe
  2⤵
  PID:3268
- C:\Windows\System\kDsRvCX.exe
  C:\Windows\System\kDsRvCX.exe
  2⤵
  PID:3288
- C:\Windows\System\BRaLKQs.exe
  C:\Windows\System\BRaLKQs.exe
  2⤵
  PID:3308
- C:\Windows\System\EFkwDvb.exe
  C:\Windows\System\EFkwDvb.exe
  2⤵
  PID:3328
- C:\Windows\System\CCbvqiL.exe
  C:\Windows\System\CCbvqiL.exe
  2⤵
  PID:3348
- C:\Windows\System\FKrQPgh.exe
  C:\Windows\System\FKrQPgh.exe
  2⤵
  PID:3368
- C:\Windows\System\DAZheWN.exe
  C:\Windows\System\DAZheWN.exe
  2⤵
  PID:3384
- C:\Windows\System\CmpafZn.exe
  C:\Windows\System\CmpafZn.exe
  2⤵
  PID:3408
- C:\Windows\System\PlygxdL.exe
  C:\Windows\System\PlygxdL.exe
  2⤵
  PID:3428
- C:\Windows\System\poeocRy.exe
  C:\Windows\System\poeocRy.exe
  2⤵
  PID:3448
- C:\Windows\System\ZsRjEEw.exe
  C:\Windows\System\ZsRjEEw.exe
  2⤵
  PID:3464
- C:\Windows\System\DdyReGT.exe
  C:\Windows\System\DdyReGT.exe
  2⤵
  PID:3484
- C:\Windows\System\vftYjMn.exe
  C:\Windows\System\vftYjMn.exe
  2⤵
  PID:3504
- C:\Windows\System\LkaOnow.exe
  C:\Windows\System\LkaOnow.exe
  2⤵
  PID:3528
- C:\Windows\System\edhhFci.exe
  C:\Windows\System\edhhFci.exe
  2⤵
  PID:3548
- C:\Windows\System\BcloMFQ.exe
  C:\Windows\System\BcloMFQ.exe
  2⤵
  PID:3568
- C:\Windows\System\VRipSir.exe
  C:\Windows\System\VRipSir.exe
  2⤵
  PID:3588
- C:\Windows\System\VFCplAO.exe
  C:\Windows\System\VFCplAO.exe
  2⤵
  PID:3608
- C:\Windows\System\IUpsbVZ.exe
  C:\Windows\System\IUpsbVZ.exe
  2⤵
  PID:3628
- C:\Windows\System\JrqxSnH.exe
  C:\Windows\System\JrqxSnH.exe
  2⤵
  PID:3648
- C:\Windows\System\HLgjkRO.exe
  C:\Windows\System\HLgjkRO.exe
  2⤵
  PID:3668
- C:\Windows\System\jkDCcvD.exe
  C:\Windows\System\jkDCcvD.exe
  2⤵
  PID:3688
- C:\Windows\System\wOZOxXH.exe
  C:\Windows\System\wOZOxXH.exe
  2⤵
  PID:3708
- C:\Windows\System\gBIszrq.exe
  C:\Windows\System\gBIszrq.exe
  2⤵
  PID:3728
- C:\Windows\System\wOBZdTU.exe
  C:\Windows\System\wOBZdTU.exe
  2⤵
  PID:3748
- C:\Windows\System\hiMXCho.exe
  C:\Windows\System\hiMXCho.exe
  2⤵
  PID:3768
- C:\Windows\System\hzVgoCK.exe
  C:\Windows\System\hzVgoCK.exe
  2⤵
  PID:3788
- C:\Windows\System\eLLFhfQ.exe
  C:\Windows\System\eLLFhfQ.exe
  2⤵
  PID:3808
- C:\Windows\System\DDrhWkK.exe
  C:\Windows\System\DDrhWkK.exe
  2⤵
  PID:3828
- C:\Windows\System\UZolGpf.exe
  C:\Windows\System\UZolGpf.exe
  2⤵
  PID:3848
- C:\Windows\System\tuEoMeV.exe
  C:\Windows\System\tuEoMeV.exe
  2⤵
  PID:3868
- C:\Windows\System\oWiqPTT.exe
  C:\Windows\System\oWiqPTT.exe
  2⤵
  PID:3888
- C:\Windows\System\AupiPhj.exe
  C:\Windows\System\AupiPhj.exe
  2⤵
  PID:3908
- C:\Windows\System\mImYcFK.exe
  C:\Windows\System\mImYcFK.exe
  2⤵
  PID:3928
- C:\Windows\System\qtbrgMd.exe
  C:\Windows\System\qtbrgMd.exe
  2⤵
  PID:3948
- C:\Windows\System\TZtnYsD.exe
  C:\Windows\System\TZtnYsD.exe
  2⤵
  PID:3968
- C:\Windows\System\lbHzWan.exe
  C:\Windows\System\lbHzWan.exe
  2⤵
  PID:3988
- C:\Windows\System\mCYsazK.exe
  C:\Windows\System\mCYsazK.exe
  2⤵
  PID:4008
- C:\Windows\System\nNBWNOs.exe
  C:\Windows\System\nNBWNOs.exe
  2⤵
  PID:4028
- C:\Windows\System\REFNPhN.exe
  C:\Windows\System\REFNPhN.exe
  2⤵
  PID:4048
- C:\Windows\System\QsUSjKk.exe
  C:\Windows\System\QsUSjKk.exe
  2⤵
  PID:4068
- C:\Windows\System\CsgbEXe.exe
  C:\Windows\System\CsgbEXe.exe
  2⤵
  PID:4084
- C:\Windows\System\fhakVHZ.exe
  C:\Windows\System\fhakVHZ.exe
  2⤵
  PID:1960
- C:\Windows\System\gYJTENJ.exe
  C:\Windows\System\gYJTENJ.exe
  2⤵
  PID:1604
- C:\Windows\System\NBaPUiD.exe
  C:\Windows\System\NBaPUiD.exe
  2⤵
  PID:1036
- C:\Windows\System\dRXCBdv.exe
  C:\Windows\System\dRXCBdv.exe
  2⤵
  PID:780
- C:\Windows\System\FBctjKx.exe
  C:\Windows\System\FBctjKx.exe
  2⤵
  PID:1848
- C:\Windows\System\huKTIzL.exe
  C:\Windows\System\huKTIzL.exe
  2⤵
  PID:1228
- C:\Windows\System\xtUOEPu.exe
  C:\Windows\System\xtUOEPu.exe
  2⤵
  PID:1588
- C:\Windows\System\sHIHXsk.exe
  C:\Windows\System\sHIHXsk.exe
  2⤵
  PID:2156
- C:\Windows\System\tSztHGD.exe
  C:\Windows\System\tSztHGD.exe
  2⤵
  PID:2628
- C:\Windows\System\kZWzyVT.exe
  C:\Windows\System\kZWzyVT.exe
  2⤵
  PID:2168
- C:\Windows\System\EfkktPO.exe
  C:\Windows\System\EfkktPO.exe
  2⤵
  PID:1984
- C:\Windows\System\uRBflny.exe
  C:\Windows\System\uRBflny.exe
  2⤵
  PID:1924
- C:\Windows\System\oMJchPH.exe
  C:\Windows\System\oMJchPH.exe
  2⤵
  PID:756
- C:\Windows\System\JFvjewu.exe
  C:\Windows\System\JFvjewu.exe
  2⤵
  PID:2800
- C:\Windows\System\PuZJKjm.exe
  C:\Windows\System\PuZJKjm.exe
  2⤵
  PID:2100
- C:\Windows\System\qByTHBG.exe
  C:\Windows\System\qByTHBG.exe
  2⤵
  PID:1956
- C:\Windows\System\EXNoKPn.exe
  C:\Windows\System\EXNoKPn.exe
  2⤵
  PID:3084
- C:\Windows\System\tUDjtrO.exe
  C:\Windows\System\tUDjtrO.exe
  2⤵
  PID:3124
- C:\Windows\System\WsHachG.exe
  C:\Windows\System\WsHachG.exe
  2⤵
  PID:3144
- C:\Windows\System\KCSdkpO.exe
  C:\Windows\System\KCSdkpO.exe
  2⤵
  PID:3176
- C:\Windows\System\VxFZgyg.exe
  C:\Windows\System\VxFZgyg.exe
  2⤵
  PID:3204
- C:\Windows\System\fMjYFss.exe
  C:\Windows\System\fMjYFss.exe
  2⤵
  PID:3240
- C:\Windows\System\jNhjIwv.exe
  C:\Windows\System\jNhjIwv.exe
  2⤵
  PID:3276
- C:\Windows\System\ZeQjvEh.exe
  C:\Windows\System\ZeQjvEh.exe
  2⤵
  PID:3304
- C:\Windows\System\YMTMcpa.exe
  C:\Windows\System\YMTMcpa.exe
  2⤵
  PID:3336
- C:\Windows\System\fShQhUW.exe
  C:\Windows\System\fShQhUW.exe
  2⤵
  PID:3340
- C:\Windows\System\wKnjWba.exe
  C:\Windows\System\wKnjWba.exe
  2⤵
  PID:3416
- C:\Windows\System\eUAwEhH.exe
  C:\Windows\System\eUAwEhH.exe
  2⤵
  PID:3520
- C:\Windows\System\vyEhZdJ.exe
  C:\Windows\System\vyEhZdJ.exe
  2⤵
  PID:3516
- C:\Windows\System\WfNyZkQ.exe
  C:\Windows\System\WfNyZkQ.exe
  2⤵
  PID:3564
- C:\Windows\System\jlTBTHM.exe
  C:\Windows\System\jlTBTHM.exe
  2⤵
  PID:3584
- C:\Windows\System\bgspEQe.exe
  C:\Windows\System\bgspEQe.exe
  2⤵
  PID:3600
- C:\Windows\System\pUSSXGe.exe
  C:\Windows\System\pUSSXGe.exe
  2⤵
  PID:3644
- C:\Windows\System\ZkkhfIU.exe
  C:\Windows\System\ZkkhfIU.exe
  2⤵
  PID:3660
- C:\Windows\System\SqZHzfQ.exe
  C:\Windows\System\SqZHzfQ.exe
  2⤵
  PID:3716
- C:\Windows\System\GyZciwZ.exe
  C:\Windows\System\GyZciwZ.exe
  2⤵
  PID:3744
- C:\Windows\System\KeJmzot.exe
  C:\Windows\System\KeJmzot.exe
  2⤵
  PID:3760
- C:\Windows\System\kNFamcj.exe
  C:\Windows\System\kNFamcj.exe
  2⤵
  PID:3784
- C:\Windows\System\tYABRKo.exe
  C:\Windows\System\tYABRKo.exe
  2⤵
  PID:3824
- C:\Windows\System\RtVaNaw.exe
  C:\Windows\System\RtVaNaw.exe
  2⤵
  PID:3876
- C:\Windows\System\yBIFxrn.exe
  C:\Windows\System\yBIFxrn.exe
  2⤵
  PID:3860
- C:\Windows\System\tCHRVgi.exe
  C:\Windows\System\tCHRVgi.exe
  2⤵
  PID:3924
- C:\Windows\System\TbxARFJ.exe
  C:\Windows\System\TbxARFJ.exe
  2⤵
  PID:3956
- C:\Windows\System\yHqqzsb.exe
  C:\Windows\System\yHqqzsb.exe
  2⤵
  PID:3960
- C:\Windows\System\SXlCbWV.exe
  C:\Windows\System\SXlCbWV.exe
  2⤵
  PID:3984
- C:\Windows\System\WTKDEdS.exe
  C:\Windows\System\WTKDEdS.exe
  2⤵
  PID:4024
- C:\Windows\System\aiYsfeA.exe
  C:\Windows\System\aiYsfeA.exe
  2⤵
  PID:4060
- C:\Windows\System\pphLSue.exe
  C:\Windows\System\pphLSue.exe
  2⤵
  PID:2120
- C:\Windows\System\PjUiOfm.exe
  C:\Windows\System\PjUiOfm.exe
  2⤵
  PID:1852
- C:\Windows\System\CciKMFb.exe
  C:\Windows\System\CciKMFb.exe
  2⤵
  PID:1612
- C:\Windows\System\IipbdiF.exe
  C:\Windows\System\IipbdiF.exe
  2⤵
  PID:2000
- C:\Windows\System\sSfVHTh.exe
  C:\Windows\System\sSfVHTh.exe
  2⤵
  PID:1632
- C:\Windows\System\dYoRsqu.exe
  C:\Windows\System\dYoRsqu.exe
  2⤵
  PID:2724
- C:\Windows\System\bJYsRmu.exe
  C:\Windows\System\bJYsRmu.exe
  2⤵
  PID:2896
- C:\Windows\System\AmWgCYM.exe
  C:\Windows\System\AmWgCYM.exe
  2⤵
  PID:2944
- C:\Windows\System\kuBqGTZ.exe
  C:\Windows\System\kuBqGTZ.exe
  2⤵
  PID:2652
- C:\Windows\System\eSbqEzM.exe
  C:\Windows\System\eSbqEzM.exe
  2⤵
  PID:2996
- C:\Windows\System\roxAPbg.exe
  C:\Windows\System\roxAPbg.exe
  2⤵
  PID:2712
- C:\Windows\System\UxKMzWZ.exe
  C:\Windows\System\UxKMzWZ.exe
  2⤵
  PID:2436
- C:\Windows\System\OnXUqlb.exe
  C:\Windows\System\OnXUqlb.exe
  2⤵
  PID:1756
- C:\Windows\System\RyYxXdC.exe
  C:\Windows\System\RyYxXdC.exe
  2⤵
  PID:1668
- C:\Windows\System\whmxJxZ.exe
  C:\Windows\System\whmxJxZ.exe
  2⤵
  PID:320
- C:\Windows\System\IFHpOlB.exe
  C:\Windows\System\IFHpOlB.exe
  2⤵
  PID:2400
- C:\Windows\System\bVAShjt.exe
  C:\Windows\System\bVAShjt.exe
  2⤵
  PID:380
- C:\Windows\System\eRhEBxZ.exe
  C:\Windows\System\eRhEBxZ.exe
  2⤵
  PID:1992
- C:\Windows\System\AmCPECv.exe
  C:\Windows\System\AmCPECv.exe
  2⤵
  PID:2912
- C:\Windows\System\rnEyYmG.exe
  C:\Windows\System\rnEyYmG.exe
  2⤵
  PID:2664
- C:\Windows\System\dEwJGTB.exe
  C:\Windows\System\dEwJGTB.exe
  2⤵
  PID:1508
- C:\Windows\System\AyqPOcY.exe
  C:\Windows\System\AyqPOcY.exe
  2⤵
  PID:1268
- C:\Windows\System\ukxXHIC.exe
  C:\Windows\System\ukxXHIC.exe
  2⤵
  PID:2872
- C:\Windows\System\jPHhlLp.exe
  C:\Windows\System\jPHhlLp.exe
  2⤵
  PID:1592
- C:\Windows\System\eyfzuFT.exe
  C:\Windows\System\eyfzuFT.exe
  2⤵
  PID:1936
- C:\Windows\System\FhGknCK.exe
  C:\Windows\System\FhGknCK.exe
  2⤵
  PID:2548
- C:\Windows\System\spKLvke.exe
  C:\Windows\System\spKLvke.exe
  2⤵
  PID:3244
- C:\Windows\System\QxEQsta.exe
  C:\Windows\System\QxEQsta.exe
  2⤵
  PID:3220
- C:\Windows\System\UDVyoUt.exe
  C:\Windows\System\UDVyoUt.exe
  2⤵
  PID:3296
- C:\Windows\System\BjxrxmT.exe
  C:\Windows\System\BjxrxmT.exe
  2⤵
  PID:3436
- C:\Windows\System\qGemuvI.exe
  C:\Windows\System\qGemuvI.exe
  2⤵
  PID:1644
- C:\Windows\System\Veixkol.exe
  C:\Windows\System\Veixkol.exe
  2⤵
  PID:376
- C:\Windows\System\SpEDkjv.exe
  C:\Windows\System\SpEDkjv.exe
  2⤵
  PID:3300
- C:\Windows\System\JHlTYkK.exe
  C:\Windows\System\JHlTYkK.exe
  2⤵
  PID:3320
- C:\Windows\System\CzKrvhe.exe
  C:\Windows\System\CzKrvhe.exe
  2⤵
  PID:3400
- C:\Windows\System\iLagXoD.exe
  C:\Windows\System\iLagXoD.exe
  2⤵
  PID:3604
- C:\Windows\System\vdUOPOF.exe
  C:\Windows\System\vdUOPOF.exe
  2⤵
  PID:3680
- C:\Windows\System\eomvYgX.exe
  C:\Windows\System\eomvYgX.exe
  2⤵
  PID:3736
- C:\Windows\System\rYpYFNP.exe
  C:\Windows\System\rYpYFNP.exe
  2⤵
  PID:3512
- C:\Windows\System\JYHsFvO.exe
  C:\Windows\System\JYHsFvO.exe
  2⤵
  PID:3896
- C:\Windows\System\kXsAUOK.exe
  C:\Windows\System\kXsAUOK.exe
  2⤵
  PID:4000
- C:\Windows\System\MGnFyvC.exe
  C:\Windows\System\MGnFyvC.exe
  2⤵
  PID:3500
- C:\Windows\System\WdvuZRj.exe
  C:\Windows\System\WdvuZRj.exe
  2⤵
  PID:3996
- C:\Windows\System\cOJKtWR.exe
  C:\Windows\System\cOJKtWR.exe
  2⤵
  PID:3576
- C:\Windows\System\VxYZtYu.exe
  C:\Windows\System\VxYZtYu.exe
  2⤵
  PID:2572
- C:\Windows\System\PaneNjJ.exe
  C:\Windows\System\PaneNjJ.exe
  2⤵
  PID:3864
- C:\Windows\System\zLsPvAq.exe
  C:\Windows\System\zLsPvAq.exe
  2⤵
  PID:3764
- C:\Windows\System\CWANnXE.exe
  C:\Windows\System\CWANnXE.exe
  2⤵
  PID:2592
- C:\Windows\System\EJfCXZg.exe
  C:\Windows\System\EJfCXZg.exe
  2⤵
  PID:840
- C:\Windows\System\GjSmaYg.exe
  C:\Windows\System\GjSmaYg.exe
  2⤵
  PID:2072
- C:\Windows\System\bAZUypf.exe
  C:\Windows\System\bAZUypf.exe
  2⤵
  PID:1284
- C:\Windows\System\ygATnXd.exe
  C:\Windows\System\ygATnXd.exe
  2⤵
  PID:2808
- C:\Windows\System\SueBJyv.exe
  C:\Windows\System\SueBJyv.exe
  2⤵
  PID:2780
- C:\Windows\System\hExhzAc.exe
  C:\Windows\System\hExhzAc.exe
  2⤵
  PID:2384
- C:\Windows\System\iVLTEHD.exe
  C:\Windows\System\iVLTEHD.exe
  2⤵
  PID:2616
- C:\Windows\System\UdfPVFs.exe
  C:\Windows\System\UdfPVFs.exe
  2⤵
  PID:792
- C:\Windows\System\NKQlaSc.exe
  C:\Windows\System\NKQlaSc.exe
  2⤵
  PID:2552
- C:\Windows\System\CJiqPxG.exe
  C:\Windows\System\CJiqPxG.exe
  2⤵
  PID:1292
- C:\Windows\System\BuOSLEQ.exe
  C:\Windows\System\BuOSLEQ.exe
  2⤵
  PID:3012
- C:\Windows\System\gPwyyFp.exe
  C:\Windows\System\gPwyyFp.exe
  2⤵
  PID:3160
- C:\Windows\System\PEcdTKw.exe
  C:\Windows\System\PEcdTKw.exe
  2⤵
  PID:2228
- C:\Windows\System\AwBoGJa.exe
  C:\Windows\System\AwBoGJa.exe
  2⤵
  PID:3264
- C:\Windows\System\WjmKste.exe
  C:\Windows\System\WjmKste.exe
  2⤵
  PID:3068
- C:\Windows\System\tqPheca.exe
  C:\Windows\System\tqPheca.exe
  2⤵
  PID:3136
- C:\Windows\System\pWVkYhL.exe
  C:\Windows\System\pWVkYhL.exe
  2⤵
  PID:3776
- C:\Windows\System\XLmNcUS.exe
  C:\Windows\System\XLmNcUS.exe
  2⤵
  PID:3940
- C:\Windows\System\JKlxhXn.exe
  C:\Windows\System\JKlxhXn.exe
  2⤵
  PID:3540
- C:\Windows\System\LidNgil.exe
  C:\Windows\System\LidNgil.exe
  2⤵
  PID:3260
- C:\Windows\System\OSFwnjR.exe
  C:\Windows\System\OSFwnjR.exe
  2⤵
  PID:3580
- C:\Windows\System\ybsjRZd.exe
  C:\Windows\System\ybsjRZd.exe
  2⤵
  PID:4020
- C:\Windows\System\ISlpGSM.exe
  C:\Windows\System\ISlpGSM.exe
  2⤵
  PID:4040
- C:\Windows\System\TnRsmis.exe
  C:\Windows\System\TnRsmis.exe
  2⤵
  PID:3364
- C:\Windows\System\eaeCuNr.exe
  C:\Windows\System\eaeCuNr.exe
  2⤵
  PID:1876
- C:\Windows\System\nhmSAQc.exe
  C:\Windows\System\nhmSAQc.exe
  2⤵
  PID:2984
- C:\Windows\System\GLdjcNh.exe
  C:\Windows\System\GLdjcNh.exe
  2⤵
  PID:2336
- C:\Windows\System\xOchQPN.exe
  C:\Windows\System\xOchQPN.exe
  2⤵
  PID:1028
- C:\Windows\System\vYEZvso.exe
  C:\Windows\System\vYEZvso.exe
  2⤵
  PID:3180
- C:\Windows\System\bIIiuuO.exe
  C:\Windows\System\bIIiuuO.exe
  2⤵
  PID:3676
- C:\Windows\System\gEyuuCx.exe
  C:\Windows\System\gEyuuCx.exe
  2⤵
  PID:4092
- C:\Windows\System\rfPRzfE.exe
  C:\Windows\System\rfPRzfE.exe
  2⤵
  PID:3836
- C:\Windows\System\suNXJqO.exe
  C:\Windows\System\suNXJqO.exe
  2⤵
  PID:3024
- C:\Windows\System\WTqHfwi.exe
  C:\Windows\System\WTqHfwi.exe
  2⤵
  PID:1616
- C:\Windows\System\jQZZpjA.exe
  C:\Windows\System\jQZZpjA.exe
  2⤵
  PID:1412
- C:\Windows\System\eJkBnmi.exe
  C:\Windows\System\eJkBnmi.exe
  2⤵
  PID:3440
- C:\Windows\System\JqtUWPk.exe
  C:\Windows\System\JqtUWPk.exe
  2⤵
  PID:2720
- C:\Windows\System\XgUnnRi.exe
  C:\Windows\System\XgUnnRi.exe
  2⤵
  PID:1108
- C:\Windows\System\wyrPLKC.exe
  C:\Windows\System\wyrPLKC.exe
  2⤵
  PID:2452
- C:\Windows\System\AOyWcdm.exe
  C:\Windows\System\AOyWcdm.exe
  2⤵
  PID:3100
- C:\Windows\System\vabVCRo.exe
  C:\Windows\System\vabVCRo.exe
  2⤵
  PID:3844
- C:\Windows\System\xagTanN.exe
  C:\Windows\System\xagTanN.exe
  2⤵
  PID:580
- C:\Windows\System\AWuOtVn.exe
  C:\Windows\System\AWuOtVn.exe
  2⤵
  PID:3404
- C:\Windows\System\Taqrroj.exe
  C:\Windows\System\Taqrroj.exe
  2⤵
  PID:2276
- C:\Windows\System\UlsKASk.exe
  C:\Windows\System\UlsKASk.exe
  2⤵
  PID:4064
- C:\Windows\System\ETiUXgq.exe
  C:\Windows\System\ETiUXgq.exe
  2⤵
  PID:3496
- C:\Windows\System\xOAimHv.exe
  C:\Windows\System\xOAimHv.exe
  2⤵
  PID:2640
- C:\Windows\System\gvwHckj.exe
  C:\Windows\System\gvwHckj.exe
  2⤵
  PID:3456
- C:\Windows\System\GKomigP.exe
  C:\Windows\System\GKomigP.exe
  2⤵
  PID:3104
- C:\Windows\System\DDYFGuA.exe
  C:\Windows\System\DDYFGuA.exe
  2⤵
  PID:1676
- C:\Windows\System\vJmZyTM.exe
  C:\Windows\System\vJmZyTM.exe
  2⤵
  PID:1452
- C:\Windows\System\oeomdER.exe
  C:\Windows\System\oeomdER.exe
  2⤵
  PID:2536
- C:\Windows\System\dKZzVhV.exe
  C:\Windows\System\dKZzVhV.exe
  2⤵
  PID:2448
- C:\Windows\System\GjBraZe.exe
  C:\Windows\System\GjBraZe.exe
  2⤵
  PID:3756
- C:\Windows\System\dfRYIcu.exe
  C:\Windows\System\dfRYIcu.exe
  2⤵
  PID:2624
- C:\Windows\System\CjOQpAK.exe
  C:\Windows\System\CjOQpAK.exe
  2⤵
  PID:2688
- C:\Windows\System\kJkTaLh.exe
  C:\Windows\System\kJkTaLh.exe
  2⤵
  PID:2848
- C:\Windows\System\WDdXbOu.exe
  C:\Windows\System\WDdXbOu.exe
  2⤵
  PID:2476
- C:\Windows\System\hRSqDoT.exe
  C:\Windows\System\hRSqDoT.exe
  2⤵
  PID:1344
- C:\Windows\System\mpTmoNU.exe
  C:\Windows\System\mpTmoNU.exe
  2⤵
  PID:4112
- C:\Windows\System\RtvCpwV.exe
  C:\Windows\System\RtvCpwV.exe
  2⤵
  PID:4136
- C:\Windows\System\fKLOHEX.exe
  C:\Windows\System\fKLOHEX.exe
  2⤵
  PID:4156
- C:\Windows\System\nGdzYFx.exe
  C:\Windows\System\nGdzYFx.exe
  2⤵
  PID:4172
- C:\Windows\System\ZBmmYTq.exe
  C:\Windows\System\ZBmmYTq.exe
  2⤵
  PID:4188
- C:\Windows\System\wwKwTqA.exe
  C:\Windows\System\wwKwTqA.exe
  2⤵
  PID:4204
- C:\Windows\System\BFRpZcH.exe
  C:\Windows\System\BFRpZcH.exe
  2⤵
  PID:4220
- C:\Windows\System\UiExOVZ.exe
  C:\Windows\System\UiExOVZ.exe
  2⤵
  PID:4248
- C:\Windows\System\oulumUX.exe
  C:\Windows\System\oulumUX.exe
  2⤵
  PID:4264
- C:\Windows\System\HmtzLsW.exe
  C:\Windows\System\HmtzLsW.exe
  2⤵
  PID:4280
- C:\Windows\System\InlCJvF.exe
  C:\Windows\System\InlCJvF.exe
  2⤵
  PID:4296
- C:\Windows\System\xQwFNAf.exe
  C:\Windows\System\xQwFNAf.exe
  2⤵
  PID:4312
- C:\Windows\System\LvrTnnn.exe
  C:\Windows\System\LvrTnnn.exe
  2⤵
  PID:4328
- C:\Windows\System\VgAeRuT.exe
  C:\Windows\System\VgAeRuT.exe
  2⤵
  PID:4344
- C:\Windows\System\zgTwUwN.exe
  C:\Windows\System\zgTwUwN.exe
  2⤵
  PID:4364
- C:\Windows\System\ljgeegY.exe
  C:\Windows\System\ljgeegY.exe
  2⤵
  PID:4384
- C:\Windows\System\DJGcXre.exe
  C:\Windows\System\DJGcXre.exe
  2⤵
  PID:4400
- C:\Windows\System\WRMFaJS.exe
  C:\Windows\System\WRMFaJS.exe
  2⤵
  PID:4420
- C:\Windows\System\GXfYmXi.exe
  C:\Windows\System\GXfYmXi.exe
  2⤵
  PID:4436
- C:\Windows\System\gHdGoGv.exe
  C:\Windows\System\gHdGoGv.exe
  2⤵
  PID:4452
- C:\Windows\System\aIcHWKM.exe
  C:\Windows\System\aIcHWKM.exe
  2⤵
  PID:4472
- C:\Windows\System\FwHMzfG.exe
  C:\Windows\System\FwHMzfG.exe
  2⤵
  PID:4488
- C:\Windows\System\ZGSTSrz.exe
  C:\Windows\System\ZGSTSrz.exe
  2⤵
  PID:4508
- C:\Windows\System\oOFinob.exe
  C:\Windows\System\oOFinob.exe
  2⤵
  PID:4528
- C:\Windows\System\Agwzimx.exe
  C:\Windows\System\Agwzimx.exe
  2⤵
  PID:4544
- C:\Windows\System\llVoncF.exe
  C:\Windows\System\llVoncF.exe
  2⤵
  PID:4560
- C:\Windows\System\tgBEAsT.exe
  C:\Windows\System\tgBEAsT.exe
  2⤵
  PID:4576
- C:\Windows\System\qPFDPrg.exe
  C:\Windows\System\qPFDPrg.exe
  2⤵
  PID:4596
- C:\Windows\System\qFgflPC.exe
  C:\Windows\System\qFgflPC.exe
  2⤵
  PID:4616
- C:\Windows\System\zOHjDJk.exe
  C:\Windows\System\zOHjDJk.exe
  2⤵
  PID:4632
- C:\Windows\System\OoXhLZw.exe
  C:\Windows\System\OoXhLZw.exe
  2⤵
  PID:4652
- C:\Windows\System\FvaYqis.exe
  C:\Windows\System\FvaYqis.exe
  2⤵
  PID:4668
- C:\Windows\System\fGZDUIx.exe
  C:\Windows\System\fGZDUIx.exe
  2⤵
  PID:4684
- C:\Windows\System\WHYuzIq.exe
  C:\Windows\System\WHYuzIq.exe
  2⤵
  PID:4700
- C:\Windows\System\RzAMvvm.exe
  C:\Windows\System\RzAMvvm.exe
  2⤵
  PID:4716
- C:\Windows\System\SrFWLMm.exe
  C:\Windows\System\SrFWLMm.exe
  2⤵
  PID:4740
- C:\Windows\System\GSvcpYq.exe
  C:\Windows\System\GSvcpYq.exe
  2⤵
  PID:4760
- C:\Windows\System\tZjvRcO.exe
  C:\Windows\System\tZjvRcO.exe
  2⤵
  PID:4780
- C:\Windows\System\gJunGsH.exe
  C:\Windows\System\gJunGsH.exe
  2⤵
  PID:4796
- C:\Windows\System\uEcNojb.exe
  C:\Windows\System\uEcNojb.exe
  2⤵
  PID:4816
- C:\Windows\System\jGTVHsK.exe
  C:\Windows\System\jGTVHsK.exe
  2⤵
  PID:4832
- C:\Windows\System\QjYICRr.exe
  C:\Windows\System\QjYICRr.exe
  2⤵
  PID:4928
- C:\Windows\System\KIzOZyi.exe
  C:\Windows\System\KIzOZyi.exe
  2⤵
  PID:4948
- C:\Windows\System\snvvqBz.exe
  C:\Windows\System\snvvqBz.exe
  2⤵
  PID:4968
- C:\Windows\System\hfWNVDS.exe
  C:\Windows\System\hfWNVDS.exe
  2⤵
  PID:4984
- C:\Windows\System\xujdfdl.exe
  C:\Windows\System\xujdfdl.exe
  2⤵
  PID:5000
- C:\Windows\System\oHozJFc.exe
  C:\Windows\System\oHozJFc.exe
  2⤵
  PID:5020
- C:\Windows\System\gzEbBGz.exe
  C:\Windows\System\gzEbBGz.exe
  2⤵
  PID:5036
- C:\Windows\System\eegDZgU.exe
  C:\Windows\System\eegDZgU.exe
  2⤵
  PID:5060
- C:\Windows\System\pJdePOI.exe
  C:\Windows\System\pJdePOI.exe
  2⤵
  PID:5076
- C:\Windows\System\ckrAiaX.exe
  C:\Windows\System\ckrAiaX.exe
  2⤵
  PID:5092
- C:\Windows\System\RGMyqUu.exe
  C:\Windows\System\RGMyqUu.exe
  2⤵
  PID:5108
- C:\Windows\System\xqSzNTw.exe
  C:\Windows\System\xqSzNTw.exe
  2⤵
  PID:620
- C:\Windows\System\NosDWQW.exe
  C:\Windows\System\NosDWQW.exe
  2⤵
  PID:1684
- C:\Windows\System\MuNsXSM.exe
  C:\Windows\System\MuNsXSM.exe
  2⤵
  PID:4120
- C:\Windows\System\UjatUPZ.exe
  C:\Windows\System\UjatUPZ.exe
  2⤵
  PID:4148
- C:\Windows\System\DrotvBs.exe
  C:\Windows\System\DrotvBs.exe
  2⤵
  PID:4132
- C:\Windows\System\tzthiQR.exe
  C:\Windows\System\tzthiQR.exe
  2⤵
  PID:4196
- C:\Windows\System\ZkwIuJH.exe
  C:\Windows\System\ZkwIuJH.exe
  2⤵
  PID:4320
- C:\Windows\System\EeEQDnW.exe
  C:\Windows\System\EeEQDnW.exe
  2⤵
  PID:4396
- C:\Windows\System\DcadCdC.exe
  C:\Windows\System\DcadCdC.exe
  2⤵
  PID:4236
- C:\Windows\System\DsZnWLz.exe
  C:\Windows\System\DsZnWLz.exe
  2⤵
  PID:4540
- C:\Windows\System\SHZMACr.exe
  C:\Windows\System\SHZMACr.exe
  2⤵
  PID:4608
- C:\Windows\System\wKRZynp.exe
  C:\Windows\System\wKRZynp.exe
  2⤵
  PID:4380
- C:\Windows\System\ZWnlGFB.exe
  C:\Windows\System\ZWnlGFB.exe
  2⤵
  PID:4448
- C:\Windows\System\roYSBct.exe
  C:\Windows\System\roYSBct.exe
  2⤵
  PID:4520
- C:\Windows\System\ygjYjkM.exe
  C:\Windows\System\ygjYjkM.exe
  2⤵
  PID:4584
- C:\Windows\System\bMBsYMM.exe
  C:\Windows\System\bMBsYMM.exe
  2⤵
  PID:4628
- C:\Windows\System\YtVqHqv.exe
  C:\Windows\System\YtVqHqv.exe
  2⤵
  PID:4728
- C:\Windows\System\ZTfwAmj.exe
  C:\Windows\System\ZTfwAmj.exe
  2⤵
  PID:4772
- C:\Windows\System\OnehXIi.exe
  C:\Windows\System\OnehXIi.exe
  2⤵
  PID:4848
- C:\Windows\System\gkDMkIt.exe
  C:\Windows\System\gkDMkIt.exe
  2⤵
  PID:4864
- C:\Windows\System\oulSJyG.exe
  C:\Windows\System\oulSJyG.exe
  2⤵
  PID:4888
- C:\Windows\System\zloYQcK.exe
  C:\Windows\System\zloYQcK.exe
  2⤵
  PID:4904
- C:\Windows\System\eLbqQlF.exe
  C:\Windows\System\eLbqQlF.exe
  2⤵
  PID:4924
- C:\Windows\System\KqobCKs.exe
  C:\Windows\System\KqobCKs.exe
  2⤵
  PID:4964
- C:\Windows\System\imcJWNU.exe
  C:\Windows\System\imcJWNU.exe
  2⤵
  PID:4648
- C:\Windows\System\IMsWhRN.exe
  C:\Windows\System\IMsWhRN.exe
  2⤵
  PID:4712
- C:\Windows\System\aWqppZx.exe
  C:\Windows\System\aWqppZx.exe
  2⤵
  PID:4788
- C:\Windows\System\RiswzOD.exe
  C:\Windows\System\RiswzOD.exe
  2⤵
  PID:5068
- C:\Windows\System\sLbFXtc.exe
  C:\Windows\System\sLbFXtc.exe
  2⤵
  PID:4104
- C:\Windows\System\exTFdxw.exe
  C:\Windows\System\exTFdxw.exe
  2⤵
  PID:4260
- C:\Windows\System\bDwzQwY.exe
  C:\Windows\System\bDwzQwY.exe
  2⤵
  PID:4356
- C:\Windows\System\bOndMrA.exe
  C:\Windows\System\bOndMrA.exe
  2⤵
  PID:4824
- C:\Windows\System\oXABRSP.exe
  C:\Windows\System\oXABRSP.exe
  2⤵
  PID:5052
- C:\Windows\System\kKdmgRX.exe
  C:\Windows\System\kKdmgRX.exe
  2⤵
  PID:4180
- C:\Windows\System\QNternR.exe
  C:\Windows\System\QNternR.exe
  2⤵
  PID:4292
- C:\Windows\System\DTJKgAB.exe
  C:\Windows\System\DTJKgAB.exe
  2⤵
  PID:4976
- C:\Windows\System\iJOeYQZ.exe
  C:\Windows\System\iJOeYQZ.exe
  2⤵
  PID:5044
- C:\Windows\System\xsMfnGZ.exe
  C:\Windows\System\xsMfnGZ.exe
  2⤵
  PID:4276
- C:\Windows\System\tBDXhur.exe
  C:\Windows\System\tBDXhur.exe
  2⤵
  PID:4308
- C:\Windows\System\rrPhcpo.exe
  C:\Windows\System\rrPhcpo.exe
  2⤵
  PID:4504
- C:\Windows\System\VkXbAjv.exe
  C:\Windows\System\VkXbAjv.exe
  2⤵
  PID:4516
- C:\Windows\System\QMYDitr.exe
  C:\Windows\System\QMYDitr.exe
  2⤵
  PID:4768
- C:\Windows\System\yeHRysh.exe
  C:\Windows\System\yeHRysh.exe
  2⤵
  PID:4896
- C:\Windows\System\rtownyO.exe
  C:\Windows\System\rtownyO.exe
  2⤵
  PID:4956
- C:\Windows\System\zWgtlHd.exe
  C:\Windows\System\zWgtlHd.exe
  2⤵
  PID:5032
- C:\Windows\System\PmXLzdU.exe
  C:\Windows\System\PmXLzdU.exe
  2⤵
  PID:4624
- C:\Windows\System\uUNdWzw.exe
  C:\Windows\System\uUNdWzw.exe
  2⤵
  PID:4288
- C:\Windows\System\GxmXkrX.exe
  C:\Windows\System\GxmXkrX.exe
  2⤵
  PID:4708
- C:\Windows\System\MGYwIAi.exe
  C:\Windows\System\MGYwIAi.exe
  2⤵
  PID:2420
- C:\Windows\System\RNFsYOo.exe
  C:\Windows\System\RNFsYOo.exe
  2⤵
  PID:4916
- C:\Windows\System\rqZLQBt.exe
  C:\Windows\System\rqZLQBt.exe
  2⤵
  PID:5048
- C:\Windows\System\YJznsih.exe
  C:\Windows\System\YJznsih.exe
  2⤵
  PID:4376
- C:\Windows\System\iCkEWjL.exe
  C:\Windows\System\iCkEWjL.exe
  2⤵
  PID:4940
- C:\Windows\System\oXJsBbr.exe
  C:\Windows\System\oXJsBbr.exe
  2⤵
  PID:5016
- C:\Windows\System\IgLSNtl.exe
  C:\Windows\System\IgLSNtl.exe
  2⤵
  PID:4272
- C:\Windows\System\yqyCZew.exe
  C:\Windows\System\yqyCZew.exe
  2⤵
  PID:4444
- C:\Windows\System\SEDafsp.exe
  C:\Windows\System\SEDafsp.exe
  2⤵
  PID:4840
- C:\Windows\System\qsfwfro.exe
  C:\Windows\System\qsfwfro.exe
  2⤵
  PID:4912
- C:\Windows\System\gCKSowc.exe
  C:\Windows\System\gCKSowc.exe
  2⤵
  PID:4432
- C:\Windows\System\fSZCzmd.exe
  C:\Windows\System\fSZCzmd.exe
  2⤵
  PID:5012
- C:\Windows\System\glLrkSW.exe
  C:\Windows\System\glLrkSW.exe
  2⤵
  PID:4724
- C:\Windows\System\cceylSN.exe
  C:\Windows\System\cceylSN.exe
  2⤵
  PID:4256
- C:\Windows\System\DPdNfKq.exe
  C:\Windows\System\DPdNfKq.exe
  2⤵
  PID:5100
- C:\Windows\System\HYbxazJ.exe
  C:\Windows\System\HYbxazJ.exe
  2⤵
  PID:4100
- C:\Windows\System\PlWZJdf.exe
  C:\Windows\System\PlWZJdf.exe
  2⤵
  PID:4416
- C:\Windows\System\IroKsvf.exe
  C:\Windows\System\IroKsvf.exe
  2⤵
  PID:4876
- C:\Windows\System\lzCTQiw.exe
  C:\Windows\System\lzCTQiw.exe
  2⤵
  PID:4556
- C:\Windows\System\tKWwTrQ.exe
  C:\Windows\System\tKWwTrQ.exe
  2⤵
  PID:4996
- C:\Windows\System\AwfTJLn.exe
  C:\Windows\System\AwfTJLn.exe
  2⤵
  PID:4572
- C:\Windows\System\ijDjsRa.exe
  C:\Windows\System\ijDjsRa.exe
  2⤵
  PID:4756
- C:\Windows\System\EeQJsFr.exe
  C:\Windows\System\EeQJsFr.exe
  2⤵
  PID:4500
- C:\Windows\System\FQOIewb.exe
  C:\Windows\System\FQOIewb.exe
  2⤵
  PID:4880
- C:\Windows\System\YuhZQlE.exe
  C:\Windows\System\YuhZQlE.exe
  2⤵
  PID:4936
- C:\Windows\System\GxjKIjY.exe
  C:\Windows\System\GxjKIjY.exe
  2⤵
  PID:4696
- C:\Windows\System\rrFGxkM.exe
  C:\Windows\System\rrFGxkM.exe
  2⤵
  PID:5136
- C:\Windows\System\ygxtHlq.exe
  C:\Windows\System\ygxtHlq.exe
  2⤵
  PID:5152
- C:\Windows\System\GbtJEbe.exe
  C:\Windows\System\GbtJEbe.exe
  2⤵
  PID:5168
- C:\Windows\System\SekPMqa.exe
  C:\Windows\System\SekPMqa.exe
  2⤵
  PID:5188
- C:\Windows\System\JTRwIcT.exe
  C:\Windows\System\JTRwIcT.exe
  2⤵
  PID:5208
- C:\Windows\System\GpsUhnA.exe
  C:\Windows\System\GpsUhnA.exe
  2⤵
  PID:5228
- C:\Windows\System\udkbccz.exe
  C:\Windows\System\udkbccz.exe
  2⤵
  PID:5248
- C:\Windows\System\JYzGzxx.exe
  C:\Windows\System\JYzGzxx.exe
  2⤵
  PID:5264
- C:\Windows\System\IreNdWD.exe
  C:\Windows\System\IreNdWD.exe
  2⤵
  PID:5300
- C:\Windows\System\VALZfzd.exe
  C:\Windows\System\VALZfzd.exe
  2⤵
  PID:5316
- C:\Windows\System\ZOQVkCJ.exe
  C:\Windows\System\ZOQVkCJ.exe
  2⤵
  PID:5332
- C:\Windows\System\oiJyNxW.exe
  C:\Windows\System\oiJyNxW.exe
  2⤵
  PID:5348
- C:\Windows\System\EstHxif.exe
  C:\Windows\System\EstHxif.exe
  2⤵
  PID:5368
- C:\Windows\System\kEKRmZm.exe
  C:\Windows\System\kEKRmZm.exe
  2⤵
  PID:5392
- C:\Windows\System\pyVFPlI.exe
  C:\Windows\System\pyVFPlI.exe
  2⤵
  PID:5412
- C:\Windows\System\GIpzPnl.exe
  C:\Windows\System\GIpzPnl.exe
  2⤵
  PID:5428
- C:\Windows\System\jLknGPq.exe
  C:\Windows\System\jLknGPq.exe
  2⤵
  PID:5444
- C:\Windows\System\ANYgBox.exe
  C:\Windows\System\ANYgBox.exe
  2⤵
  PID:5464
- C:\Windows\System\qcKPrZy.exe
  C:\Windows\System\qcKPrZy.exe
  2⤵
  PID:5480
- C:\Windows\System\UYZNTGP.exe
  C:\Windows\System\UYZNTGP.exe
  2⤵
  PID:5496
- C:\Windows\System\EYjjEUF.exe
  C:\Windows\System\EYjjEUF.exe
  2⤵
  PID:5512
- C:\Windows\System\wYjVHya.exe
  C:\Windows\System\wYjVHya.exe
  2⤵
  PID:5556
- C:\Windows\System\BrOYBWm.exe
  C:\Windows\System\BrOYBWm.exe
  2⤵
  PID:5572
- C:\Windows\System\DuwOrWM.exe
  C:\Windows\System\DuwOrWM.exe
  2⤵
  PID:5592
- C:\Windows\System\hOjBkET.exe
  C:\Windows\System\hOjBkET.exe
  2⤵
  PID:5616
- C:\Windows\System\BNmsBcK.exe
  C:\Windows\System\BNmsBcK.exe
  2⤵
  PID:5644
- C:\Windows\System\hteFqar.exe
  C:\Windows\System\hteFqar.exe
  2⤵
  PID:5660
- C:\Windows\System\wmubKBi.exe
  C:\Windows\System\wmubKBi.exe
  2⤵
  PID:5676
- C:\Windows\System\UzNAPai.exe
  C:\Windows\System\UzNAPai.exe
  2⤵
  PID:5692
- C:\Windows\System\UzwXFcR.exe
  C:\Windows\System\UzwXFcR.exe
  2⤵
  PID:5712
- C:\Windows\System\rRkiGKi.exe
  C:\Windows\System\rRkiGKi.exe
  2⤵
  PID:5732
- C:\Windows\System\tHCJfcl.exe
  C:\Windows\System\tHCJfcl.exe
  2⤵
  PID:5748
- C:\Windows\System\NnuQlcn.exe
  C:\Windows\System\NnuQlcn.exe
  2⤵
  PID:5772
- C:\Windows\System\FsutsKW.exe
  C:\Windows\System\FsutsKW.exe
  2⤵
  PID:5788
- C:\Windows\System\RkyjULu.exe
  C:\Windows\System\RkyjULu.exe
  2⤵
  PID:5804
- C:\Windows\System\hIoAion.exe
  C:\Windows\System\hIoAion.exe
  2⤵
  PID:5820
- C:\Windows\System\zZeBieo.exe
  C:\Windows\System\zZeBieo.exe
  2⤵
  PID:5836
- C:\Windows\System\vayksPi.exe
  C:\Windows\System\vayksPi.exe
  2⤵
  PID:5852
- C:\Windows\System\GjdzyYN.exe
  C:\Windows\System\GjdzyYN.exe
  2⤵
  PID:5868
- C:\Windows\System\EGsfYGN.exe
  C:\Windows\System\EGsfYGN.exe
  2⤵
  PID:5888
- C:\Windows\System\sSivuvf.exe
  C:\Windows\System\sSivuvf.exe
  2⤵
  PID:5908
- C:\Windows\System\mHrjDAJ.exe
  C:\Windows\System\mHrjDAJ.exe
  2⤵
  PID:5928
- C:\Windows\System\atwgQHw.exe
  C:\Windows\System\atwgQHw.exe
  2⤵
  PID:5944
- C:\Windows\System\OCirQGX.exe
  C:\Windows\System\OCirQGX.exe
  2⤵
  PID:5960
- C:\Windows\System\eCLNDsX.exe
  C:\Windows\System\eCLNDsX.exe
  2⤵
  PID:5976
- C:\Windows\System\pNbPXfe.exe
  C:\Windows\System\pNbPXfe.exe
  2⤵
  PID:6052
- C:\Windows\System\aXdljMu.exe
  C:\Windows\System\aXdljMu.exe
  2⤵
  PID:6068
- C:\Windows\System\mXFkMhN.exe
  C:\Windows\System\mXFkMhN.exe
  2⤵
  PID:6092
- C:\Windows\System\VxsejEJ.exe
  C:\Windows\System\VxsejEJ.exe
  2⤵
  PID:6108
- C:\Windows\System\uygDiSa.exe
  C:\Windows\System\uygDiSa.exe
  2⤵
  PID:6124
- C:\Windows\System\jPurpYw.exe
  C:\Windows\System\jPurpYw.exe
  2⤵
  PID:4860
- C:\Windows\System\VrEOEQi.exe
  C:\Windows\System\VrEOEQi.exe
  2⤵
  PID:5176
- C:\Windows\System\NvgxmGV.exe
  C:\Windows\System\NvgxmGV.exe
  2⤵
  PID:5160
- C:\Windows\System\neVVVuS.exe
  C:\Windows\System\neVVVuS.exe
  2⤵
  PID:5028
- C:\Windows\System\MitppOU.exe
  C:\Windows\System\MitppOU.exe
  2⤵
  PID:5224
- C:\Windows\System\bcxPshq.exe
  C:\Windows\System\bcxPshq.exe
  2⤵
  PID:5256
- C:\Windows\System\hUZKFsI.exe
  C:\Windows\System\hUZKFsI.exe
  2⤵
  PID:5308
- C:\Windows\System\RSsdryO.exe
  C:\Windows\System\RSsdryO.exe
  2⤵
  PID:5280
- C:\Windows\System\eMpSveG.exe
  C:\Windows\System\eMpSveG.exe
  2⤵
  PID:5376
- C:\Windows\System\ZbsFFev.exe
  C:\Windows\System\ZbsFFev.exe
  2⤵
  PID:5420
- C:\Windows\System\zBNfPbl.exe
  C:\Windows\System\zBNfPbl.exe
  2⤵
  PID:5292
- C:\Windows\System\ksOkkSM.exe
  C:\Windows\System\ksOkkSM.exe
  2⤵
  PID:5492
- C:\Windows\System\UFmDYkJ.exe
  C:\Windows\System\UFmDYkJ.exe
  2⤵
  PID:5540
- C:\Windows\System\IOCPjZX.exe
  C:\Windows\System\IOCPjZX.exe
  2⤵
  PID:5524
- C:\Windows\System\ytbwtSS.exe
  C:\Windows\System\ytbwtSS.exe
  2⤵
  PID:5324
- C:\Windows\System\MrCUOSi.exe
  C:\Windows\System\MrCUOSi.exe
  2⤵
  PID:5400
- C:\Windows\System\AbuZyhT.exe
  C:\Windows\System\AbuZyhT.exe
  2⤵
  PID:5476
- C:\Windows\System\vbmVYZH.exe
  C:\Windows\System\vbmVYZH.exe
  2⤵
  PID:5636
- C:\Windows\System\jqGGval.exe
  C:\Windows\System\jqGGval.exe
  2⤵
  PID:5700
- C:\Windows\System\GmVplok.exe
  C:\Windows\System\GmVplok.exe
  2⤵
  PID:5656
- C:\Windows\System\oXIzyNZ.exe
  C:\Windows\System\oXIzyNZ.exe
  2⤵
  PID:5816
- C:\Windows\System\EpBLsrV.exe
  C:\Windows\System\EpBLsrV.exe
  2⤵
  PID:5880
- C:\Windows\System\kPkdKdX.exe
  C:\Windows\System\kPkdKdX.exe
  2⤵
  PID:5952
- C:\Windows\System\BYoYEky.exe
  C:\Windows\System\BYoYEky.exe
  2⤵
  PID:5996
- C:\Windows\System\wxNJmWR.exe
  C:\Windows\System\wxNJmWR.exe
  2⤵
  PID:6004
- C:\Windows\System\GvIIqHz.exe
  C:\Windows\System\GvIIqHz.exe
  2⤵
  PID:5936
- C:\Windows\System\GWjnDaw.exe
  C:\Windows\System\GWjnDaw.exe
  2⤵
  PID:6020
- C:\Windows\System\cgqTSpM.exe
  C:\Windows\System\cgqTSpM.exe
  2⤵
  PID:5760
- C:\Windows\System\PvbrGBy.exe
  C:\Windows\System\PvbrGBy.exe
  2⤵
  PID:5968
- C:\Windows\System\BGvbvII.exe
  C:\Windows\System\BGvbvII.exe
  2⤵
  PID:5828
- C:\Windows\System\yXZQaJv.exe
  C:\Windows\System\yXZQaJv.exe
  2⤵
  PID:5864
- C:\Windows\System\CGVmhIp.exe
  C:\Windows\System\CGVmhIp.exe
  2⤵
  PID:6036
- C:\Windows\System\iwQdqKc.exe
  C:\Windows\System\iwQdqKc.exe
  2⤵
  PID:6084
- C:\Windows\System\fetJiJP.exe
  C:\Windows\System\fetJiJP.exe
  2⤵
  PID:6104
- C:\Windows\System\cOxGNUx.exe
  C:\Windows\System\cOxGNUx.exe
  2⤵
  PID:6140
- C:\Windows\System\yFKFquA.exe
  C:\Windows\System\yFKFquA.exe
  2⤵
  PID:4604
- C:\Windows\System\WsslKtL.exe
  C:\Windows\System\WsslKtL.exe
  2⤵
  PID:5340
- C:\Windows\System\dTsUrmX.exe
  C:\Windows\System\dTsUrmX.exe
  2⤵
  PID:4412
- C:\Windows\System\XWXokaW.exe
  C:\Windows\System\XWXokaW.exe
  2⤵
  PID:1792
- C:\Windows\System\LDnzpGa.exe
  C:\Windows\System\LDnzpGa.exe
  2⤵
  PID:5384
- C:\Windows\System\zFVzHKR.exe
  C:\Windows\System\zFVzHKR.exe
  2⤵
  PID:5528
- C:\Windows\System\viOPdJA.exe
  C:\Windows\System\viOPdJA.exe
  2⤵
  PID:5240
- C:\Windows\System\CjfULWY.exe
  C:\Windows\System\CjfULWY.exe
  2⤵
  PID:5632
- C:\Windows\System\QNfRdNq.exe
  C:\Windows\System\QNfRdNq.exe
  2⤵
  PID:5452
- C:\Windows\System\tOZPpFM.exe
  C:\Windows\System\tOZPpFM.exe
  2⤵
  PID:5876
- C:\Windows\System\lvRplqi.exe
  C:\Windows\System\lvRplqi.exe
  2⤵
  PID:5900
- C:\Windows\System\IjvgntF.exe
  C:\Windows\System\IjvgntF.exe
  2⤵
  PID:5800
- C:\Windows\System\WchdskF.exe
  C:\Windows\System\WchdskF.exe
  2⤵
  PID:5784
- C:\Windows\System\EizRIdY.exe
  C:\Windows\System\EizRIdY.exe
  2⤵
  PID:5916
- C:\Windows\System\pFzZxXb.exe
  C:\Windows\System\pFzZxXb.exe
  2⤵
  PID:5600
- C:\Windows\System\jLtOQwY.exe
  C:\Windows\System\jLtOQwY.exe
  2⤵
  PID:5148
- C:\Windows\System\qGJRPYA.exe
  C:\Windows\System\qGJRPYA.exe
  2⤵
  PID:1716
- C:\Windows\System\AeAsZWv.exe
  C:\Windows\System\AeAsZWv.exe
  2⤵
  PID:5244
- C:\Windows\System\wxQhZOJ.exe
  C:\Windows\System\wxQhZOJ.exe
  2⤵
  PID:5768
- C:\Windows\System\HmSPLjv.exe
  C:\Windows\System\HmSPLjv.exe
  2⤵
  PID:5504
- C:\Windows\System\IHQJGJU.exe
  C:\Windows\System\IHQJGJU.exe
  2⤵
  PID:5436
- C:\Windows\System\fsrgaYb.exe
  C:\Windows\System\fsrgaYb.exe
  2⤵
  PID:5860
- C:\Windows\System\RlAHjTw.exe
  C:\Windows\System\RlAHjTw.exe
  2⤵
  PID:6136
- C:\Windows\System\IBcaeBH.exe
  C:\Windows\System\IBcaeBH.exe
  2⤵
  PID:5200
- C:\Windows\System\mkfDJuh.exe
  C:\Windows\System\mkfDJuh.exe
  2⤵
  PID:5488
- C:\Windows\System\WfHnYPq.exe
  C:\Windows\System\WfHnYPq.exe
  2⤵
  PID:5580
- C:\Windows\System\OsLziya.exe
  C:\Windows\System\OsLziya.exe
  2⤵
  PID:5588
- C:\Windows\System\QTTKhyr.exe
  C:\Windows\System\QTTKhyr.exe
  2⤵
  PID:5780
- C:\Windows\System\ILPKyMm.exe
  C:\Windows\System\ILPKyMm.exe
  2⤵
  PID:6100
- C:\Windows\System\EBLzLcj.exe
  C:\Windows\System\EBLzLcj.exe
  2⤵
  PID:6016
- C:\Windows\System\ztiyFzE.exe
  C:\Windows\System\ztiyFzE.exe
  2⤵
  PID:5276
- C:\Windows\System\YrbTSxZ.exe
  C:\Windows\System\YrbTSxZ.exe
  2⤵
  PID:5536
- C:\Windows\System\UztpbOC.exe
  C:\Windows\System\UztpbOC.exe
  2⤵
  PID:6160
- C:\Windows\System\gjKjIuR.exe
  C:\Windows\System\gjKjIuR.exe
  2⤵
  PID:6176
- C:\Windows\System\dVbGNPp.exe
  C:\Windows\System\dVbGNPp.exe
  2⤵
  PID:6244
- C:\Windows\System\OAWpNLS.exe
  C:\Windows\System\OAWpNLS.exe
  2⤵
  PID:6272
- C:\Windows\System\oUdjigf.exe
  C:\Windows\System\oUdjigf.exe
  2⤵
  PID:6292
- C:\Windows\System\HfxZwbj.exe
  C:\Windows\System\HfxZwbj.exe
  2⤵
  PID:6312
- C:\Windows\System\utDzlJt.exe
  C:\Windows\System\utDzlJt.exe
  2⤵
  PID:6328
- C:\Windows\System\SZCbvkG.exe
  C:\Windows\System\SZCbvkG.exe
  2⤵
  PID:6352
- C:\Windows\System\QkFwSZF.exe
  C:\Windows\System\QkFwSZF.exe
  2⤵
  PID:6368
- C:\Windows\System\EFfvqOI.exe
  C:\Windows\System\EFfvqOI.exe
  2⤵
  PID:6384
- C:\Windows\System\CEdHMzZ.exe
  C:\Windows\System\CEdHMzZ.exe
  2⤵
  PID:6404
- C:\Windows\System\TvLhVuQ.exe
  C:\Windows\System\TvLhVuQ.exe
  2⤵
  PID:6424
- C:\Windows\System\BAXVKOY.exe
  C:\Windows\System\BAXVKOY.exe
  2⤵
  PID:6440
- C:\Windows\System\JjmNPZJ.exe
  C:\Windows\System\JjmNPZJ.exe
  2⤵
  PID:6464
- C:\Windows\System\qIjWKie.exe
  C:\Windows\System\qIjWKie.exe
  2⤵
  PID:6484
- C:\Windows\System\BQRbcAB.exe
  C:\Windows\System\BQRbcAB.exe
  2⤵
  PID:6504
- C:\Windows\System\DpVWISd.exe
  C:\Windows\System\DpVWISd.exe
  2⤵
  PID:6520
- C:\Windows\System\CCQJSJW.exe
  C:\Windows\System\CCQJSJW.exe
  2⤵
  PID:6536
- C:\Windows\System\TwemLkk.exe
  C:\Windows\System\TwemLkk.exe
  2⤵
  PID:6560
- C:\Windows\System\auSxgxR.exe
  C:\Windows\System\auSxgxR.exe
  2⤵
  PID:6580
- C:\Windows\System\UaNxGFH.exe
  C:\Windows\System\UaNxGFH.exe
  2⤵
  PID:6596
- C:\Windows\System\YedNEwR.exe
  C:\Windows\System\YedNEwR.exe
  2⤵
  PID:6616
- C:\Windows\System\avKqDGo.exe
  C:\Windows\System\avKqDGo.exe
  2⤵
  PID:6640
- C:\Windows\System\nmHdjZw.exe
  C:\Windows\System\nmHdjZw.exe
  2⤵
  PID:6656
- C:\Windows\System\qQedqeL.exe
  C:\Windows\System\qQedqeL.exe
  2⤵
  PID:6676
- C:\Windows\System\NydUewf.exe
  C:\Windows\System\NydUewf.exe
  2⤵
  PID:6708
- C:\Windows\System\rJxUlNa.exe
  C:\Windows\System\rJxUlNa.exe
  2⤵
  PID:6724
- C:\Windows\System\KnYaado.exe
  C:\Windows\System\KnYaado.exe
  2⤵
  PID:6756
- C:\Windows\System\MLGDaIU.exe
  C:\Windows\System\MLGDaIU.exe
  2⤵
  PID:6772
- C:\Windows\System\MXQPqsQ.exe
  C:\Windows\System\MXQPqsQ.exe
  2⤵
  PID:6788
- C:\Windows\System\BvMBDQT.exe
  C:\Windows\System\BvMBDQT.exe
  2⤵
  PID:6808
- C:\Windows\System\kuZrsKv.exe
  C:\Windows\System\kuZrsKv.exe
  2⤵
  PID:6824
- C:\Windows\System\KeXBxbQ.exe
  C:\Windows\System\KeXBxbQ.exe
  2⤵
  PID:6840
- C:\Windows\System\CHHgpHm.exe
  C:\Windows\System\CHHgpHm.exe
  2⤵
  PID:6856
- C:\Windows\System\jBEwxpE.exe
  C:\Windows\System\jBEwxpE.exe
  2⤵
  PID:6876
- C:\Windows\System\TGKbIqy.exe
  C:\Windows\System\TGKbIqy.exe
  2⤵
  PID:6896
- C:\Windows\System\UoqpaPY.exe
  C:\Windows\System\UoqpaPY.exe
  2⤵
  PID:6916
- C:\Windows\System\asnOMzX.exe
  C:\Windows\System\asnOMzX.exe
  2⤵
  PID:6936
- C:\Windows\System\VOVnzqb.exe
  C:\Windows\System\VOVnzqb.exe
  2⤵
  PID:6952
- C:\Windows\System\pIvhMNU.exe
  C:\Windows\System\pIvhMNU.exe
  2⤵
  PID:6968
- C:\Windows\System\tbWEwuw.exe
  C:\Windows\System\tbWEwuw.exe
  2⤵
  PID:6984
- C:\Windows\System\DhSutad.exe
  C:\Windows\System\DhSutad.exe
  2⤵
  PID:7000
- C:\Windows\System\tMhPpbp.exe
  C:\Windows\System\tMhPpbp.exe
  2⤵
  PID:7016
- C:\Windows\System\muvABcA.exe
  C:\Windows\System\muvABcA.exe
  2⤵
  PID:7032
- C:\Windows\System\rlZTVKX.exe
  C:\Windows\System\rlZTVKX.exe
  2⤵
  PID:7056
- C:\Windows\System\JXSTrXv.exe
  C:\Windows\System\JXSTrXv.exe
  2⤵
  PID:7072
- C:\Windows\System\eNmyIwv.exe
  C:\Windows\System\eNmyIwv.exe
  2⤵
  PID:7100
- C:\Windows\System\TzrdDBy.exe
  C:\Windows\System\TzrdDBy.exe
  2⤵
  PID:7116
- C:\Windows\System\qtCqvSk.exe
  C:\Windows\System\qtCqvSk.exe
  2⤵
  PID:7136
- C:\Windows\System\JJmfNof.exe
  C:\Windows\System\JJmfNof.exe
  2⤵
  PID:7156
- C:\Windows\System\TUQJhpr.exe
  C:\Windows\System\TUQJhpr.exe
  2⤵
  PID:5608
- C:\Windows\System\TkUPoIe.exe
  C:\Windows\System\TkUPoIe.exe
  2⤵
  PID:5688
- C:\Windows\System\xLZhAFe.exe
  C:\Windows\System\xLZhAFe.exe
  2⤵
  PID:5704
- C:\Windows\System\jJYMUSt.exe
  C:\Windows\System\jJYMUSt.exe
  2⤵
  PID:6196
- C:\Windows\System\SXufBMm.exe
  C:\Windows\System\SXufBMm.exe
  2⤵
  PID:5652
- C:\Windows\System\RdOJfSC.exe
  C:\Windows\System\RdOJfSC.exe
  2⤵
  PID:6208
- C:\Windows\System\wlSvKCc.exe
  C:\Windows\System\wlSvKCc.exe
  2⤵
  PID:6224
- C:\Windows\System\acBuTyM.exe
  C:\Windows\System\acBuTyM.exe
  2⤵
  PID:5272
- C:\Windows\System\Stdfitp.exe
  C:\Windows\System\Stdfitp.exe
  2⤵
  PID:6168
- C:\Windows\System\tsayGwJ.exe
  C:\Windows\System\tsayGwJ.exe
  2⤵
  PID:6280
- C:\Windows\System\OePcphs.exe
  C:\Windows\System\OePcphs.exe
  2⤵
  PID:6300
- C:\Windows\System\mRPPYkb.exe
  C:\Windows\System\mRPPYkb.exe
  2⤵
  PID:6360
- C:\Windows\System\vNSDHrv.exe
  C:\Windows\System\vNSDHrv.exe
  2⤵
  PID:6304
- C:\Windows\System\BBbrknZ.exe
  C:\Windows\System\BBbrknZ.exe
  2⤵
  PID:6380
- C:\Windows\System\DfMlGIY.exe
  C:\Windows\System\DfMlGIY.exe
  2⤵
  PID:6516
- C:\Windows\System\gOjwYSE.exe
  C:\Windows\System\gOjwYSE.exe
  2⤵
  PID:6344
- C:\Windows\System\jMlvbji.exe
  C:\Windows\System\jMlvbji.exe
  2⤵
  PID:6552
- C:\Windows\System\tTukpvX.exe
  C:\Windows\System\tTukpvX.exe
  2⤵
  PID:6628
- C:\Windows\System\AvkopxP.exe
  C:\Windows\System\AvkopxP.exe
  2⤵
  PID:6664
- C:\Windows\System\gKooYsH.exe
  C:\Windows\System\gKooYsH.exe
  2⤵
  PID:6452
- C:\Windows\System\UmuxBhM.exe
  C:\Windows\System\UmuxBhM.exe
  2⤵
  PID:6528
- C:\Windows\System\IaTVmpK.exe
  C:\Windows\System\IaTVmpK.exe
  2⤵
  PID:6696
- C:\Windows\System\iXKEXBI.exe
  C:\Windows\System\iXKEXBI.exe
  2⤵
  PID:6716
- C:\Windows\System\buFxmXK.exe
  C:\Windows\System\buFxmXK.exe
  2⤵
  PID:6736
- C:\Windows\System\EAtoPba.exe
  C:\Windows\System\EAtoPba.exe
  2⤵
  PID:6768
- C:\Windows\System\tEOzVXQ.exe
  C:\Windows\System\tEOzVXQ.exe
  2⤵
  PID:6836
- C:\Windows\System\WJpQwtV.exe
  C:\Windows\System\WJpQwtV.exe
  2⤵
  PID:6780
- C:\Windows\System\yBdaEyI.exe
  C:\Windows\System\yBdaEyI.exe
  2⤵
  PID:7008
- C:\Windows\System\uXTjtTo.exe
  C:\Windows\System\uXTjtTo.exe
  2⤵
  PID:6980
- C:\Windows\System\nuUNOpw.exe
  C:\Windows\System\nuUNOpw.exe
  2⤵
  PID:7048
- C:\Windows\System\DgcPjNb.exe
  C:\Windows\System\DgcPjNb.exe
  2⤵
  PID:7084
- C:\Windows\System\LGOFLwW.exe
  C:\Windows\System\LGOFLwW.exe
  2⤵
  PID:6884
- C:\Windows\System\ywJOPki.exe
  C:\Windows\System\ywJOPki.exe
  2⤵
  PID:7024
- C:\Windows\System\RkBJoav.exe
  C:\Windows\System\RkBJoav.exe
  2⤵
  PID:7112
- C:\Windows\System\flqdvtG.exe
  C:\Windows\System\flqdvtG.exe
  2⤵
  PID:6848
- C:\Windows\System\bnrRuHO.exe
  C:\Windows\System\bnrRuHO.exe
  2⤵
  PID:5756
- C:\Windows\System\MfbkXua.exe
  C:\Windows\System\MfbkXua.exe
  2⤵
  PID:5552
- C:\Windows\System\ESuFNMi.exe
  C:\Windows\System\ESuFNMi.exe
  2⤵
  PID:5672
- C:\Windows\System\RbAweQX.exe
  C:\Windows\System\RbAweQX.exe
  2⤵
  PID:5988
- C:\Windows\System\KJYaICH.exe
  C:\Windows\System\KJYaICH.exe
  2⤵
  PID:5940
- C:\Windows\System\wocYIEO.exe
  C:\Windows\System\wocYIEO.exe
  2⤵
  PID:6324
- C:\Windows\System\fNucCqX.exe
  C:\Windows\System\fNucCqX.exe
  2⤵
  PID:6964
- C:\Windows\System\iSQJKLm.exe
  C:\Windows\System\iSQJKLm.exe
  2⤵
  PID:6400
- C:\Windows\System\nZLWQvY.exe
  C:\Windows\System\nZLWQvY.exe
  2⤵
  PID:6232
- C:\Windows\System\vgNKINw.exe
  C:\Windows\System\vgNKINw.exe
  2⤵
  PID:6256
- C:\Windows\System\gmBuJMI.exe
  C:\Windows\System\gmBuJMI.exe
  2⤵
  PID:6432
- C:\Windows\System\sFDZXhw.exe
  C:\Windows\System\sFDZXhw.exe
  2⤵
  PID:6632
- C:\Windows\System\mGaSCYt.exe
  C:\Windows\System\mGaSCYt.exe
  2⤵
  PID:6548
- C:\Windows\System\RREbETl.exe
  C:\Windows\System\RREbETl.exe
  2⤵
  PID:6500
- C:\Windows\System\klTDwuS.exe
  C:\Windows\System\klTDwuS.exe
  2⤵
  PID:6412
- C:\Windows\System\CBRhcMI.exe
  C:\Windows\System\CBRhcMI.exe
  2⤵
  PID:6576
- C:\Windows\System\SdTtNFz.exe
  C:\Windows\System\SdTtNFz.exe
  2⤵
  PID:6648
- C:\Windows\System\sZaHZpy.exe
  C:\Windows\System\sZaHZpy.exe
  2⤵
  PID:6692
- C:\Windows\System\HyvEjcz.exe
  C:\Windows\System\HyvEjcz.exe
  2⤵
  PID:6744
- C:\Windows\System\PHCughj.exe
  C:\Windows\System\PHCughj.exe
  2⤵
  PID:6912
- C:\Windows\System\cRArQXM.exe
  C:\Windows\System\cRArQXM.exe
  2⤵
  PID:6908
- C:\Windows\System\USFoKDH.exe
  C:\Windows\System\USFoKDH.exe
  2⤵
  PID:6048
- C:\Windows\System\hoBYebg.exe
  C:\Windows\System\hoBYebg.exe
  2⤵
  PID:6976
- C:\Windows\System\AfhjPfH.exe
  C:\Windows\System\AfhjPfH.exe
  2⤵
  PID:7096
- C:\Windows\System\oibdWzW.exe
  C:\Windows\System\oibdWzW.exe
  2⤵
  PID:7128
- C:\Windows\System\KoTYCqM.exe
  C:\Windows\System\KoTYCqM.exe
  2⤵
  PID:7132
- C:\Windows\System\ncrPcGC.exe
  C:\Windows\System\ncrPcGC.exe
  2⤵
  PID:7152
- C:\Windows\System\MLmjKqI.exe
  C:\Windows\System\MLmjKqI.exe
  2⤵
  PID:5360
- C:\Windows\System\uyWYPtq.exe
  C:\Windows\System\uyWYPtq.exe
  2⤵
  PID:6152
- C:\Windows\System\eFNXdOc.exe
  C:\Windows\System\eFNXdOc.exe
  2⤵
  PID:5668
- C:\Windows\System\ptpvthj.exe
  C:\Windows\System\ptpvthj.exe
  2⤵
  PID:6928
- C:\Windows\System\KMLovwe.exe
  C:\Windows\System\KMLovwe.exe
  2⤵
  PID:6192
- C:\Windows\System\oSAQBqt.exe
  C:\Windows\System\oSAQBqt.exe
  2⤵
  PID:6476
- C:\Windows\System\kUqgrDo.exe
  C:\Windows\System\kUqgrDo.exe
  2⤵
  PID:6804
- C:\Windows\System\GGkSdSE.exe
  C:\Windows\System\GGkSdSE.exe
  2⤵
  PID:6572
- C:\Windows\System\cpDHEaw.exe
  C:\Windows\System\cpDHEaw.exe
  2⤵
  PID:6604
- C:\Windows\System\tOZwMDB.exe
  C:\Windows\System\tOZwMDB.exe
  2⤵
  PID:7124
- C:\Windows\System\hnxeMQy.exe
  C:\Windows\System\hnxeMQy.exe
  2⤵
  PID:6764
- C:\Windows\System\AYTOUUT.exe
  C:\Windows\System\AYTOUUT.exe
  2⤵
  PID:6948
- C:\Windows\System\UNDbFel.exe
  C:\Windows\System\UNDbFel.exe
  2⤵
  PID:6624
- C:\Windows\System\ylVfgWv.exe
  C:\Windows\System\ylVfgWv.exe
  2⤵
  PID:5728
- C:\Windows\System\ZZVXoYq.exe
  C:\Windows\System\ZZVXoYq.exe
  2⤵
  PID:5924
- C:\Windows\System\DIchQMX.exe
  C:\Windows\System\DIchQMX.exe
  2⤵
  PID:5832
- C:\Windows\System\QqVBEDa.exe
  C:\Windows\System\QqVBEDa.exe
  2⤵
  PID:7108
- C:\Windows\System\wOYDdgJ.exe
  C:\Windows\System\wOYDdgJ.exe
  2⤵
  PID:6220
- C:\Windows\System\hIVCUbp.exe
  C:\Windows\System\hIVCUbp.exe
  2⤵
  PID:6732
- C:\Windows\System\hehnMgi.exe
  C:\Windows\System\hehnMgi.exe
  2⤵
  PID:6672
- C:\Windows\System\eijXvdJ.exe
  C:\Windows\System\eijXvdJ.exe
  2⤵
  PID:6748
- C:\Windows\System\gXVjpfF.exe
  C:\Windows\System\gXVjpfF.exe
  2⤵
  PID:6892
- C:\Windows\System\EHqHJqI.exe
  C:\Windows\System\EHqHJqI.exe
  2⤵
  PID:6320
- C:\Windows\System\BFamCds.exe
  C:\Windows\System\BFamCds.exe
  2⤵
  PID:6608
- C:\Windows\System\FeuBBGb.exe
  C:\Windows\System\FeuBBGb.exe
  2⤵
  PID:7092
- C:\Windows\System\StgVTfb.exe
  C:\Windows\System\StgVTfb.exe
  2⤵
  PID:6688
- C:\Windows\System\ptpDfTd.exe
  C:\Windows\System\ptpDfTd.exe
  2⤵
  PID:6308
- C:\Windows\System\dcwGckD.exe
  C:\Windows\System\dcwGckD.exe
  2⤵
  PID:7180
- C:\Windows\System\zMUtLPl.exe
  C:\Windows\System\zMUtLPl.exe
  2⤵
  PID:7196
- C:\Windows\System\qfyuAAD.exe
  C:\Windows\System\qfyuAAD.exe
  2⤵
  PID:7212
- C:\Windows\System\QClVHpD.exe
  C:\Windows\System\QClVHpD.exe
  2⤵
  PID:7228
- C:\Windows\System\tlPiqMy.exe
  C:\Windows\System\tlPiqMy.exe
  2⤵
  PID:7244
- C:\Windows\System\kiNZKVd.exe
  C:\Windows\System\kiNZKVd.exe
  2⤵
  PID:7260
- C:\Windows\System\vATDajA.exe
  C:\Windows\System\vATDajA.exe
  2⤵
  PID:7276
- C:\Windows\System\tdMBUvm.exe
  C:\Windows\System\tdMBUvm.exe
  2⤵
  PID:7292
- C:\Windows\System\mtUilBV.exe
  C:\Windows\System\mtUilBV.exe
  2⤵
  PID:7308
- C:\Windows\System\KhZmlQU.exe
  C:\Windows\System\KhZmlQU.exe
  2⤵
  PID:7324
- C:\Windows\System\WYghfPo.exe
  C:\Windows\System\WYghfPo.exe
  2⤵
  PID:7480
- C:\Windows\System\fRziXng.exe
  C:\Windows\System\fRziXng.exe
  2⤵
  PID:7512
- C:\Windows\System\xovzAZn.exe
  C:\Windows\System\xovzAZn.exe
  2⤵
  PID:7528
- C:\Windows\System\yphChgb.exe
  C:\Windows\System\yphChgb.exe
  2⤵
  PID:7544
- C:\Windows\System\nuPzTDt.exe
  C:\Windows\System\nuPzTDt.exe
  2⤵
  PID:7560
- C:\Windows\System\JpXCYrN.exe
  C:\Windows\System\JpXCYrN.exe
  2⤵
  PID:7576
- C:\Windows\System\rXGyNIC.exe
  C:\Windows\System\rXGyNIC.exe
  2⤵
  PID:7596
- C:\Windows\System\cCDCyBq.exe
  C:\Windows\System\cCDCyBq.exe
  2⤵
  PID:7612
- C:\Windows\System\vmhUHsI.exe
  C:\Windows\System\vmhUHsI.exe
  2⤵
  PID:7632
- C:\Windows\System\YDRmJid.exe
  C:\Windows\System\YDRmJid.exe
  2⤵
  PID:7648
- C:\Windows\System\zECbrYL.exe
  C:\Windows\System\zECbrYL.exe
  2⤵
  PID:7664
- C:\Windows\System\vYqtwJk.exe
  C:\Windows\System\vYqtwJk.exe
  2⤵
  PID:7680
- C:\Windows\System\ObCaVoy.exe
  C:\Windows\System\ObCaVoy.exe
  2⤵
  PID:7700
- C:\Windows\System\jxafVYA.exe
  C:\Windows\System\jxafVYA.exe
  2⤵
  PID:7716
- C:\Windows\System\QynSvAr.exe
  C:\Windows\System\QynSvAr.exe
  2⤵
  PID:7732
- C:\Windows\System\SPwvRIw.exe
  C:\Windows\System\SPwvRIw.exe
  2⤵
  PID:7748
- C:\Windows\System\MuOcZYL.exe
  C:\Windows\System\MuOcZYL.exe
  2⤵
  PID:7764
- C:\Windows\System\NzGMLES.exe
  C:\Windows\System\NzGMLES.exe
  2⤵
  PID:7780
- C:\Windows\System\gAHSAdA.exe
  C:\Windows\System\gAHSAdA.exe
  2⤵
  PID:7824
- C:\Windows\System\cbCcKQa.exe
  C:\Windows\System\cbCcKQa.exe
  2⤵
  PID:7852
- C:\Windows\System\tazaXrC.exe
  C:\Windows\System\tazaXrC.exe
  2⤵
  PID:7868
- C:\Windows\System\zBlSdDr.exe
  C:\Windows\System\zBlSdDr.exe
  2⤵
  PID:7884
- C:\Windows\System\iWngPbA.exe
  C:\Windows\System\iWngPbA.exe
  2⤵
  PID:7900
- C:\Windows\System\BqaNzey.exe
  C:\Windows\System\BqaNzey.exe
  2⤵
  PID:7916
- C:\Windows\System\YFgwILR.exe
  C:\Windows\System\YFgwILR.exe
  2⤵
  PID:7932
- C:\Windows\System\WOLBoBO.exe
  C:\Windows\System\WOLBoBO.exe
  2⤵
  PID:7960
- C:\Windows\System\OWTKLlB.exe
  C:\Windows\System\OWTKLlB.exe
  2⤵
  PID:7976
- C:\Windows\System\sYsMwaY.exe
  C:\Windows\System\sYsMwaY.exe
  2⤵
  PID:7992
- C:\Windows\System\rECHzJM.exe
  C:\Windows\System\rECHzJM.exe
  2⤵
  PID:8012
- C:\Windows\System\wSrPwfQ.exe
  C:\Windows\System\wSrPwfQ.exe
  2⤵
  PID:8028
- C:\Windows\System\tClwlko.exe
  C:\Windows\System\tClwlko.exe
  2⤵
  PID:8048
- C:\Windows\System\nHKwcfp.exe
  C:\Windows\System\nHKwcfp.exe
  2⤵
  PID:8064
- C:\Windows\System\WRaYyWV.exe
  C:\Windows\System\WRaYyWV.exe
  2⤵
  PID:8084
- C:\Windows\System\ZjdYVfL.exe
  C:\Windows\System\ZjdYVfL.exe
  2⤵
  PID:8100
- C:\Windows\System\mwTFdpc.exe
  C:\Windows\System\mwTFdpc.exe
  2⤵
  PID:8116
- C:\Windows\System\aVzkEYs.exe
  C:\Windows\System\aVzkEYs.exe
  2⤵
  PID:8132
- C:\Windows\System\QdNnGYd.exe
  C:\Windows\System\QdNnGYd.exe
  2⤵
  PID:8148
- C:\Windows\System\gzgLkHC.exe
  C:\Windows\System\gzgLkHC.exe
  2⤵
  PID:8164
- C:\Windows\System\AXfehcv.exe
  C:\Windows\System\AXfehcv.exe
  2⤵
  PID:8180
- C:\Windows\System\WGoxSxt.exe
  C:\Windows\System\WGoxSxt.exe
  2⤵
  PID:6156
- C:\Windows\System\DUasgZM.exe
  C:\Windows\System\DUasgZM.exe
  2⤵
  PID:7192
- C:\Windows\System\AEeoJzd.exe
  C:\Windows\System\AEeoJzd.exe
  2⤵
  PID:7256
- C:\Windows\System\UANptkc.exe
  C:\Windows\System\UANptkc.exe
  2⤵
  PID:6252
- C:\Windows\System\SUZKNzx.exe
  C:\Windows\System\SUZKNzx.exe
  2⤵
  PID:7300
- C:\Windows\System\cTvfMOu.exe
  C:\Windows\System\cTvfMOu.exe
  2⤵
  PID:7236
- C:\Windows\System\qdocGew.exe
  C:\Windows\System\qdocGew.exe
  2⤵
  PID:7320
- C:\Windows\System\vbeTESd.exe
  C:\Windows\System\vbeTESd.exe
  2⤵
  PID:7344
- C:\Windows\System\NHTAWIZ.exe
  C:\Windows\System\NHTAWIZ.exe
  2⤵
  PID:7360
- C:\Windows\System\xXNqFbH.exe
  C:\Windows\System\xXNqFbH.exe
  2⤵
  PID:7376
- C:\Windows\System\KjCplss.exe
  C:\Windows\System\KjCplss.exe
  2⤵
  PID:7392
- C:\Windows\System\voBNfAd.exe
  C:\Windows\System\voBNfAd.exe
  2⤵
  PID:7412
- C:\Windows\System\GTdpVYq.exe
  C:\Windows\System\GTdpVYq.exe
  2⤵
  PID:7428
- C:\Windows\System\Vorzijy.exe
  C:\Windows\System\Vorzijy.exe
  2⤵
  PID:7408
- C:\Windows\System\KDStBiX.exe
  C:\Windows\System\KDStBiX.exe
  2⤵
  PID:7460
- C:\Windows\System\LnlwfLk.exe
  C:\Windows\System\LnlwfLk.exe
  2⤵
  PID:7476
- C:\Windows\System\TELYApz.exe
  C:\Windows\System\TELYApz.exe
  2⤵
  PID:7496
- C:\Windows\System\LLFCYzf.exe
  C:\Windows\System\LLFCYzf.exe
  2⤵
  PID:7536
- C:\Windows\System\YcWqExP.exe
  C:\Windows\System\YcWqExP.exe
  2⤵
  PID:7568
- C:\Windows\System\qVYkskT.exe
  C:\Windows\System\qVYkskT.exe
  2⤵
  PID:7584
- C:\Windows\System\qjQqRWc.exe
  C:\Windows\System\qjQqRWc.exe
  2⤵
  PID:7608
- C:\Windows\System\kKeHnYZ.exe
  C:\Windows\System\kKeHnYZ.exe
  2⤵
  PID:7628
- C:\Windows\System\bcMKoyx.exe
  C:\Windows\System\bcMKoyx.exe
  2⤵
  PID:7672
- C:\Windows\System\EJdiZUl.exe
  C:\Windows\System\EJdiZUl.exe
  2⤵
  PID:7696
- C:\Windows\System\BOQyYyw.exe
  C:\Windows\System\BOQyYyw.exe
  2⤵
  PID:7772
- C:\Windows\System\IfUFMMn.exe
  C:\Windows\System\IfUFMMn.exe
  2⤵
  PID:7760
- C:\Windows\System\orppSqs.exe
  C:\Windows\System\orppSqs.exe
  2⤵
  PID:7796
- C:\Windows\System\RXoXJeK.exe
  C:\Windows\System\RXoXJeK.exe
  2⤵
  PID:7836
- C:\Windows\System\QawZTgA.exe
  C:\Windows\System\QawZTgA.exe
  2⤵
  PID:7840
- C:\Windows\System\XfAuUDW.exe
  C:\Windows\System\XfAuUDW.exe
  2⤵
  PID:7876
- C:\Windows\System\qQAurQK.exe
  C:\Windows\System\qQAurQK.exe
  2⤵
  PID:7896
- C:\Windows\System\jQlBjkJ.exe
  C:\Windows\System\jQlBjkJ.exe
  2⤵
  PID:7912
- C:\Windows\System\tvyoRmN.exe
  C:\Windows\System\tvyoRmN.exe
  2⤵
  PID:7956
- C:\Windows\System\qiheZlJ.exe
  C:\Windows\System\qiheZlJ.exe
  2⤵
  PID:8020
- C:\Windows\System\OSIjStL.exe
  C:\Windows\System\OSIjStL.exe
  2⤵
  PID:8056
- C:\Windows\System\iCDqfAB.exe
  C:\Windows\System\iCDqfAB.exe
  2⤵
  PID:8096
- C:\Windows\System\UlLKGdp.exe
  C:\Windows\System\UlLKGdp.exe
  2⤵
  PID:8124
- C:\Windows\System\ZEqsNLd.exe
  C:\Windows\System\ZEqsNLd.exe
  2⤵
  PID:8076
- C:\Windows\System\gHYOkgZ.exe
  C:\Windows\System\gHYOkgZ.exe
  2⤵
  PID:8108
- C:\Windows\System\pHWdeWM.exe
  C:\Windows\System\pHWdeWM.exe
  2⤵
  PID:8156
- C:\Windows\System\vPsHGLW.exe
  C:\Windows\System\vPsHGLW.exe
  2⤵
  PID:7252
- C:\Windows\System\cCvQwND.exe
  C:\Windows\System\cCvQwND.exe
  2⤵
  PID:6668
- C:\Windows\System\vRtAsBO.exe
  C:\Windows\System\vRtAsBO.exe
  2⤵
  PID:7316
- C:\Windows\System\VtBmylp.exe
  C:\Windows\System\VtBmylp.exe
  2⤵
  PID:7356
- C:\Windows\System\CCAHtZS.exe
  C:\Windows\System\CCAHtZS.exe
  2⤵
  PID:7268
- C:\Windows\System\CkifFOP.exe
  C:\Windows\System\CkifFOP.exe
  2⤵
  PID:7456
- C:\Windows\System\ONbLGZe.exe
  C:\Windows\System\ONbLGZe.exe
  2⤵
  PID:7592
- C:\Windows\System\EmyskNU.exe
  C:\Windows\System\EmyskNU.exe
  2⤵
  PID:7372
- C:\Windows\System\ZODRthU.exe
  C:\Windows\System\ZODRthU.exe
  2⤵
  PID:7740
- C:\Windows\System\WQDGutC.exe
  C:\Windows\System\WQDGutC.exe
  2⤵
  PID:7640
- C:\Windows\System\trJPZFQ.exe
  C:\Windows\System\trJPZFQ.exe
  2⤵
  PID:7508
- C:\Windows\System\VobcPwD.exe
  C:\Windows\System\VobcPwD.exe
  2⤵
  PID:7444
- C:\Windows\System\WVRCHAe.exe
  C:\Windows\System\WVRCHAe.exe
  2⤵
  PID:7368
- C:\Windows\System\LeXYBAs.exe
  C:\Windows\System\LeXYBAs.exe
  2⤵
  PID:7792
- C:\Windows\System\edxtUPy.exe
  C:\Windows\System\edxtUPy.exe
  2⤵
  PID:7864
- C:\Windows\System\OSLYFIp.exe
  C:\Windows\System\OSLYFIp.exe
  2⤵
  PID:7808
- C:\Windows\System\nnRbCxr.exe
  C:\Windows\System\nnRbCxr.exe
  2⤵
  PID:7940
- C:\Windows\System\XorQzsl.exe
  C:\Windows\System\XorQzsl.exe
  2⤵
  PID:7968
- C:\Windows\System\eeCIKoy.exe
  C:\Windows\System\eeCIKoy.exe
  2⤵
  PID:8004
- C:\Windows\System\OYSKXvr.exe
  C:\Windows\System\OYSKXvr.exe
  2⤵
  PID:8072
- C:\Windows\System\dbStNMt.exe
  C:\Windows\System\dbStNMt.exe
  2⤵
  PID:7224
- C:\Windows\System\qtVxWob.exe
  C:\Windows\System\qtVxWob.exe
  2⤵
  PID:7188
- C:\Windows\System\bMNftkt.exe
  C:\Windows\System\bMNftkt.exe
  2⤵
  PID:7204
- C:\Windows\System\VlxytaS.exe
  C:\Windows\System\VlxytaS.exe
  2⤵
  PID:7380
- C:\Windows\System\GDKxuYf.exe
  C:\Windows\System\GDKxuYf.exe
  2⤵
  PID:7336
- C:\Windows\System\LWWIkNF.exe
  C:\Windows\System\LWWIkNF.exe
  2⤵
  PID:7692
- C:\Windows\System\pXGIpmu.exe
  C:\Windows\System\pXGIpmu.exe
  2⤵
  PID:7464
- C:\Windows\System\RyCHjAX.exe
  C:\Windows\System\RyCHjAX.exe
  2⤵
  PID:7728
- C:\Windows\System\hNsCSQA.exe
  C:\Windows\System\hNsCSQA.exe
  2⤵
  PID:7472
- C:\Windows\System\jthuRDs.exe
  C:\Windows\System\jthuRDs.exe
  2⤵
  PID:7928
- C:\Windows\System\jbEUFrM.exe
  C:\Windows\System\jbEUFrM.exe
  2⤵
  PID:8044
- C:\Windows\System\LIGSehN.exe
  C:\Windows\System\LIGSehN.exe
  2⤵
  PID:8144
- C:\Windows\System\bxzwfLV.exe
  C:\Windows\System\bxzwfLV.exe
  2⤵
  PID:7384
- C:\Windows\System\HPYlYLS.exe
  C:\Windows\System\HPYlYLS.exe
  2⤵
  PID:7440
- C:\Windows\System\hVYsojg.exe
  C:\Windows\System\hVYsojg.exe
  2⤵
  PID:5904
- C:\Windows\System\INoxieY.exe
  C:\Windows\System\INoxieY.exe
  2⤵
  PID:7892
- C:\Windows\System\dzeGWoP.exe
  C:\Windows\System\dzeGWoP.exe
  2⤵
  PID:8140
- C:\Windows\System\PNibepw.exe
  C:\Windows\System\PNibepw.exe
  2⤵
  PID:7744
- C:\Windows\System\bSchYUL.exe
  C:\Windows\System\bSchYUL.exe
  2⤵
  PID:8200
- C:\Windows\System\qVoWVcd.exe
  C:\Windows\System\qVoWVcd.exe
  2⤵
  PID:8216
- C:\Windows\System\XFutbBM.exe
  C:\Windows\System\XFutbBM.exe
  2⤵
  PID:8232
- C:\Windows\System\FTIHswU.exe
  C:\Windows\System\FTIHswU.exe
  2⤵
  PID:8248
- C:\Windows\System\JJGwydY.exe
  C:\Windows\System\JJGwydY.exe
  2⤵
  PID:8264
- C:\Windows\System\CzZVjKe.exe
  C:\Windows\System\CzZVjKe.exe
  2⤵
  PID:8280
- C:\Windows\System\ajrnnow.exe
  C:\Windows\System\ajrnnow.exe
  2⤵
  PID:8296
- C:\Windows\System\sFxGNVV.exe
  C:\Windows\System\sFxGNVV.exe
  2⤵
  PID:8312
- C:\Windows\System\hLIKFIq.exe
  C:\Windows\System\hLIKFIq.exe
  2⤵
  PID:8332
- C:\Windows\System\kooXMEh.exe
  C:\Windows\System\kooXMEh.exe
  2⤵
  PID:8348
- C:\Windows\System\btvcdzH.exe
  C:\Windows\System\btvcdzH.exe
  2⤵
  PID:8364
- C:\Windows\System\DhjVoiZ.exe
  C:\Windows\System\DhjVoiZ.exe
  2⤵
  PID:8380
- C:\Windows\System\XLhbpNX.exe
  C:\Windows\System\XLhbpNX.exe
  2⤵
  PID:8396
- C:\Windows\System\dbuFQGx.exe
  C:\Windows\System\dbuFQGx.exe
  2⤵
  PID:8412
- C:\Windows\System\sWCkGaF.exe
  C:\Windows\System\sWCkGaF.exe
  2⤵
  PID:8428
- C:\Windows\System\YeZvXqO.exe
  C:\Windows\System\YeZvXqO.exe
  2⤵
  PID:8444
- C:\Windows\System\avYoGZC.exe
  C:\Windows\System\avYoGZC.exe
  2⤵
  PID:8460
- C:\Windows\System\ekzDeYG.exe
  C:\Windows\System\ekzDeYG.exe
  2⤵
  PID:8476
- C:\Windows\System\yRCBRfj.exe
  C:\Windows\System\yRCBRfj.exe
  2⤵
  PID:8492
- C:\Windows\System\imsVywT.exe
  C:\Windows\System\imsVywT.exe
  2⤵
  PID:8508
- C:\Windows\System\JXhsuZC.exe
  C:\Windows\System\JXhsuZC.exe
  2⤵
  PID:8524
- C:\Windows\System\NWJcJju.exe
  C:\Windows\System\NWJcJju.exe
  2⤵
  PID:8540
- C:\Windows\System\CirSDPj.exe
  C:\Windows\System\CirSDPj.exe
  2⤵
  PID:8556
- C:\Windows\System\sPoneSn.exe
  C:\Windows\System\sPoneSn.exe
  2⤵
  PID:8572
- C:\Windows\System\shGugoV.exe
  C:\Windows\System\shGugoV.exe
  2⤵
  PID:8588
- C:\Windows\System\vrvNhGu.exe
  C:\Windows\System\vrvNhGu.exe
  2⤵
  PID:8604
- C:\Windows\System\jPJWyRC.exe
  C:\Windows\System\jPJWyRC.exe
  2⤵
  PID:8624
- C:\Windows\System\GVrTgGE.exe
  C:\Windows\System\GVrTgGE.exe
  2⤵
  PID:8640
- C:\Windows\System\jhWsVbP.exe
  C:\Windows\System\jhWsVbP.exe
  2⤵
  PID:8656
- C:\Windows\System\OyHcGtz.exe
  C:\Windows\System\OyHcGtz.exe
  2⤵
  PID:8672
- C:\Windows\System\JgMyzzP.exe
  C:\Windows\System\JgMyzzP.exe
  2⤵
  PID:8688
- C:\Windows\System\OrWfYgW.exe
  C:\Windows\System\OrWfYgW.exe
  2⤵
  PID:8704
- C:\Windows\System\wXJyIvE.exe
  C:\Windows\System\wXJyIvE.exe
  2⤵
  PID:8720
- C:\Windows\System\wyhhkwS.exe
  C:\Windows\System\wyhhkwS.exe
  2⤵
  PID:8736
- C:\Windows\System\oQRcRQw.exe
  C:\Windows\System\oQRcRQw.exe
  2⤵
  PID:8752
- C:\Windows\System\pZYxbwD.exe
  C:\Windows\System\pZYxbwD.exe
  2⤵
  PID:8872
- C:\Windows\System\BkeVaej.exe
  C:\Windows\System\BkeVaej.exe
  2⤵
  PID:8888
- C:\Windows\System\DtgEJFD.exe
  C:\Windows\System\DtgEJFD.exe
  2⤵
  PID:8904
- C:\Windows\System\osVDZzH.exe
  C:\Windows\System\osVDZzH.exe
  2⤵
  PID:8920
- C:\Windows\System\fXgwYmT.exe
  C:\Windows\System\fXgwYmT.exe
  2⤵
  PID:8936
- C:\Windows\System\XxzhOHT.exe
  C:\Windows\System\XxzhOHT.exe
  2⤵
  PID:8956
- C:\Windows\System\dFMlIdz.exe
  C:\Windows\System\dFMlIdz.exe
  2⤵
  PID:8972
- C:\Windows\System\jUpgudb.exe
  C:\Windows\System\jUpgudb.exe
  2⤵
  PID:8988
- C:\Windows\System\ACnNPPn.exe
  C:\Windows\System\ACnNPPn.exe
  2⤵
  PID:9004
- C:\Windows\System\OJuxTGv.exe
  C:\Windows\System\OJuxTGv.exe
  2⤵
  PID:9020
- C:\Windows\System\OEGNmJI.exe
  C:\Windows\System\OEGNmJI.exe
  2⤵
  PID:9036
- C:\Windows\System\mZrVpob.exe
  C:\Windows\System\mZrVpob.exe
  2⤵
  PID:9056
- C:\Windows\System\QvWJoPI.exe
  C:\Windows\System\QvWJoPI.exe
  2⤵
  PID:9072
- C:\Windows\System\ptGowwy.exe
  C:\Windows\System\ptGowwy.exe
  2⤵
  PID:9092
- C:\Windows\System\RTqfFJH.exe
  C:\Windows\System\RTqfFJH.exe
  2⤵
  PID:9108
- C:\Windows\System\vGMyTuM.exe
  C:\Windows\System\vGMyTuM.exe
  2⤵
  PID:9124
- C:\Windows\System\jrwdQOf.exe
  C:\Windows\System\jrwdQOf.exe
  2⤵
  PID:8828
- C:\Windows\System\jUQlRmL.exe
  C:\Windows\System\jUQlRmL.exe
  2⤵
  PID:8864
- C:\Windows\System\RglbEGF.exe
  C:\Windows\System\RglbEGF.exe
  2⤵
  PID:8980
- C:\Windows\System\nJZfHWc.exe
  C:\Windows\System\nJZfHWc.exe
  2⤵
  PID:9084
- C:\Windows\System\SxdDYfC.exe
  C:\Windows\System\SxdDYfC.exe
  2⤵
  PID:9028
- C:\Windows\System\XKdZSJI.exe
  C:\Windows\System\XKdZSJI.exe
  2⤵
  PID:9116
- C:\Windows\System\oTxaRBF.exe
  C:\Windows\System\oTxaRBF.exe
  2⤵
  PID:9132
- C:\Windows\System\VwQJFEC.exe
  C:\Windows\System\VwQJFEC.exe
  2⤵
  PID:8000
- C:\Windows\System\gypZjFJ.exe
  C:\Windows\System\gypZjFJ.exe
  2⤵
  PID:8324
- C:\Windows\System\SnUynEO.exe
  C:\Windows\System\SnUynEO.exe
  2⤵
  PID:7848
- C:\Windows\System\YfsAXzq.exe
  C:\Windows\System\YfsAXzq.exe
  2⤵
  PID:8188
- C:\Windows\System\xfafKcz.exe
  C:\Windows\System\xfafKcz.exe
  2⤵
  PID:9204
- C:\Windows\System\VSjiEbh.exe
  C:\Windows\System\VSjiEbh.exe
  2⤵
  PID:9184
- C:\Windows\System\nuCOaZK.exe
  C:\Windows\System\nuCOaZK.exe
  2⤵
  PID:9152
- C:\Windows\System\miVVrJT.exe
  C:\Windows\System\miVVrJT.exe
  2⤵
  PID:8360
- C:\Windows\System\GDDsfVj.exe
  C:\Windows\System\GDDsfVj.exe
  2⤵
  PID:8328
- C:\Windows\System\dyxAUxx.exe
  C:\Windows\System\dyxAUxx.exe
  2⤵
  PID:8516
- C:\Windows\System\sRIerPx.exe
  C:\Windows\System\sRIerPx.exe
  2⤵
  PID:8404
- C:\Windows\System\zuaQvnP.exe
  C:\Windows\System\zuaQvnP.exe
  2⤵
  PID:8548
- C:\Windows\System\cyIRsog.exe
  C:\Windows\System\cyIRsog.exe
  2⤵
  PID:8648
- C:\Windows\System\XmMyNRf.exe
  C:\Windows\System\XmMyNRf.exe
  2⤵
  PID:8536
- C:\Windows\System\qDSTXta.exe
  C:\Windows\System\qDSTXta.exe
  2⤵
  PID:8696
- C:\Windows\System\mHPrIup.exe
  C:\Windows\System\mHPrIup.exe
  2⤵
  PID:8712
- C:\Windows\System\IcPQUPg.exe
  C:\Windows\System\IcPQUPg.exe
  2⤵
  PID:8456
- C:\Windows\System\oHYGMJp.exe
  C:\Windows\System\oHYGMJp.exe
  2⤵
  PID:8308
- C:\Windows\System\njBCfic.exe
  C:\Windows\System\njBCfic.exe
  2⤵
  PID:8728
- C:\Windows\System\dIYmkNB.exe
  C:\Windows\System\dIYmkNB.exe
  2⤵
  PID:8800
- C:\Windows\System\GFKCzFH.exe
  C:\Windows\System\GFKCzFH.exe
  2⤵
  PID:8788
- C:\Windows\System\rOKKTJc.exe
  C:\Windows\System\rOKKTJc.exe
  2⤵
  PID:8804
- C:\Windows\System\vfKNExN.exe
  C:\Windows\System\vfKNExN.exe
  2⤵
  PID:8816
- C:\Windows\System\WfLmEWC.exe
  C:\Windows\System\WfLmEWC.exe
  2⤵
  PID:8880
- C:\Windows\System\OZLoLmf.exe
  C:\Windows\System\OZLoLmf.exe
  2⤵
  PID:8964
- C:\Windows\System\TkSscPa.exe
  C:\Windows\System\TkSscPa.exe
  2⤵
  PID:8948
- C:\Windows\System\KMZRuex.exe
  C:\Windows\System\KMZRuex.exe
  2⤵
  PID:9044
- C:\Windows\System\DTkXENh.exe
  C:\Windows\System\DTkXENh.exe
  2⤵
  PID:8996
- C:\Windows\System\buqDbxN.exe
  C:\Windows\System\buqDbxN.exe
  2⤵
  PID:9100
- C:\Windows\System\frhqaLw.exe
  C:\Windows\System\frhqaLw.exe
  2⤵
  PID:7804
- C:\Windows\System\QRqRiCs.exe
  C:\Windows\System\QRqRiCs.exe
  2⤵
  PID:9172
- C:\Windows\System\TrLdPTF.exe
  C:\Windows\System\TrLdPTF.exe
  2⤵
  PID:8356
- C:\Windows\System\iVKynSN.exe
  C:\Windows\System\iVKynSN.exe
  2⤵
  PID:8580
- C:\Windows\System\RsqiblK.exe
  C:\Windows\System\RsqiblK.exe
  2⤵
  PID:8440
- C:\Windows\System\VdGlFql.exe
  C:\Windows\System\VdGlFql.exe
  2⤵
  PID:2056
- C:\Windows\System\qkRnsUV.exe
  C:\Windows\System\qkRnsUV.exe
  2⤵
  PID:8532
- C:\Windows\System\CZjFZCA.exe
  C:\Windows\System\CZjFZCA.exe
  2⤵
  PID:8768
- C:\Windows\System\NDLplNo.exe
  C:\Windows\System\NDLplNo.exe
  2⤵
  PID:8652
- C:\Windows\System\GSbaYDB.exe
  C:\Windows\System\GSbaYDB.exe
  2⤵
  PID:8632
- C:\Windows\System\pteBYDs.exe
  C:\Windows\System\pteBYDs.exe
  2⤵
  PID:8272
- C:\Windows\System\gqMgKtr.exe
  C:\Windows\System\gqMgKtr.exe
  2⤵
  PID:8616
- C:\Windows\System\eFJshkg.exe
  C:\Windows\System\eFJshkg.exe
  2⤵
  PID:8772
- C:\Windows\System\OUBfjha.exe
  C:\Windows\System\OUBfjha.exe
  2⤵
  PID:8860
- C:\Windows\System\Ryaetmi.exe
  C:\Windows\System\Ryaetmi.exe
  2⤵
  PID:8636
- C:\Windows\System\JHnNeba.exe
  C:\Windows\System\JHnNeba.exe
  2⤵
  PID:9088
- C:\Windows\System\mgWNBAI.exe
  C:\Windows\System\mgWNBAI.exe
  2⤵
  PID:9104
- C:\Windows\System\kiDjpFS.exe
  C:\Windows\System\kiDjpFS.exe
  2⤵
  PID:9208
- C:\Windows\System\CnQSPXC.exe
  C:\Windows\System\CnQSPXC.exe
  2⤵
  PID:9136
- C:\Windows\System\PeOPjBW.exe
  C:\Windows\System\PeOPjBW.exe
  2⤵
  PID:8196
- C:\Windows\System\wTxZbOd.exe
  C:\Windows\System\wTxZbOd.exe
  2⤵
  PID:7556
- C:\Windows\System\zGJODJX.exe
  C:\Windows\System\zGJODJX.exe
  2⤵
  PID:8600
- C:\Windows\System\tabDvxc.exe
  C:\Windows\System\tabDvxc.exe
  2⤵
  PID:8564
- C:\Windows\System\MGfuhFF.exe
  C:\Windows\System\MGfuhFF.exe
  2⤵
  PID:8664
- C:\Windows\System\KlMfrVb.exe
  C:\Windows\System\KlMfrVb.exe
  2⤵
  PID:8832
- C:\Windows\System\bcEPUsK.exe
  C:\Windows\System\bcEPUsK.exe
  2⤵
  PID:8760
- C:\Windows\System\SIuTNJw.exe
  C:\Windows\System\SIuTNJw.exe
  2⤵
  PID:8844
- C:\Windows\System\fufStnH.exe
  C:\Windows\System\fufStnH.exe
  2⤵
  PID:8488
- C:\Windows\System\KflyLUu.exe
  C:\Windows\System\KflyLUu.exe
  2⤵
  PID:8260
- C:\Windows\System\bMGKFIw.exe
  C:\Windows\System\bMGKFIw.exe
  2⤵
  PID:9168
- C:\Windows\System\JLUiOYy.exe
  C:\Windows\System\JLUiOYy.exe
  2⤵
  PID:8420
- C:\Windows\System\mhdTvll.exe
  C:\Windows\System\mhdTvll.exe
  2⤵
  PID:8744
- C:\Windows\System\IxhSsOa.exe
  C:\Windows\System\IxhSsOa.exe
  2⤵
  PID:8928
- C:\Windows\System\PeHppRu.exe
  C:\Windows\System\PeHppRu.exe
  2⤵
  PID:8764
- C:\Windows\System\DaCivvy.exe
  C:\Windows\System\DaCivvy.exe
  2⤵
  PID:8472
- C:\Windows\System\aBKppFT.exe
  C:\Windows\System\aBKppFT.exe
  2⤵
  PID:7540
- C:\Windows\System\lHNUqte.exe
  C:\Windows\System\lHNUqte.exe
  2⤵
  PID:9232
- C:\Windows\System\NVQJRVo.exe
  C:\Windows\System\NVQJRVo.exe
  2⤵
  PID:9248
- C:\Windows\System\siJlFjT.exe
  C:\Windows\System\siJlFjT.exe
  2⤵
  PID:9288
- C:\Windows\System\fJoYFCp.exe
  C:\Windows\System\fJoYFCp.exe
  2⤵
  PID:9312
- C:\Windows\System\LZwHjnQ.exe
  C:\Windows\System\LZwHjnQ.exe
  2⤵
  PID:9344
- C:\Windows\System\ivVmcdI.exe
  C:\Windows\System\ivVmcdI.exe
  2⤵
  PID:9364
- C:\Windows\System\hCOjhTV.exe
  C:\Windows\System\hCOjhTV.exe
  2⤵
  PID:9380
- C:\Windows\System\tKcCNIW.exe
  C:\Windows\System\tKcCNIW.exe
  2⤵
  PID:9396
- C:\Windows\System\jUYVXcP.exe
  C:\Windows\System\jUYVXcP.exe
  2⤵
  PID:9412
- C:\Windows\System\AAtkXan.exe
  C:\Windows\System\AAtkXan.exe
  2⤵
  PID:9436
- C:\Windows\System\zpoNifw.exe
  C:\Windows\System\zpoNifw.exe
  2⤵
  PID:9456
- C:\Windows\System\vcPjGsl.exe
  C:\Windows\System\vcPjGsl.exe
  2⤵
  PID:9472
- C:\Windows\System\jEFVLwP.exe
  C:\Windows\System\jEFVLwP.exe
  2⤵
  PID:9488
- C:\Windows\System\zNnKckN.exe
  C:\Windows\System\zNnKckN.exe
  2⤵
  PID:9508
- C:\Windows\System\VMfEPpy.exe
  C:\Windows\System\VMfEPpy.exe
  2⤵
  PID:9544
- C:\Windows\System\KNsWMLU.exe
  C:\Windows\System\KNsWMLU.exe
  2⤵
  PID:9560
- C:\Windows\System\KfzqIWR.exe
  C:\Windows\System\KfzqIWR.exe
  2⤵
  PID:9580
- C:\Windows\System\VOmlqsF.exe
  C:\Windows\System\VOmlqsF.exe
  2⤵
  PID:9600
- C:\Windows\System\caHYiXJ.exe
  C:\Windows\System\caHYiXJ.exe
  2⤵
  PID:9620
- C:\Windows\System\RAStVVO.exe
  C:\Windows\System\RAStVVO.exe
  2⤵
  PID:9636
- C:\Windows\System\vUovVSd.exe
  C:\Windows\System\vUovVSd.exe
  2⤵
  PID:9652
- C:\Windows\System\aZQHncW.exe
  C:\Windows\System\aZQHncW.exe
  2⤵
  PID:9668
- C:\Windows\System\EdSUJAk.exe
  C:\Windows\System\EdSUJAk.exe
  2⤵
  PID:9684
- C:\Windows\System\mdUJaFO.exe
  C:\Windows\System\mdUJaFO.exe
  2⤵
  PID:9704
- C:\Windows\System\vyODxAp.exe
  C:\Windows\System\vyODxAp.exe
  2⤵
  PID:9728
- C:\Windows\System\JIHGFcp.exe
  C:\Windows\System\JIHGFcp.exe
  2⤵
  PID:9744
- C:\Windows\System\ZZfBZeL.exe
  C:\Windows\System\ZZfBZeL.exe
  2⤵
  PID:9768
- C:\Windows\System\gtXELVo.exe
  C:\Windows\System\gtXELVo.exe
  2⤵
  PID:9788
- C:\Windows\System\RwEOrIj.exe
  C:\Windows\System\RwEOrIj.exe
  2⤵
  PID:9812
- C:\Windows\System\ceRuSQR.exe
  C:\Windows\System\ceRuSQR.exe
  2⤵
  PID:9828
- C:\Windows\System\FdatJZE.exe
  C:\Windows\System\FdatJZE.exe
  2⤵
  PID:9852
- C:\Windows\System\hoYdeun.exe
  C:\Windows\System\hoYdeun.exe
  2⤵
  PID:9868
- C:\Windows\System\GhnuJpg.exe
  C:\Windows\System\GhnuJpg.exe
  2⤵
  PID:9892
- C:\Windows\System\ozJehWD.exe
  C:\Windows\System\ozJehWD.exe
  2⤵
  PID:9936
- C:\Windows\System\WUAWXxh.exe
  C:\Windows\System\WUAWXxh.exe
  2⤵
  PID:9952
- C:\Windows\System\xVBUaLS.exe
  C:\Windows\System\xVBUaLS.exe
  2⤵
  PID:9972
- C:\Windows\System\xVMUDiJ.exe
  C:\Windows\System\xVMUDiJ.exe
  2⤵
  PID:9992
- C:\Windows\System\UFGNKPn.exe
  C:\Windows\System\UFGNKPn.exe
  2⤵
  PID:10008
- C:\Windows\System\hvhajoS.exe
  C:\Windows\System\hvhajoS.exe
  2⤵
  PID:10024
- C:\Windows\System\zaLLwVc.exe
  C:\Windows\System\zaLLwVc.exe
  2⤵
  PID:10044
- C:\Windows\System\ZRnCFxW.exe
  C:\Windows\System\ZRnCFxW.exe
  2⤵
  PID:10060
- C:\Windows\System\JSbZjsy.exe
  C:\Windows\System\JSbZjsy.exe
  2⤵
  PID:10076
- C:\Windows\System\LkNaaSk.exe
  C:\Windows\System\LkNaaSk.exe
  2⤵
  PID:10100
- C:\Windows\System\bNUnDAh.exe
  C:\Windows\System\bNUnDAh.exe
  2⤵
  PID:10116
- C:\Windows\System\BaNdHME.exe
  C:\Windows\System\BaNdHME.exe
  2⤵
  PID:10132
- C:\Windows\System\pcvEOfQ.exe
  C:\Windows\System\pcvEOfQ.exe
  2⤵
  PID:10148
- C:\Windows\System\kAOrmvG.exe
  C:\Windows\System\kAOrmvG.exe
  2⤵
  PID:10164
- C:\Windows\System\qhrgqoQ.exe
  C:\Windows\System\qhrgqoQ.exe
  2⤵
  PID:10220
- C:\Windows\System\pnuaXjX.exe
  C:\Windows\System\pnuaXjX.exe
  2⤵
  PID:10236
- C:\Windows\System\aWmWHOJ.exe
  C:\Windows\System\aWmWHOJ.exe
  2⤵
  PID:9140
- C:\Windows\System\MwoueFH.exe
  C:\Windows\System\MwoueFH.exe
  2⤵
  PID:8836
- C:\Windows\System\tWyTgEM.exe
  C:\Windows\System\tWyTgEM.exe
  2⤵
  PID:8344
- C:\Windows\System\vFGAwal.exe
  C:\Windows\System\vFGAwal.exe
  2⤵
  PID:8208
- C:\Windows\System\cMWJOGh.exe
  C:\Windows\System\cMWJOGh.exe
  2⤵
  PID:9264
- C:\Windows\System\sjIQpPW.exe
  C:\Windows\System\sjIQpPW.exe
  2⤵
  PID:9284
- C:\Windows\System\bvipNTx.exe
  C:\Windows\System\bvipNTx.exe
  2⤵
  PID:9324
- C:\Windows\System\mKNzJEt.exe
  C:\Windows\System\mKNzJEt.exe
  2⤵
  PID:9340
- C:\Windows\System\JwhngXS.exe
  C:\Windows\System\JwhngXS.exe
  2⤵
  PID:9388
- C:\Windows\System\NwfLRBl.exe
  C:\Windows\System\NwfLRBl.exe
  2⤵
  PID:9424
- C:\Windows\System\SEsULOy.exe
  C:\Windows\System\SEsULOy.exe
  2⤵
  PID:9452
- C:\Windows\System\GzOsGBJ.exe
  C:\Windows\System\GzOsGBJ.exe
  2⤵
  PID:9496
- C:\Windows\System\zQlbdgT.exe
  C:\Windows\System\zQlbdgT.exe
  2⤵
  PID:9520
- C:\Windows\System\oQCWohk.exe
  C:\Windows\System\oQCWohk.exe
  2⤵
  PID:9568
- C:\Windows\System\XWAuqRG.exe
  C:\Windows\System\XWAuqRG.exe
  2⤵
  PID:9596
- C:\Windows\System\tYgQIRa.exe
  C:\Windows\System\tYgQIRa.exe
  2⤵
  PID:9616
- C:\Windows\System\hRJwvUm.exe
  C:\Windows\System\hRJwvUm.exe
  2⤵
  PID:9644
- C:\Windows\System\wunoaDy.exe
  C:\Windows\System\wunoaDy.exe
  2⤵
  PID:9700
- C:\Windows\System\zPmZUxz.exe
  C:\Windows\System\zPmZUxz.exe
  2⤵
  PID:9724
- C:\Windows\System\oxBtJzu.exe
  C:\Windows\System\oxBtJzu.exe
  2⤵
  PID:9776
- C:\Windows\System\yZIsBZM.exe
  C:\Windows\System\yZIsBZM.exe
  2⤵
  PID:9860
- C:\Windows\System\pGlmHDI.exe
  C:\Windows\System\pGlmHDI.exe
  2⤵
  PID:9844
- C:\Windows\System\MyVuwKO.exe
  C:\Windows\System\MyVuwKO.exe
  2⤵
  PID:9796
- C:\Windows\System\LtGhpfq.exe
  C:\Windows\System\LtGhpfq.exe
  2⤵
  PID:9908
- C:\Windows\System\maQmfCx.exe
  C:\Windows\System\maQmfCx.exe
  2⤵
  PID:9924
- C:\Windows\System\uKTgWPv.exe
  C:\Windows\System\uKTgWPv.exe
  2⤵
  PID:9932
- C:\Windows\System\tONJTKu.exe
  C:\Windows\System\tONJTKu.exe
  2⤵
  PID:9988
- C:\Windows\System\WDGumqL.exe
  C:\Windows\System\WDGumqL.exe
  2⤵
  PID:10036
- C:\Windows\System\nIGAxru.exe
  C:\Windows\System\nIGAxru.exe
  2⤵
  PID:10068
- C:\Windows\System\SxDlFVc.exe
  C:\Windows\System\SxDlFVc.exe
  2⤵
  PID:10140
- C:\Windows\System\rSKuORr.exe
  C:\Windows\System\rSKuORr.exe
  2⤵
  PID:10172
- C:\Windows\System\GDxrTPC.exe
  C:\Windows\System\GDxrTPC.exe
  2⤵
  PID:10128
- C:\Windows\System\xEHzUPT.exe
  C:\Windows\System\xEHzUPT.exe
  2⤵
  PID:10124

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Windows\system\CmHPuYs.exe

Filesize
1.9MB

MD5
df3aa69703839ab2caf37af591d95bb1

SHA1
b9aa0739a76c5777155aaa80801f2a75476f4e22

SHA256
36f2346c3f6b502c2674be9e9e853532772261a21931ad26a91a252071417936

SHA512
6bb33b666b736793c4c3fe42bb6d03db388bcd2d90834120caa359f368ca67e0828d6cff1478d802ba5051979e0bc65046f7312bf1eb956f643d6fae3ed81604

Download Submit
C:\Windows\system\DRLtPnX.exe

Filesize
1.9MB

MD5
fda6a0bc4f5a24e413df537010475289

SHA1
9ff6bddac37c8c2fcd78b9f11e1a257c7ddf80fa

SHA256
569099a8008959a048376d9d7a2ccd4e14bff0e2620983f15ef4577da1ce340c

SHA512
51729ca7c10adef4550635ccb8cf08763d5c6974e6ca29244c0da638556f2d600c0baf81b7c3401fde838991f3344ea5bab202ba9461f76048510ddb0a704421

Download Submit
C:\Windows\system\DrRaCff.exe

Filesize
1.9MB

MD5
ad0750567ca1f72cc7c621231b8ec48f

SHA1
2372b41790e930166d62441b6e5a0acc234fcc16

SHA256
0e9a855ad71572f8e9136ba50601c88e8117e43da47da1dc52bf6e204bf21944

SHA512
a340337744025f5fc9dbb077fda9717a11c3f5b65b25d56756620e9d17a8b46879004026a3dca61f51b4257700053ec05fb87ce185f38c67d769691702532b43

Download Submit
C:\Windows\system\JbIIhOv.exe

Filesize
1.9MB

MD5
eb469002d4b992e876824b23faff943b

SHA1
238d2b97c6eb62f8fd8e39fcd50d465834f45513

SHA256
3b3d431f7a8a9d27327c4b85b4c4c0a95a52141675ac05d00b9aad6dc52aa97e

SHA512
5be602d8c74d664bca00f7bab12bdd1c7187c00cccde4c7f50ff8a51e55f8aadb79623766e10c4f2f650a49bb0919468d1d0a06422e91d3dfb42fbeb7ed321f9

Download Submit
C:\Windows\system\KXIJLPr.exe

Filesize
1.9MB

MD5
3dd00cc731ef85d1376bec1db305060c

SHA1
73187741535243a51eb833981cdcd9efac0bbdd9

SHA256
0bd9bbe7c57acd759b16cf2fe53dd118a6b5a92a7a638f9aac313667ce459223

SHA512
fab6239be28442a68acc95a9ce7f5153e192fa6141ed9bdbe59808e6b5febf60ed5fe5833c623bcb9b539d74bde152fe9c4ff105f767f37ff55421361d391b18

Download Submit
C:\Windows\system\McnHbel.exe

Filesize
1.9MB

MD5
f84439e2702a4b8163192244e5dabf4a

SHA1
d486fe9afd03c0e875c37ee5ecb167f38fafcc5a

SHA256
9257c14e45f0a72f4dbb9f2ae7abc20ef44af348966bc642a14a41c1485cc11b

SHA512
e3f7ef8870221f1ef4a6c329525994462fab5d7e6edd62669814b0571ad6381d46c43d0d204af86f001ee696282815e3855916800060a0f03a441d46bd451bd2

Download Submit
C:\Windows\system\OKlAmZt.exe

Filesize
1.9MB

MD5
39f94ca47515f96fda5096889432048b

SHA1
73e5bb453de19f8224960241a33d13b4a185fdac

SHA256
f18d030938fdef5465a40f0aac0f6b05292f3a299489e464d54bf42d5817f517

SHA512
45083c9c5a3ed167120e68a2e281077c4e3f045d7a393ae88051c0caef31b0ecee99865690f3914d669d1c54888b7308e5722229225350002e2b80f015ce77af

Download Submit
C:\Windows\system\PVwATiQ.exe

Filesize
1.9MB

MD5
900d3cec37d3feb7b13c9d15cac4fc13

SHA1
b17ea0e49bc4449cfa27df23743cddfad65acf78

SHA256
b65cc46b4a6620661522e88b526f624c10900934e203d68c6e7e26ceb6c49a09

SHA512
9ea0de7dd455538232dbe7402af7755bbad150bc80d9d22bc195a1005b46682d44eeefba0ae887f6d427de62734aa994120d252d92316078e09537be1ea974d5

Download Submit
C:\Windows\system\VhKVPZk.exe

Filesize
1.9MB

MD5
3924663db9df20be1cfe4776068fbe7b

SHA1
8d05d93f1f9624318d413223e0e41cae01f08521

SHA256
39de6d0f4363120e2310262279f957e9ca026f6950880d0ad1d61f81bd75379b

SHA512
8149ee1d0ade0ddc4640a0d9ec4aea69f195133eb43c8a66715ed6d0a71b99e7e1bf2b2f5497a5f26c1c1a9bb2fd4b225cce8052b771a5492fe087623f1d022e

Download Submit
C:\Windows\system\WEspnja.exe

Filesize
1.9MB

MD5
99ae6df7bd574a6efc44eff9032fe653

SHA1
2e21ca7a50d3cfbc21fe1e799c5ebe62c67d2146

SHA256
386abd19e31dcbcf850b248a3dbf7ecd778788f7d0f23f45b39f8470df2666c0

SHA512
6eae13f2851fcc1fbca96c28bfb44332279e42f44ed24ea33da294fc45309c3f1a9003fc2b28ede5acfecb428c7e1a508ca116ac0657c1e9f682ee7a6e0766cc

Download Submit
C:\Windows\system\ZYlzrdU.exe

Filesize
1.9MB

MD5
805a2996112bd71d22ebada2065e1596

SHA1
199df7e37eaa7877f920ea5e7f87d4d331a24d19

SHA256
b4f8302f2a6a9a3b8730de58ce15cf5ef8bccf6ccb962d18a05c131555567fbb

SHA512
64e6f969b0877d9c884fb73ffb3b6893b1227c8e9db6f6b9fa888ea242d9cfc2caf3074707a1e0a24bb0863ebb384383f5ec1cbf5354d735280b7392ec99fcd8

Download Submit
C:\Windows\system\aMqjsTT.exe

Filesize
1.9MB

MD5
a5d83a022cc8d8f764f33b2504c33568

SHA1
dfcc5cbdf0888404b40f72048ad11cd076e8b07d

SHA256
46383897bde32cc4544a3d49a49ea685e116bf0edf3927edf38d184fef1912c4

SHA512
3f6e88a9ab5769fe43e340f52749e2ccf801997963252aeead63998f57c7828d942efc0e25b6b1a1d68dfacdbcde6c35ce8d080c500882430c26adc8e823c5d2

Download Submit
C:\Windows\system\aTaOzUc.exe

Filesize
1.9MB

MD5
ddda0c9d9e9db54d3a1586ed7a3dd596

SHA1
8c7793c818d22c07a4b21145d297545c58e51e00

SHA256
bd300dbc7f3578703e9f409e95206aa4216facbbd2f59aa545d4d2f1fd8d2aac

SHA512
a933a7511da9848ede3bb96c85a7b5e42ed47f05340f226708e96c6e76ddcbe34d3ce30e7ec0c5a8c9da80ebdcaa96a38c434e76fd19c51b23858f8dedb78a46

Download Submit
C:\Windows\system\bGnEGpJ.exe

Filesize
1.9MB

MD5
08945c66d2ea2679edf317f37149fd67

SHA1
ec4b7e69d2b40b16a2f376ddc20a17eb7cc02252

SHA256
3e86c5811743fad92c996c880e559dd615b83f7a883edc58115562500db3465b

SHA512
6f4a1878c9fbd7658f2578b064bf0aa76df064447d07eb39a384bf1d68f13aef5f2735d07aa2da0f0c234c80b9e5a6e906bced529f583326dc4d90a88753db35

Download Submit
C:\Windows\system\dpTLRTG.exe

Filesize
1.9MB

MD5
cb60c150d162e1ef10c769dfdfbafb64

SHA1
449888d226c5f0989eee393bb2853126ec22ce0e

SHA256
5f1c59fd760d2d8cd0588e42c38dc16fd8be05815054a889d4675eee12f8a73f

SHA512
1dc1e993543d36abafa0b2a8775c00a27578d127e6592770d79cc53572a771727f27ea418c040427244d69e54216943b6ee88b0c2b1a65fe971cafda21902c5d

Download Submit
C:\Windows\system\jQbnmYj.exe

Filesize
1.9MB

MD5
4689319e91fbbc01b3ca78bd520e17c5

SHA1
f43b1834dbf44b6d45213cf6abf04a44b2cafe0b

SHA256
cbba9f18c8959ee5a875f8c73dfde32105c67f4d3532fce35131ef96bd6787c8

SHA512
b7a764ffea85233c591b26d2705a5c4e2eaff963548b932df743dfc84d5c3ed406614a8d23b3e7d59b6168540764adef5945bc353981a44cb386d1896057e108

Download Submit
C:\Windows\system\jyTNemc.exe

Filesize
1.9MB

MD5
913a09da908feb5e6635961d5ebc9185

SHA1
0edf5a9845ca2346307b2d3950137138bb21e54b

SHA256
5d94edfa3aaa39b740cc48274b1a5a89d8337c1d9a63183ed4983fc60faff0f8

SHA512
cbfcc837a2f88e6c475b27b5ed22831fd17eecf4adcb619dcebf7b95cee44745cc8eac246766740eae120226b2c9cc7ad67fafb464c0940fc1f1eea52d6dbfed

Download Submit
C:\Windows\system\kszCXKG.exe

Filesize
1.9MB

MD5
1ae9f5ee9cab58a88722766118e49da7

SHA1
7e212b816e9ad62c7616308b38492e474d8c8654

SHA256
a98509a54700b2aa7d3422d3da0e948a3d9c2767699231c0539ebe8fbab7dc0d

SHA512
646b491c8a71768864bf57e83bafa7a8cd27ef99a4677747173267eba69048efd7136aaf6c3ff2248f3ca1a4280ff396bd720b35f88764036db32cc4648c8e05

Download Submit
C:\Windows\system\mbRbbvn.exe

Filesize
1.9MB

MD5
700a4e0e72cf125312747d0a8b06f887

SHA1
443d1855893cedd80fe163a30e58c0bcf94df162

SHA256
7187d9454a8236b628de979be3a9bbfc7147c4382df9e005f4e0c7c2bf012485

SHA512
9d51089b09376c13997c19583aee450105b84f4d234de16d3510a759a07daa6456e57e182f5767a274b598225f959d6bcf84a42d46b27652e509c4c81a268196

Download Submit
C:\Windows\system\nbJrTOg.exe

Filesize
1.9MB

MD5
3f12e3f3259851c0be5b4c37fe1e1eee

SHA1
bed1b767857aa858a13039a2fedec8cdc0d1cf5d

SHA256
612f4f7212aee3f62e1a8ae069edc3abbf39b1622ade760277099823f6c9ab27

SHA512
31204e40ea9b2b39b3559c47629dee6e265c833d3d296c70007cf7f585061fbab194ffdd4ed018598e2fc4b499286070b0351e8da016c007b77815181a0a77b2

Download Submit
C:\Windows\system\oFCIOPY.exe

Filesize
1.9MB

MD5
e491dcb940bb411f06f59591d749b78a

SHA1
15024d0a7a57b2b66dfaed819e825345dab02978

SHA256
ccf2c9299957c9ba4a12e4147816ec558731634c57050c94264b61cf2523b4c8

SHA512
f530518335a60af864547d14a1da4b61c46925b14303305e23fdac6fa95e6bad18443619b0997f95d475bc2ad5055527cda494623b21756183f5273575cc7702

Download Submit
C:\Windows\system\oQQIGSv.exe

Filesize
1.9MB

MD5
7bdbd17651225ec59be267a3ca91f94c

SHA1
0be558ae37a09b99b2a7da264184ba3a2a053087

SHA256
b47306095b7112d39e650568461680a1c12c155583a674d0d34d8d3e21dae9fa

SHA512
2372558888dba5667212f69bc19b6d91bf17e06055799737b8ce073b178bb74e3be2e39d9683a4f81de1a7e30ea26776e5ef30f6e89ecbf775920174121e61a8

Download Submit
C:\Windows\system\owaumWn.exe

Filesize
1.9MB

MD5
cb031c6c27b7e820d8dc7155959f724f

SHA1
ba5bdf271891c405619fbddd1d94b058cd7fab83

SHA256
99cde5b912af46d1d059458d78e30138c840548ab737dd9b13f83816c9d92763

SHA512
60b39eeefdc113a21bb28d33246a3d9e3fea446ad6343c9cdb7d03771fca91a120ccc631c7767ba9f3a060264a45852f7b2b13409ad4ef701be0b9d49ecb8187

Download Submit
C:\Windows\system\rGTVXIR.exe

Filesize
1.9MB

MD5
175813107126647ff8c33d2652366540

SHA1
d1c7889a4dc5c66d1d2de7052a144a311bc14295

SHA256
47db41ebc350cafe9aed01ce70595583657c6ebb8f10d9ec9ffbb08fd8f45e1c

SHA512
0341bf297fd3465d6ff687ad771ef644bad20f8c8e9b4bc05486ae5a62f200504278ecbdc0aa1965656242a429db599320f467f7b1b63be8e3087fddc24239bb

Download Submit
C:\Windows\system\sTsRhGp.exe

Filesize
1.9MB

MD5
85aeebc3184eb605ca8e1e31f8b65b3f

SHA1
3a9e7cfff3387ae299728eb5edf83099459ae2c7

SHA256
7324ecc87741580e480f80898303bcffd9ecb135442cf1bb81d83302d7decec9

SHA512
a2512300af4d54f7e42b8f76c8bd38393d777ac950729297ce0d759a57f92ba7467e0dd2dae697c0894e840691da8e11dbbc2eea093def945dcb1954dd16ce06

Download Submit
C:\Windows\system\scPeejd.exe

Filesize
1.9MB

MD5
9c51b576f844b206a2f2044d97b833bd

SHA1
9de8a6deebc4acf3a5d1c7ddbe2f804b974ab876

SHA256
beb4a0faedc3b342ff68e821da0275d0f65c7cccba87f694a0398609ae51ce48

SHA512
cc1e7160a8b65cfb54e17083d932664086ba08d4b88f06a1660d53c1105bf20d730d84869df921085d5e17547cd77086ebf873b0b15dce4f26b4fef6553cacfd

Download Submit
C:\Windows\system\sdrPjSX.exe

Filesize
1.9MB

MD5
16f3ec1e60f6dfeacb5dd1994faf022a

SHA1
49712c42d00de8447125420666bbbd4a9153c7a8

SHA256
e45f9f3c5f06f63bd460cfd3482dde4629ee6a363457673b6fbebecbf24fd5a2

SHA512
ee0be2a5436bfcf562b815dc9e0f5fd73a9bafbd44d42e9510bde47c0680d3ea041961de1f962ad4846d3a78ade77aecf1379417dd562997c5989ddb44409786

Download Submit
C:\Windows\system\tfhGXmY.exe

Filesize
1.9MB

MD5
f999e5691aaa0a8eaf4a477e57c0ba07

SHA1
bd3a1242710b46139ed246c3008e35490556d297

SHA256
b87e653b3a6b3fae8a0fbc7e40590c976e3bca99dd19695f2da12a549a50c974

SHA512
f21df5c2144f77552d1bc5299862871169ec2aa91e9e09edf9bb194a140b5c8abe68c6d5d92ebef4c05759f15ac8da945c71987880e7c2beb64af52fe00f144e

Download Submit
C:\Windows\system\yygYKIx.exe

Filesize
1.9MB

MD5
2a0c29535834008fe8e5b597264246b3

SHA1
738c8306f76a319759d5bb899ede5b6abe762d60

SHA256
66beefe550afc6d0b9dc51e78084ed94fa3c3964866966b840f0c7a65aa6aec3

SHA512
01a3a5ad0cb6c0e8bc48cd149e978fa06769f740dbca653d6be69bbe30a7f87eee827d54868881ab1a9c28c09ee14c290a0e80f785df8fd30b042398157df78c

Download Submit
\Windows\system\BobJcmY.exe

Filesize
1.9MB

MD5
d93815684b73baf230a9acccb6c4a4d3

SHA1
e4b946de686b9b52eeef89fff1f61cde35aacd59

SHA256
871fa2d06ab5ed494e5f852a163b1c2e5f75ba191a34c5880c561e99c1a8efdd

SHA512
9533e5b6003d7bad07e4bdaddcddd1b1b546c22d3fb6b536cd4baaae22f732c76bbec3599c7030f5ad1cc61a6d0530db5b81a653ff9ad030250c0aeb7be246fe

Download Submit
\Windows\system\KoboYBx.exe

Filesize
1.9MB

MD5
82d9b8eaa537d08d6338a8864b3441d1

SHA1
85f73547aaefde20c36f44ec18fca13d19642d15

SHA256
97a7e99ccfee323d9d38d1d5bbd4ee65a99f804b929fdf936230ce689063aeb1

SHA512
30eb40dfd97ff86a6eecabde50fc10238cc1a192cc2021d187dce0b5deef041406ab56057775a2603ca92af0afc6a176d5b008f717c33b070cb0d2c5b9c16c5f

Download Submit
\Windows\system\oengmxb.exe

Filesize
1.9MB

MD5
8fde397fe963f6941bb2cbccb9e94a64

SHA1
15027a2bb90a3693669ce949a5e6576edfae1a32

SHA256
373d3fe637f2124221620d3e60c5b25253329cc332b337f67ff7af8930127e13

SHA512
fa8bce0547c5c9b8a244b13fa069a200e91469c3145960ae1f439e5faff9bd7486d573e77ff2246942fb6b3458b3696dc2d86fc04b6ae027dcc37e8e4d28c17d

Download Submit
memory/760-91-0x000000013F690000-0x000000013F9E4000-memory.dmp

Filesize
3.3MB

Download
memory/760-4030-0x000000013F690000-0x000000013F9E4000-memory.dmp

Filesize
3.3MB

Download
memory/1140-4035-0x000000013FEE0000-0x0000000140234000-memory.dmp

Filesize
3.3MB

Download
memory/1140-98-0x000000013FEE0000-0x0000000140234000-memory.dmp

Filesize
3.3MB

Download
memory/1140-3019-0x000000013FEE0000-0x0000000140234000-memory.dmp

Filesize
3.3MB

Download
memory/1600-38-0x000000013F7B0000-0x000000013FB04000-memory.dmp

Filesize
3.3MB

Download
memory/1600-12-0x0000000001FD0000-0x0000000002324000-memory.dmp

Filesize
3.3MB

Download
memory/1600-90-0x000000013F690000-0x000000013F9E4000-memory.dmp

Filesize
3.3MB

Download
memory/1600-3106-0x0000000001FD0000-0x0000000002324000-memory.dmp

Filesize
3.3MB

Download
memory/1600-76-0x0000000001FD0000-0x0000000002324000-memory.dmp

Filesize
3.3MB

Download
memory/1600-96-0x000000013FCB0000-0x0000000140004000-memory.dmp

Filesize
3.3MB

Download
memory/1600-27-0x000000013F130000-0x000000013F484000-memory.dmp

Filesize
3.3MB

Download
memory/1600-3017-0x0000000001FD0000-0x0000000002324000-memory.dmp

Filesize
3.3MB

Download
memory/1600-2494-0x0000000001FD0000-0x0000000002324000-memory.dmp

Filesize
3.3MB

Download
memory/1600-97-0x0000000001FD0000-0x0000000002324000-memory.dmp

Filesize
3.3MB

Download
memory/1600-344-0x0000000001FD0000-0x0000000002324000-memory.dmp

Filesize
3.3MB

Download
memory/1600-2021-0x0000000001FD0000-0x0000000002324000-memory.dmp

Filesize
3.3MB

Download
memory/1600-0-0x00000000000F0000-0x0000000000100000-memory.dmp

Filesize
64KB

Download
memory/1600-69-0x0000000001FD0000-0x0000000002324000-memory.dmp

Filesize
3.3MB

Download
memory/1600-83-0x000000013F6B0000-0x000000013FA04000-memory.dmp

Filesize
3.3MB

Download
memory/1600-1-0x000000013FCB0000-0x0000000140004000-memory.dmp

Filesize
3.3MB

Download
memory/1600-50-0x000000013F8D0000-0x000000013FC24000-memory.dmp

Filesize
3.3MB

Download
memory/1600-43-0x000000013F5A0000-0x000000013F8F4000-memory.dmp

Filesize
3.3MB

Download
memory/1600-48-0x0000000001FD0000-0x0000000002324000-memory.dmp

Filesize
3.3MB

Download
memory/1600-45-0x0000000001FD0000-0x0000000002324000-memory.dmp

Filesize
3.3MB

Download
memory/1828-4034-0x000000013F6B0000-0x000000013FA04000-memory.dmp

Filesize
3.3MB

Download
memory/1828-84-0x000000013F6B0000-0x000000013FA04000-memory.dmp

Filesize
3.3MB

Download
memory/1836-24-0x000000013FFC0000-0x0000000140314000-memory.dmp

Filesize
3.3MB

Download
memory/1836-4023-0x000000013FFC0000-0x0000000140314000-memory.dmp

Filesize
3.3MB

Download
memory/2468-4032-0x000000013FDC0000-0x0000000140114000-memory.dmp

Filesize
3.3MB

Download
memory/2468-70-0x000000013FDC0000-0x0000000140114000-memory.dmp

Filesize
3.3MB

Download
memory/2584-556-0x000000013F130000-0x000000013F484000-memory.dmp

Filesize
3.3MB

Download
memory/2584-4028-0x000000013F130000-0x000000013F484000-memory.dmp

Filesize
3.3MB

Download
memory/2584-56-0x000000013F130000-0x000000013F484000-memory.dmp

Filesize
3.3MB

Download
memory/2648-4036-0x000000013FC00000-0x000000013FF54000-memory.dmp

Filesize
3.3MB

Download
memory/2648-77-0x000000013FC00000-0x000000013FF54000-memory.dmp

Filesize
3.3MB

Download
memory/2676-61-0x000000013FB30000-0x000000013FE84000-memory.dmp

Filesize
3.3MB

Download
memory/2676-4029-0x000000013FB30000-0x000000013FE84000-memory.dmp

Filesize
3.3MB

Download
memory/2684-4026-0x000000013F2D0000-0x000000013F624000-memory.dmp

Filesize
3.3MB

Download
memory/2684-51-0x000000013F2D0000-0x000000013F624000-memory.dmp

Filesize
3.3MB

Download
memory/2752-4025-0x000000013FE50000-0x00000001401A4000-memory.dmp

Filesize
3.3MB

Download
memory/2752-14-0x000000013FE50000-0x00000001401A4000-memory.dmp

Filesize
3.3MB

Download
memory/2828-4027-0x000000013F8D0000-0x000000013FC24000-memory.dmp

Filesize
3.3MB

Download
memory/2828-49-0x000000013F8D0000-0x000000013FC24000-memory.dmp

Filesize
3.3MB

Download
memory/2968-4031-0x000000013F7B0000-0x000000013FB04000-memory.dmp

Filesize
3.3MB

Download
memory/2968-55-0x000000013F7B0000-0x000000013FB04000-memory.dmp

Filesize
3.3MB

Download
memory/2980-4024-0x000000013F5A0000-0x000000013F8F4000-memory.dmp

Filesize
3.3MB

Download
memory/2980-44-0x000000013F5A0000-0x000000013F8F4000-memory.dmp

Filesize
3.3MB

Download
memory/3028-1077-0x000000013FE70000-0x00000001401C4000-memory.dmp

Filesize
3.3MB

Download
memory/3028-4033-0x000000013FE70000-0x00000001401C4000-memory.dmp

Filesize
3.3MB

Download
memory/3028-62-0x000000013FE70000-0x00000001401C4000-memory.dmp

Filesize
3.3MB

Download