xmrig | 48929497f6f209896862ae90c69d05feaa87ea880dd4b3c448983e5bca8a1381

Analysis

max time kernel
121s
max time network
128s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
12/05/2024, 19:13

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
Size

2.7MB
MD5

45fa971f33833016d0c852fb771e12d0
SHA1

6a58d06096d27ca528d77344264ea3fbcd0f47a2
SHA256

48929497f6f209896862ae90c69d05feaa87ea880dd4b3c448983e5bca8a1381
SHA512

bfa575939a0bf45e382b3cc88bcc8b1910bfc1b37b9cc6bb10663e4daa53fa8e6dfc9e47fc24b241a2c2f2e579c3f85308551f2660101c8afd927eba0e137fc7
SSDEEP

49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Aj4k3SJCavKM1W7FINqX:BemTLkNdfE0pZrO

Score

10^/10

xmrig miner upx

Malware Config

Signatures

xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
miner xmrig

XMRig Miner payload 64 IoCs

miner

resource	yara_rule
behavioral1/memory/2916-0-0x000000013FCF0000-0x0000000140044000-memory.dmp	xmrig
behavioral1/files/0x00090000000141c0-3.dat	xmrig
behavioral1/memory/1792-9-0x000000013F6C0000-0x000000013FA14000-memory.dmp	xmrig
behavioral1/files/0x000a0000000143ec-12.dat	xmrig
behavioral1/files/0x0008000000014539-13.dat	xmrig
behavioral1/memory/2916-25-0x0000000002040000-0x0000000002394000-memory.dmp	xmrig
behavioral1/files/0x000b0000000146c0-36.dat	xmrig
behavioral1/files/0x0006000000014af6-66.dat	xmrig
behavioral1/memory/2916-69-0x000000013F3D0000-0x000000013F724000-memory.dmp	xmrig
behavioral1/memory/2864-67-0x000000013F6C0000-0x000000013FA14000-memory.dmp	xmrig
behavioral1/files/0x0007000000014667-30.dat	xmrig
behavioral1/memory/2744-62-0x000000013F1A0000-0x000000013F4F4000-memory.dmp	xmrig
behavioral1/files/0x0006000000014b70-85.dat	xmrig
behavioral1/memory/2704-86-0x000000013F3D0000-0x000000013F724000-memory.dmp	xmrig
behavioral1/memory/2720-93-0x000000013F580000-0x000000013F8D4000-memory.dmp	xmrig
behavioral1/files/0x0006000000014ef8-100.dat	xmrig
behavioral1/files/0x0007000000014abe-63.dat	xmrig
behavioral1/files/0x0006000000014de9-109.dat	xmrig
behavioral1/files/0x0007000000014825-76.dat	xmrig
behavioral1/memory/1908-119-0x000000013F6E0000-0x000000013FA34000-memory.dmp	xmrig
behavioral1/files/0x0006000000015018-117.dat	xmrig
behavioral1/files/0x00060000000155f3-126.dat	xmrig
behavioral1/memory/2916-121-0x000000013FCF0000-0x0000000140044000-memory.dmp	xmrig
behavioral1/files/0x000900000001447e-120.dat	xmrig
behavioral1/memory/2448-99-0x000000013F250000-0x000000013F5A4000-memory.dmp	xmrig
behavioral1/files/0x0006000000014b31-95.dat	xmrig
behavioral1/memory/2868-81-0x000000013F990000-0x000000013FCE4000-memory.dmp	xmrig
behavioral1/memory/2512-78-0x000000013FA20000-0x000000013FD74000-memory.dmp	xmrig
behavioral1/files/0x00060000000155ed-114.dat	xmrig
behavioral1/memory/2624-73-0x000000013F140000-0x000000013F494000-memory.dmp	xmrig
behavioral1/memory/2664-53-0x000000013F4B0000-0x000000013F804000-memory.dmp	xmrig
behavioral1/files/0x00070000000149f5-57.dat	xmrig
behavioral1/memory/2600-48-0x000000013FF50000-0x00000001402A4000-memory.dmp	xmrig
behavioral1/files/0x00070000000147ea-44.dat	xmrig
behavioral1/files/0x00090000000146b8-43.dat	xmrig
behavioral1/files/0x000b0000000146a2-34.dat	xmrig
behavioral1/files/0x00060000000155f7-129.dat	xmrig
behavioral1/files/0x0006000000015616-143.dat	xmrig
behavioral1/files/0x0006000000015605-136.dat	xmrig
behavioral1/files/0x0006000000015626-147.dat	xmrig
behavioral1/files/0x0006000000015b6f-153.dat	xmrig
behavioral1/files/0x0006000000015c3d-156.dat	xmrig
behavioral1/files/0x0006000000015c52-163.dat	xmrig
behavioral1/files/0x0006000000015c78-169.dat	xmrig
behavioral1/files/0x0006000000015c9f-181.dat	xmrig
behavioral1/files/0x0006000000015cb6-187.dat	xmrig
behavioral1/files/0x0006000000015c83-178.dat	xmrig
behavioral1/files/0x0006000000015c6b-167.dat	xmrig
behavioral1/memory/2416-22-0x000000013FD80000-0x00000001400D4000-memory.dmp	xmrig
behavioral1/memory/3064-21-0x000000013F190000-0x000000013F4E4000-memory.dmp	xmrig
behavioral1/memory/2512-2407-0x000000013FA20000-0x000000013FD74000-memory.dmp	xmrig
behavioral1/memory/2704-2408-0x000000013F3D0000-0x000000013F724000-memory.dmp	xmrig
behavioral1/memory/2448-2818-0x000000013F250000-0x000000013F5A4000-memory.dmp	xmrig
behavioral1/memory/1792-3995-0x000000013F6C0000-0x000000013FA14000-memory.dmp	xmrig
behavioral1/memory/3064-3996-0x000000013F190000-0x000000013F4E4000-memory.dmp	xmrig
behavioral1/memory/2416-3997-0x000000013FD80000-0x00000001400D4000-memory.dmp	xmrig
behavioral1/memory/2600-3998-0x000000013FF50000-0x00000001402A4000-memory.dmp	xmrig
behavioral1/memory/2664-3999-0x000000013F4B0000-0x000000013F804000-memory.dmp	xmrig
behavioral1/memory/2864-4000-0x000000013F6C0000-0x000000013FA14000-memory.dmp	xmrig
behavioral1/memory/2744-4001-0x000000013F1A0000-0x000000013F4F4000-memory.dmp	xmrig
behavioral1/memory/2624-4002-0x000000013F140000-0x000000013F494000-memory.dmp	xmrig
behavioral1/memory/2868-4003-0x000000013F990000-0x000000013FCE4000-memory.dmp	xmrig
behavioral1/memory/2512-4004-0x000000013FA20000-0x000000013FD74000-memory.dmp	xmrig
behavioral1/memory/2720-4005-0x000000013F580000-0x000000013F8D4000-memory.dmp	xmrig

Executes dropped EXE 64 IoCs

pid	Process
1792	OxzKrpy.exe
3064	ntTwhkF.exe
2416	IVDIufO.exe
2600	VxhqSJV.exe
2664	wgIBvrV.exe
2744	XdTMzrb.exe
2864	EIIalCQ.exe
2868	iIgTTwR.exe
2624	MAYyXQf.exe
2512	dSGRpdm.exe
2704	BYwLaMq.exe
2720	KxndWOV.exe
2448	PNaouCK.exe
1908	qIcZfLQ.exe
2676	lIXtMec.exe
2440	hyzJHzg.exe
1656	RRAxTSA.exe
1844	Wtsbzql.exe
1972	ulAEMoX.exe
2980	vkbuPyE.exe
2424	rczhnRG.exe
1616	LDBuXPX.exe
628	RMQCtzv.exe
1404	OMSbpvX.exe
2688	qdZRlXW.exe
1428	oniDJqK.exe
336	QQHHIie.exe
752	oxHRvwu.exe
544	sVMCCoP.exe
588	uXDeLLd.exe
1504	kjdgjqV.exe
2456	cUjNJUe.exe
2052	SCPSrQb.exe
1776	CLlhjDN.exe
2076	hTVKRLv.exe
2140	lqQPvbs.exe
1488	YsTAIgV.exe
1816	CQznKXr.exe
1864	RxHlVEE.exe
1892	PLISTah.exe
972	rDDubjw.exe
952	kmnMtTl.exe
2880	kUfHJCv.exe
1064	PzBvyPw.exe
1176	ysxSxOM.exe
1528	hGfiHVr.exe
1672	oHKfHpa.exe
1696	BcbmnfS.exe
1976	jWrbtJH.exe
1620	iMcLiIb.exe
2112	dkrhriR.exe
848	bzzDlWp.exe
496	duyxLjY.exe
1580	gIyIIUL.exe
3000	eiQnyiw.exe
2420	UNZEXEq.exe
2656	OHDRemv.exe
2180	yjTmzxq.exe
2508	csNlKtG.exe
3036	bNqACrm.exe
2516	KsfgSTK.exe
1640	MVgvrmP.exe
2000	FNDCwok.exe
2712	rXuXkco.exe

Loads dropped DLL 64 IoCs

pid	Process
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe

UPX packed file 64 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral1/memory/2916-0-0x000000013FCF0000-0x0000000140044000-memory.dmp	upx
behavioral1/files/0x00090000000141c0-3.dat	upx
behavioral1/memory/1792-9-0x000000013F6C0000-0x000000013FA14000-memory.dmp	upx
behavioral1/files/0x000a0000000143ec-12.dat	upx
behavioral1/files/0x0008000000014539-13.dat	upx
behavioral1/files/0x000b0000000146c0-36.dat	upx
behavioral1/files/0x0006000000014af6-66.dat	upx
behavioral1/memory/2864-67-0x000000013F6C0000-0x000000013FA14000-memory.dmp	upx
behavioral1/files/0x0007000000014667-30.dat	upx
behavioral1/memory/2744-62-0x000000013F1A0000-0x000000013F4F4000-memory.dmp	upx
behavioral1/files/0x0006000000014b70-85.dat	upx
behavioral1/memory/2704-86-0x000000013F3D0000-0x000000013F724000-memory.dmp	upx
behavioral1/memory/2720-93-0x000000013F580000-0x000000013F8D4000-memory.dmp	upx
behavioral1/files/0x0006000000014ef8-100.dat	upx
behavioral1/files/0x0007000000014abe-63.dat	upx
behavioral1/files/0x0006000000014de9-109.dat	upx
behavioral1/files/0x0007000000014825-76.dat	upx
behavioral1/memory/1908-119-0x000000013F6E0000-0x000000013FA34000-memory.dmp	upx
behavioral1/files/0x0006000000015018-117.dat	upx
behavioral1/files/0x00060000000155f3-126.dat	upx
behavioral1/memory/2916-121-0x000000013FCF0000-0x0000000140044000-memory.dmp	upx
behavioral1/files/0x000900000001447e-120.dat	upx
behavioral1/memory/2448-99-0x000000013F250000-0x000000013F5A4000-memory.dmp	upx
behavioral1/files/0x0006000000014b31-95.dat	upx
behavioral1/memory/2868-81-0x000000013F990000-0x000000013FCE4000-memory.dmp	upx
behavioral1/memory/2512-78-0x000000013FA20000-0x000000013FD74000-memory.dmp	upx
behavioral1/files/0x00060000000155ed-114.dat	upx
behavioral1/memory/2624-73-0x000000013F140000-0x000000013F494000-memory.dmp	upx
behavioral1/memory/2664-53-0x000000013F4B0000-0x000000013F804000-memory.dmp	upx
behavioral1/files/0x00070000000149f5-57.dat	upx
behavioral1/memory/2600-48-0x000000013FF50000-0x00000001402A4000-memory.dmp	upx
behavioral1/files/0x00070000000147ea-44.dat	upx
behavioral1/files/0x00090000000146b8-43.dat	upx
behavioral1/files/0x000b0000000146a2-34.dat	upx
behavioral1/files/0x00060000000155f7-129.dat	upx
behavioral1/files/0x0006000000015616-143.dat	upx
behavioral1/files/0x0006000000015605-136.dat	upx
behavioral1/files/0x0006000000015626-147.dat	upx
behavioral1/files/0x0006000000015b6f-153.dat	upx
behavioral1/files/0x0006000000015c3d-156.dat	upx
behavioral1/files/0x0006000000015c52-163.dat	upx
behavioral1/files/0x0006000000015c78-169.dat	upx
behavioral1/files/0x0006000000015c9f-181.dat	upx
behavioral1/files/0x0006000000015cb6-187.dat	upx
behavioral1/files/0x0006000000015c83-178.dat	upx
behavioral1/files/0x0006000000015c6b-167.dat	upx
behavioral1/memory/2416-22-0x000000013FD80000-0x00000001400D4000-memory.dmp	upx
behavioral1/memory/3064-21-0x000000013F190000-0x000000013F4E4000-memory.dmp	upx
behavioral1/memory/2512-2407-0x000000013FA20000-0x000000013FD74000-memory.dmp	upx
behavioral1/memory/2704-2408-0x000000013F3D0000-0x000000013F724000-memory.dmp	upx
behavioral1/memory/2448-2818-0x000000013F250000-0x000000013F5A4000-memory.dmp	upx
behavioral1/memory/1792-3995-0x000000013F6C0000-0x000000013FA14000-memory.dmp	upx
behavioral1/memory/3064-3996-0x000000013F190000-0x000000013F4E4000-memory.dmp	upx
behavioral1/memory/2416-3997-0x000000013FD80000-0x00000001400D4000-memory.dmp	upx
behavioral1/memory/2600-3998-0x000000013FF50000-0x00000001402A4000-memory.dmp	upx
behavioral1/memory/2664-3999-0x000000013F4B0000-0x000000013F804000-memory.dmp	upx
behavioral1/memory/2864-4000-0x000000013F6C0000-0x000000013FA14000-memory.dmp	upx
behavioral1/memory/2744-4001-0x000000013F1A0000-0x000000013F4F4000-memory.dmp	upx
behavioral1/memory/2624-4002-0x000000013F140000-0x000000013F494000-memory.dmp	upx
behavioral1/memory/2868-4003-0x000000013F990000-0x000000013FCE4000-memory.dmp	upx
behavioral1/memory/2512-4004-0x000000013FA20000-0x000000013FD74000-memory.dmp	upx
behavioral1/memory/2720-4005-0x000000013F580000-0x000000013F8D4000-memory.dmp	upx
behavioral1/memory/2704-4006-0x000000013F3D0000-0x000000013F724000-memory.dmp	upx
behavioral1/memory/1908-4007-0x000000013F6E0000-0x000000013FA34000-memory.dmp	upx

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\System\AWEfWnX.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\JaYUmGa.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\HKaJPvy.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\LqJHRhR.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\XKsfKDb.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\wtISRJR.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\zrihPGR.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\wHuiIFB.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\AvidJju.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\ptUCPBq.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\DPjZrVS.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\gKPHWAd.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\oLYSBfH.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\JEhYLvs.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\zqvdsgT.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\CUIbJpX.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\BIjTTrk.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\dcGtWKS.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\XNhnoth.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\ZFxcylE.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\wpNJjEG.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\MNBrNCe.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\vBVuXCr.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\CAQrDgR.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\VPeHLgn.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\yUYPsfX.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\ntTwhkF.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\lqQPvbs.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\XdWfPMR.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\ssLLNbd.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\ktnayxC.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\VOJIcWy.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\ZphxkkZ.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\qrJdjNQ.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\PJUXDTL.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\zEyAzfZ.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\uRvcLqD.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\VehnLsL.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\XWgeaiC.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\dXnlvyp.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\AJwledJ.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\NVnNlJM.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\oZBKhdR.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\CGViebr.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\bCAsXGn.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\UlnKVrr.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\dzebEhV.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\COzQURS.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\MVJbNHz.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\kNqCdDZ.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\kONvrYc.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\InOnghY.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\SuIDRKZ.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\MllBiLa.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\tuOJQvn.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\triijkZ.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\QsiSpwT.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\XdTMzrb.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\DVMnIHU.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\vYtdJEh.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\PqyvhYF.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\MdBQGPB.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\BnTuIsH.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
File created	C:\Windows\System\cANCOyi.exe	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2916 wrote to memory of 1792	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	29
PID 2916 wrote to memory of 1792	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	29
PID 2916 wrote to memory of 1792	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	29
PID 2916 wrote to memory of 3064	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	30
PID 2916 wrote to memory of 3064	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	30
PID 2916 wrote to memory of 3064	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	30
PID 2916 wrote to memory of 2416	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	31
PID 2916 wrote to memory of 2416	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	31
PID 2916 wrote to memory of 2416	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	31
PID 2916 wrote to memory of 2600	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	32
PID 2916 wrote to memory of 2600	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	32
PID 2916 wrote to memory of 2600	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	32
PID 2916 wrote to memory of 2664	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	33
PID 2916 wrote to memory of 2664	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	33
PID 2916 wrote to memory of 2664	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	33
PID 2916 wrote to memory of 2744	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	34
PID 2916 wrote to memory of 2744	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	34
PID 2916 wrote to memory of 2744	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	34
PID 2916 wrote to memory of 2868	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	35
PID 2916 wrote to memory of 2868	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	35
PID 2916 wrote to memory of 2868	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	35
PID 2916 wrote to memory of 2864	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	36
PID 2916 wrote to memory of 2864	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	36
PID 2916 wrote to memory of 2864	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	36
PID 2916 wrote to memory of 2704	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	37
PID 2916 wrote to memory of 2704	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	37
PID 2916 wrote to memory of 2704	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	37
PID 2916 wrote to memory of 2624	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	38
PID 2916 wrote to memory of 2624	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	38
PID 2916 wrote to memory of 2624	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	38
PID 2916 wrote to memory of 2448	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	39
PID 2916 wrote to memory of 2448	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	39
PID 2916 wrote to memory of 2448	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	39
PID 2916 wrote to memory of 2512	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	40
PID 2916 wrote to memory of 2512	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	40
PID 2916 wrote to memory of 2512	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	40
PID 2916 wrote to memory of 1908	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	41
PID 2916 wrote to memory of 1908	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	41
PID 2916 wrote to memory of 1908	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	41
PID 2916 wrote to memory of 2720	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	42
PID 2916 wrote to memory of 2720	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	42
PID 2916 wrote to memory of 2720	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	42
PID 2916 wrote to memory of 2440	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	43
PID 2916 wrote to memory of 2440	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	43
PID 2916 wrote to memory of 2440	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	43
PID 2916 wrote to memory of 2676	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	44
PID 2916 wrote to memory of 2676	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	44
PID 2916 wrote to memory of 2676	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	44
PID 2916 wrote to memory of 1844	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	45
PID 2916 wrote to memory of 1844	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	45
PID 2916 wrote to memory of 1844	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	45
PID 2916 wrote to memory of 1656	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	46
PID 2916 wrote to memory of 1656	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	46
PID 2916 wrote to memory of 1656	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	46
PID 2916 wrote to memory of 2980	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	47
PID 2916 wrote to memory of 2980	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	47
PID 2916 wrote to memory of 2980	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	47
PID 2916 wrote to memory of 1972	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	48
PID 2916 wrote to memory of 1972	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	48
PID 2916 wrote to memory of 1972	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	48
PID 2916 wrote to memory of 1616	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	49
PID 2916 wrote to memory of 1616	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	49
PID 2916 wrote to memory of 1616	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	49
PID 2916 wrote to memory of 2424	2916	45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe	50

C:\Users\Admin\AppData\Local\Temp\45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\45fa971f33833016d0c852fb771e12d0_NeikiAnalytics.exe"
1⤵
- Loads dropped DLL
- Drops file in Windows directory
- Suspicious use of WriteProcessMemory
PID:2916
- C:\Windows\System\OxzKrpy.exe
  C:\Windows\System\OxzKrpy.exe
  2⤵
  - Executes dropped EXE
  PID:1792
- C:\Windows\System\ntTwhkF.exe
  C:\Windows\System\ntTwhkF.exe
  2⤵
  - Executes dropped EXE
  PID:3064
- C:\Windows\System\IVDIufO.exe
  C:\Windows\System\IVDIufO.exe
  2⤵
  - Executes dropped EXE
  PID:2416
- C:\Windows\System\VxhqSJV.exe
  C:\Windows\System\VxhqSJV.exe
  2⤵
  - Executes dropped EXE
  PID:2600
- C:\Windows\System\wgIBvrV.exe
  C:\Windows\System\wgIBvrV.exe
  2⤵
  - Executes dropped EXE
  PID:2664
- C:\Windows\System\XdTMzrb.exe
  C:\Windows\System\XdTMzrb.exe
  2⤵
  - Executes dropped EXE
  PID:2744
- C:\Windows\System\iIgTTwR.exe
  C:\Windows\System\iIgTTwR.exe
  2⤵
  - Executes dropped EXE
  PID:2868
- C:\Windows\System\EIIalCQ.exe
  C:\Windows\System\EIIalCQ.exe
  2⤵
  - Executes dropped EXE
  PID:2864
- C:\Windows\System\BYwLaMq.exe
  C:\Windows\System\BYwLaMq.exe
  2⤵
  - Executes dropped EXE
  PID:2704
- C:\Windows\System\MAYyXQf.exe
  C:\Windows\System\MAYyXQf.exe
  2⤵
  - Executes dropped EXE
  PID:2624
- C:\Windows\System\PNaouCK.exe
  C:\Windows\System\PNaouCK.exe
  2⤵
  - Executes dropped EXE
  PID:2448
- C:\Windows\System\dSGRpdm.exe
  C:\Windows\System\dSGRpdm.exe
  2⤵
  - Executes dropped EXE
  PID:2512
- C:\Windows\System\qIcZfLQ.exe
  C:\Windows\System\qIcZfLQ.exe
  2⤵
  - Executes dropped EXE
  PID:1908
- C:\Windows\System\KxndWOV.exe
  C:\Windows\System\KxndWOV.exe
  2⤵
  - Executes dropped EXE
  PID:2720
- C:\Windows\System\hyzJHzg.exe
  C:\Windows\System\hyzJHzg.exe
  2⤵
  - Executes dropped EXE
  PID:2440
- C:\Windows\System\lIXtMec.exe
  C:\Windows\System\lIXtMec.exe
  2⤵
  - Executes dropped EXE
  PID:2676
- C:\Windows\System\Wtsbzql.exe
  C:\Windows\System\Wtsbzql.exe
  2⤵
  - Executes dropped EXE
  PID:1844
- C:\Windows\System\RRAxTSA.exe
  C:\Windows\System\RRAxTSA.exe
  2⤵
  - Executes dropped EXE
  PID:1656
- C:\Windows\System\vkbuPyE.exe
  C:\Windows\System\vkbuPyE.exe
  2⤵
  - Executes dropped EXE
  PID:2980
- C:\Windows\System\ulAEMoX.exe
  C:\Windows\System\ulAEMoX.exe
  2⤵
  - Executes dropped EXE
  PID:1972
- C:\Windows\System\LDBuXPX.exe
  C:\Windows\System\LDBuXPX.exe
  2⤵
  - Executes dropped EXE
  PID:1616
- C:\Windows\System\rczhnRG.exe
  C:\Windows\System\rczhnRG.exe
  2⤵
  - Executes dropped EXE
  PID:2424
- C:\Windows\System\RMQCtzv.exe
  C:\Windows\System\RMQCtzv.exe
  2⤵
  - Executes dropped EXE
  PID:628
- C:\Windows\System\OMSbpvX.exe
  C:\Windows\System\OMSbpvX.exe
  2⤵
  - Executes dropped EXE
  PID:1404
- C:\Windows\System\qdZRlXW.exe
  C:\Windows\System\qdZRlXW.exe
  2⤵
  - Executes dropped EXE
  PID:2688
- C:\Windows\System\oniDJqK.exe
  C:\Windows\System\oniDJqK.exe
  2⤵
  - Executes dropped EXE
  PID:1428
- C:\Windows\System\QQHHIie.exe
  C:\Windows\System\QQHHIie.exe
  2⤵
  - Executes dropped EXE
  PID:336
- C:\Windows\System\oxHRvwu.exe
  C:\Windows\System\oxHRvwu.exe
  2⤵
  - Executes dropped EXE
  PID:752
- C:\Windows\System\sVMCCoP.exe
  C:\Windows\System\sVMCCoP.exe
  2⤵
  - Executes dropped EXE
  PID:544
- C:\Windows\System\uXDeLLd.exe
  C:\Windows\System\uXDeLLd.exe
  2⤵
  - Executes dropped EXE
  PID:588
- C:\Windows\System\kjdgjqV.exe
  C:\Windows\System\kjdgjqV.exe
  2⤵
  - Executes dropped EXE
  PID:1504
- C:\Windows\System\cUjNJUe.exe
  C:\Windows\System\cUjNJUe.exe
  2⤵
  - Executes dropped EXE
  PID:2456
- C:\Windows\System\SCPSrQb.exe
  C:\Windows\System\SCPSrQb.exe
  2⤵
  - Executes dropped EXE
  PID:2052
- C:\Windows\System\CLlhjDN.exe
  C:\Windows\System\CLlhjDN.exe
  2⤵
  - Executes dropped EXE
  PID:1776
- C:\Windows\System\hTVKRLv.exe
  C:\Windows\System\hTVKRLv.exe
  2⤵
  - Executes dropped EXE
  PID:2076
- C:\Windows\System\lqQPvbs.exe
  C:\Windows\System\lqQPvbs.exe
  2⤵
  - Executes dropped EXE
  PID:2140
- C:\Windows\System\YsTAIgV.exe
  C:\Windows\System\YsTAIgV.exe
  2⤵
  - Executes dropped EXE
  PID:1488
- C:\Windows\System\CQznKXr.exe
  C:\Windows\System\CQznKXr.exe
  2⤵
  - Executes dropped EXE
  PID:1816
- C:\Windows\System\RxHlVEE.exe
  C:\Windows\System\RxHlVEE.exe
  2⤵
  - Executes dropped EXE
  PID:1864
- C:\Windows\System\PLISTah.exe
  C:\Windows\System\PLISTah.exe
  2⤵
  - Executes dropped EXE
  PID:1892
- C:\Windows\System\rDDubjw.exe
  C:\Windows\System\rDDubjw.exe
  2⤵
  - Executes dropped EXE
  PID:972
- C:\Windows\System\kmnMtTl.exe
  C:\Windows\System\kmnMtTl.exe
  2⤵
  - Executes dropped EXE
  PID:952
- C:\Windows\System\kUfHJCv.exe
  C:\Windows\System\kUfHJCv.exe
  2⤵
  - Executes dropped EXE
  PID:2880
- C:\Windows\System\PzBvyPw.exe
  C:\Windows\System\PzBvyPw.exe
  2⤵
  - Executes dropped EXE
  PID:1064
- C:\Windows\System\ysxSxOM.exe
  C:\Windows\System\ysxSxOM.exe
  2⤵
  - Executes dropped EXE
  PID:1176
- C:\Windows\System\hGfiHVr.exe
  C:\Windows\System\hGfiHVr.exe
  2⤵
  - Executes dropped EXE
  PID:1528
- C:\Windows\System\oHKfHpa.exe
  C:\Windows\System\oHKfHpa.exe
  2⤵
  - Executes dropped EXE
  PID:1672
- C:\Windows\System\BcbmnfS.exe
  C:\Windows\System\BcbmnfS.exe
  2⤵
  - Executes dropped EXE
  PID:1696
- C:\Windows\System\jWrbtJH.exe
  C:\Windows\System\jWrbtJH.exe
  2⤵
  - Executes dropped EXE
  PID:1976
- C:\Windows\System\iMcLiIb.exe
  C:\Windows\System\iMcLiIb.exe
  2⤵
  - Executes dropped EXE
  PID:1620
- C:\Windows\System\bzzDlWp.exe
  C:\Windows\System\bzzDlWp.exe
  2⤵
  - Executes dropped EXE
  PID:848
- C:\Windows\System\dkrhriR.exe
  C:\Windows\System\dkrhriR.exe
  2⤵
  - Executes dropped EXE
  PID:2112
- C:\Windows\System\duyxLjY.exe
  C:\Windows\System\duyxLjY.exe
  2⤵
  - Executes dropped EXE
  PID:496
- C:\Windows\System\gIyIIUL.exe
  C:\Windows\System\gIyIIUL.exe
  2⤵
  - Executes dropped EXE
  PID:1580
- C:\Windows\System\UNZEXEq.exe
  C:\Windows\System\UNZEXEq.exe
  2⤵
  - Executes dropped EXE
  PID:2420
- C:\Windows\System\eiQnyiw.exe
  C:\Windows\System\eiQnyiw.exe
  2⤵
  - Executes dropped EXE
  PID:3000
- C:\Windows\System\yjTmzxq.exe
  C:\Windows\System\yjTmzxq.exe
  2⤵
  - Executes dropped EXE
  PID:2180
- C:\Windows\System\OHDRemv.exe
  C:\Windows\System\OHDRemv.exe
  2⤵
  - Executes dropped EXE
  PID:2656
- C:\Windows\System\bNqACrm.exe
  C:\Windows\System\bNqACrm.exe
  2⤵
  - Executes dropped EXE
  PID:3036
- C:\Windows\System\csNlKtG.exe
  C:\Windows\System\csNlKtG.exe
  2⤵
  - Executes dropped EXE
  PID:2508
- C:\Windows\System\KsfgSTK.exe
  C:\Windows\System\KsfgSTK.exe
  2⤵
  - Executes dropped EXE
  PID:2516
- C:\Windows\System\MVgvrmP.exe
  C:\Windows\System\MVgvrmP.exe
  2⤵
  - Executes dropped EXE
  PID:1640
- C:\Windows\System\FNDCwok.exe
  C:\Windows\System\FNDCwok.exe
  2⤵
  - Executes dropped EXE
  PID:2000
- C:\Windows\System\rXuXkco.exe
  C:\Windows\System\rXuXkco.exe
  2⤵
  - Executes dropped EXE
  PID:2712
- C:\Windows\System\JNPvXQv.exe
  C:\Windows\System\JNPvXQv.exe
  2⤵
  PID:2944
- C:\Windows\System\yXbgRGQ.exe
  C:\Windows\System\yXbgRGQ.exe
  2⤵
  PID:2960
- C:\Windows\System\niWLhiA.exe
  C:\Windows\System\niWLhiA.exe
  2⤵
  PID:1628
- C:\Windows\System\tKGwEZH.exe
  C:\Windows\System\tKGwEZH.exe
  2⤵
  PID:2848
- C:\Windows\System\HjvwlXj.exe
  C:\Windows\System\HjvwlXj.exe
  2⤵
  PID:3068
- C:\Windows\System\FOmOJTa.exe
  C:\Windows\System\FOmOJTa.exe
  2⤵
  PID:2496
- C:\Windows\System\fuBluwS.exe
  C:\Windows\System\fuBluwS.exe
  2⤵
  PID:2764
- C:\Windows\System\kMubUWX.exe
  C:\Windows\System\kMubUWX.exe
  2⤵
  PID:2296
- C:\Windows\System\xhByYYe.exe
  C:\Windows\System\xhByYYe.exe
  2⤵
  PID:1120
- C:\Windows\System\dqKGhJv.exe
  C:\Windows\System\dqKGhJv.exe
  2⤵
  PID:2552
- C:\Windows\System\cypToca.exe
  C:\Windows\System\cypToca.exe
  2⤵
  PID:2936
- C:\Windows\System\oIFclNI.exe
  C:\Windows\System\oIFclNI.exe
  2⤵
  PID:2580
- C:\Windows\System\GbGOOpY.exe
  C:\Windows\System\GbGOOpY.exe
  2⤵
  PID:2380
- C:\Windows\System\kSKQFVN.exe
  C:\Windows\System\kSKQFVN.exe
  2⤵
  PID:2568
- C:\Windows\System\hzWAlCS.exe
  C:\Windows\System\hzWAlCS.exe
  2⤵
  PID:2464
- C:\Windows\System\ppszows.exe
  C:\Windows\System\ppszows.exe
  2⤵
  PID:2504
- C:\Windows\System\tfEtgOa.exe
  C:\Windows\System\tfEtgOa.exe
  2⤵
  PID:2708
- C:\Windows\System\NggdpMs.exe
  C:\Windows\System\NggdpMs.exe
  2⤵
  PID:2636
- C:\Windows\System\BUAMSTU.exe
  C:\Windows\System\BUAMSTU.exe
  2⤵
  PID:2728
- C:\Windows\System\pTzhgTU.exe
  C:\Windows\System\pTzhgTU.exe
  2⤵
  PID:1224
- C:\Windows\System\tbXblqZ.exe
  C:\Windows\System\tbXblqZ.exe
  2⤵
  PID:576
- C:\Windows\System\eoJpHKJ.exe
  C:\Windows\System\eoJpHKJ.exe
  2⤵
  PID:1820
- C:\Windows\System\TlSTGCJ.exe
  C:\Windows\System\TlSTGCJ.exe
  2⤵
  PID:1764
- C:\Windows\System\XNRHqsg.exe
  C:\Windows\System\XNRHqsg.exe
  2⤵
  PID:1904
- C:\Windows\System\sZCmkxT.exe
  C:\Windows\System\sZCmkxT.exe
  2⤵
  PID:1272
- C:\Windows\System\ffesGUr.exe
  C:\Windows\System\ffesGUr.exe
  2⤵
  PID:1636
- C:\Windows\System\rcgmpZg.exe
  C:\Windows\System\rcgmpZg.exe
  2⤵
  PID:2748
- C:\Windows\System\krSWlSK.exe
  C:\Windows\System\krSWlSK.exe
  2⤵
  PID:2940
- C:\Windows\System\FVvXPaL.exe
  C:\Windows\System\FVvXPaL.exe
  2⤵
  PID:796
- C:\Windows\System\JbmXLIT.exe
  C:\Windows\System\JbmXLIT.exe
  2⤵
  PID:1884
- C:\Windows\System\InkAWKj.exe
  C:\Windows\System\InkAWKj.exe
  2⤵
  PID:1100
- C:\Windows\System\kWbRqhe.exe
  C:\Windows\System\kWbRqhe.exe
  2⤵
  PID:2560
- C:\Windows\System\LptHDAS.exe
  C:\Windows\System\LptHDAS.exe
  2⤵
  PID:1980
- C:\Windows\System\RCvCwPj.exe
  C:\Windows\System\RCvCwPj.exe
  2⤵
  PID:472
- C:\Windows\System\QNiftwc.exe
  C:\Windows\System\QNiftwc.exe
  2⤵
  PID:1060
- C:\Windows\System\tQCQwYJ.exe
  C:\Windows\System\tQCQwYJ.exe
  2⤵
  PID:1760
- C:\Windows\System\ZOuGpkE.exe
  C:\Windows\System\ZOuGpkE.exe
  2⤵
  PID:1756
- C:\Windows\System\vlEVdPc.exe
  C:\Windows\System\vlEVdPc.exe
  2⤵
  PID:3020
- C:\Windows\System\bwHxSHm.exe
  C:\Windows\System\bwHxSHm.exe
  2⤵
  PID:1668
- C:\Windows\System\PvZwsAA.exe
  C:\Windows\System\PvZwsAA.exe
  2⤵
  PID:1612
- C:\Windows\System\cFubeOc.exe
  C:\Windows\System\cFubeOc.exe
  2⤵
  PID:1180
- C:\Windows\System\mLmHygC.exe
  C:\Windows\System\mLmHygC.exe
  2⤵
  PID:2172
- C:\Windows\System\PfCtmwA.exe
  C:\Windows\System\PfCtmwA.exe
  2⤵
  PID:2572
- C:\Windows\System\LzrozOn.exe
  C:\Windows\System\LzrozOn.exe
  2⤵
  PID:2488
- C:\Windows\System\TLqdlOr.exe
  C:\Windows\System\TLqdlOr.exe
  2⤵
  PID:2948
- C:\Windows\System\UUhLYXk.exe
  C:\Windows\System\UUhLYXk.exe
  2⤵
  PID:1984
- C:\Windows\System\bzzaFdj.exe
  C:\Windows\System\bzzaFdj.exe
  2⤵
  PID:1312
- C:\Windows\System\vgkrvEU.exe
  C:\Windows\System\vgkrvEU.exe
  2⤵
  PID:2564
- C:\Windows\System\JEsRuSS.exe
  C:\Windows\System\JEsRuSS.exe
  2⤵
  PID:2604
- C:\Windows\System\mnyEJIq.exe
  C:\Windows\System\mnyEJIq.exe
  2⤵
  PID:2196
- C:\Windows\System\QICRxkx.exe
  C:\Windows\System\QICRxkx.exe
  2⤵
  PID:868
- C:\Windows\System\LSjWHaz.exe
  C:\Windows\System\LSjWHaz.exe
  2⤵
  PID:1456
- C:\Windows\System\etVCYpr.exe
  C:\Windows\System\etVCYpr.exe
  2⤵
  PID:2008
- C:\Windows\System\uPabHpA.exe
  C:\Windows\System\uPabHpA.exe
  2⤵
  PID:2740
- C:\Windows\System\rYCOppY.exe
  C:\Windows\System\rYCOppY.exe
  2⤵
  PID:1592
- C:\Windows\System\bwBdoQX.exe
  C:\Windows\System\bwBdoQX.exe
  2⤵
  PID:2348
- C:\Windows\System\UhPRgtX.exe
  C:\Windows\System\UhPRgtX.exe
  2⤵
  PID:1432
- C:\Windows\System\mzXgtIi.exe
  C:\Windows\System\mzXgtIi.exe
  2⤵
  PID:1992
- C:\Windows\System\AbCnVGl.exe
  C:\Windows\System\AbCnVGl.exe
  2⤵
  PID:2256
- C:\Windows\System\RMDJtZu.exe
  C:\Windows\System\RMDJtZu.exe
  2⤵
  PID:2068
- C:\Windows\System\fIgeDTC.exe
  C:\Windows\System\fIgeDTC.exe
  2⤵
  PID:2300
- C:\Windows\System\pPyPiut.exe
  C:\Windows\System\pPyPiut.exe
  2⤵
  PID:1876
- C:\Windows\System\kMPWjwp.exe
  C:\Windows\System\kMPWjwp.exe
  2⤵
  PID:1736
- C:\Windows\System\BIyiMcq.exe
  C:\Windows\System\BIyiMcq.exe
  2⤵
  PID:1012
- C:\Windows\System\JApUzhY.exe
  C:\Windows\System\JApUzhY.exe
  2⤵
  PID:1056
- C:\Windows\System\FezLHLq.exe
  C:\Windows\System\FezLHLq.exe
  2⤵
  PID:2064
- C:\Windows\System\VkuJeAs.exe
  C:\Windows\System\VkuJeAs.exe
  2⤵
  PID:3032
- C:\Windows\System\ozBNtyl.exe
  C:\Windows\System\ozBNtyl.exe
  2⤵
  PID:2612
- C:\Windows\System\KQXlQWQ.exe
  C:\Windows\System\KQXlQWQ.exe
  2⤵
  PID:884
- C:\Windows\System\dCgFknx.exe
  C:\Windows\System\dCgFknx.exe
  2⤵
  PID:2316
- C:\Windows\System\RLUcASA.exe
  C:\Windows\System\RLUcASA.exe
  2⤵
  PID:1608
- C:\Windows\System\LddOyWy.exe
  C:\Windows\System\LddOyWy.exe
  2⤵
  PID:2760
- C:\Windows\System\PEwltxm.exe
  C:\Windows\System\PEwltxm.exe
  2⤵
  PID:2524
- C:\Windows\System\VOJIcWy.exe
  C:\Windows\System\VOJIcWy.exe
  2⤵
  PID:2620
- C:\Windows\System\xQRoApl.exe
  C:\Windows\System\xQRoApl.exe
  2⤵
  PID:1740
- C:\Windows\System\UGyfZCr.exe
  C:\Windows\System\UGyfZCr.exe
  2⤵
  PID:1732
- C:\Windows\System\XbNtPym.exe
  C:\Windows\System\XbNtPym.exe
  2⤵
  PID:2536
- C:\Windows\System\cSrUDlu.exe
  C:\Windows\System\cSrUDlu.exe
  2⤵
  PID:1208
- C:\Windows\System\CDkrTeR.exe
  C:\Windows\System\CDkrTeR.exe
  2⤵
  PID:2724
- C:\Windows\System\KMhvKdT.exe
  C:\Windows\System\KMhvKdT.exe
  2⤵
  PID:2304
- C:\Windows\System\GFuzJcH.exe
  C:\Windows\System\GFuzJcH.exe
  2⤵
  PID:1468
- C:\Windows\System\NZZHspK.exe
  C:\Windows\System\NZZHspK.exe
  2⤵
  PID:2268
- C:\Windows\System\WaSPiTX.exe
  C:\Windows\System\WaSPiTX.exe
  2⤵
  PID:1836
- C:\Windows\System\GlMRTDo.exe
  C:\Windows\System\GlMRTDo.exe
  2⤵
  PID:1092
- C:\Windows\System\YsGnEYh.exe
  C:\Windows\System\YsGnEYh.exe
  2⤵
  PID:740
- C:\Windows\System\mGfoGMs.exe
  C:\Windows\System\mGfoGMs.exe
  2⤵
  PID:3048
- C:\Windows\System\PudjCuQ.exe
  C:\Windows\System\PudjCuQ.exe
  2⤵
  PID:3008
- C:\Windows\System\nbENRjv.exe
  C:\Windows\System\nbENRjv.exe
  2⤵
  PID:2608
- C:\Windows\System\vlWcjgQ.exe
  C:\Windows\System\vlWcjgQ.exe
  2⤵
  PID:1848
- C:\Windows\System\BpOeLGQ.exe
  C:\Windows\System\BpOeLGQ.exe
  2⤵
  PID:2772
- C:\Windows\System\hohDzfQ.exe
  C:\Windows\System\hohDzfQ.exe
  2⤵
  PID:2360
- C:\Windows\System\SQckTOO.exe
  C:\Windows\System\SQckTOO.exe
  2⤵
  PID:2480
- C:\Windows\System\CyKdqIa.exe
  C:\Windows\System\CyKdqIa.exe
  2⤵
  PID:1304
- C:\Windows\System\vrQJILF.exe
  C:\Windows\System\vrQJILF.exe
  2⤵
  PID:1924
- C:\Windows\System\KelUUfS.exe
  C:\Windows\System\KelUUfS.exe
  2⤵
  PID:324
- C:\Windows\System\NJQUNAE.exe
  C:\Windows\System\NJQUNAE.exe
  2⤵
  PID:768
- C:\Windows\System\PIQATda.exe
  C:\Windows\System\PIQATda.exe
  2⤵
  PID:3028
- C:\Windows\System\MyaKLmw.exe
  C:\Windows\System\MyaKLmw.exe
  2⤵
  PID:692
- C:\Windows\System\NQgirUz.exe
  C:\Windows\System\NQgirUz.exe
  2⤵
  PID:568
- C:\Windows\System\WoXapZx.exe
  C:\Windows\System\WoXapZx.exe
  2⤵
  PID:1476
- C:\Windows\System\ZuaWKWS.exe
  C:\Windows\System\ZuaWKWS.exe
  2⤵
  PID:1728
- C:\Windows\System\KEfsXcR.exe
  C:\Windows\System\KEfsXcR.exe
  2⤵
  PID:940
- C:\Windows\System\KvWmyHQ.exe
  C:\Windows\System\KvWmyHQ.exe
  2⤵
  PID:2900
- C:\Windows\System\WgSYmxh.exe
  C:\Windows\System\WgSYmxh.exe
  2⤵
  PID:2156
- C:\Windows\System\GyloRZg.exe
  C:\Windows\System\GyloRZg.exe
  2⤵
  PID:1132
- C:\Windows\System\gldIAEb.exe
  C:\Windows\System\gldIAEb.exe
  2⤵
  PID:3080
- C:\Windows\System\CEWFZpM.exe
  C:\Windows\System\CEWFZpM.exe
  2⤵
  PID:3104
- C:\Windows\System\smDppli.exe
  C:\Windows\System\smDppli.exe
  2⤵
  PID:3124
- C:\Windows\System\rzElbVJ.exe
  C:\Windows\System\rzElbVJ.exe
  2⤵
  PID:3140
- C:\Windows\System\xmtlQlN.exe
  C:\Windows\System\xmtlQlN.exe
  2⤵
  PID:3180
- C:\Windows\System\XTqVWZw.exe
  C:\Windows\System\XTqVWZw.exe
  2⤵
  PID:3212
- C:\Windows\System\BhKKEZk.exe
  C:\Windows\System\BhKKEZk.exe
  2⤵
  PID:3232
- C:\Windows\System\RZAvHQy.exe
  C:\Windows\System\RZAvHQy.exe
  2⤵
  PID:3248
- C:\Windows\System\JQxThOQ.exe
  C:\Windows\System\JQxThOQ.exe
  2⤵
  PID:3264
- C:\Windows\System\lSemqeP.exe
  C:\Windows\System\lSemqeP.exe
  2⤵
  PID:3280
- C:\Windows\System\erlbWTy.exe
  C:\Windows\System\erlbWTy.exe
  2⤵
  PID:3296
- C:\Windows\System\KkUQCrE.exe
  C:\Windows\System\KkUQCrE.exe
  2⤵
  PID:3316
- C:\Windows\System\hmobKUy.exe
  C:\Windows\System\hmobKUy.exe
  2⤵
  PID:3332
- C:\Windows\System\vXBJPUM.exe
  C:\Windows\System\vXBJPUM.exe
  2⤵
  PID:3408
- C:\Windows\System\baqIrpe.exe
  C:\Windows\System\baqIrpe.exe
  2⤵
  PID:3428
- C:\Windows\System\YCulpns.exe
  C:\Windows\System\YCulpns.exe
  2⤵
  PID:3448
- C:\Windows\System\CHQqidE.exe
  C:\Windows\System\CHQqidE.exe
  2⤵
  PID:3468
- C:\Windows\System\AWEfWnX.exe
  C:\Windows\System\AWEfWnX.exe
  2⤵
  PID:3484
- C:\Windows\System\QXVcJDi.exe
  C:\Windows\System\QXVcJDi.exe
  2⤵
  PID:3500
- C:\Windows\System\kiaKPVE.exe
  C:\Windows\System\kiaKPVE.exe
  2⤵
  PID:3520
- C:\Windows\System\rUsXIvr.exe
  C:\Windows\System\rUsXIvr.exe
  2⤵
  PID:3540
- C:\Windows\System\wLqCZym.exe
  C:\Windows\System\wLqCZym.exe
  2⤵
  PID:3556
- C:\Windows\System\LGnXFXF.exe
  C:\Windows\System\LGnXFXF.exe
  2⤵
  PID:3576
- C:\Windows\System\MdOZvyG.exe
  C:\Windows\System\MdOZvyG.exe
  2⤵
  PID:3592
- C:\Windows\System\vKsfjLG.exe
  C:\Windows\System\vKsfjLG.exe
  2⤵
  PID:3620
- C:\Windows\System\qQuZUWz.exe
  C:\Windows\System\qQuZUWz.exe
  2⤵
  PID:3636
- C:\Windows\System\HvjntcZ.exe
  C:\Windows\System\HvjntcZ.exe
  2⤵
  PID:3664
- C:\Windows\System\saYsBVr.exe
  C:\Windows\System\saYsBVr.exe
  2⤵
  PID:3680
- C:\Windows\System\HtcbuBd.exe
  C:\Windows\System\HtcbuBd.exe
  2⤵
  PID:3708
- C:\Windows\System\azOHSIn.exe
  C:\Windows\System\azOHSIn.exe
  2⤵
  PID:3724
- C:\Windows\System\LXErMtT.exe
  C:\Windows\System\LXErMtT.exe
  2⤵
  PID:3740
- C:\Windows\System\OPuhKWT.exe
  C:\Windows\System\OPuhKWT.exe
  2⤵
  PID:3764
- C:\Windows\System\MuBUuCo.exe
  C:\Windows\System\MuBUuCo.exe
  2⤵
  PID:3784
- C:\Windows\System\eDyrdiO.exe
  C:\Windows\System\eDyrdiO.exe
  2⤵
  PID:3800
- C:\Windows\System\PGibUwr.exe
  C:\Windows\System\PGibUwr.exe
  2⤵
  PID:3816
- C:\Windows\System\nwVbmvr.exe
  C:\Windows\System\nwVbmvr.exe
  2⤵
  PID:3836
- C:\Windows\System\ilTwJLc.exe
  C:\Windows\System\ilTwJLc.exe
  2⤵
  PID:3852
- C:\Windows\System\BvMSAHg.exe
  C:\Windows\System\BvMSAHg.exe
  2⤵
  PID:3876
- C:\Windows\System\WsjZuJV.exe
  C:\Windows\System\WsjZuJV.exe
  2⤵
  PID:3892
- C:\Windows\System\dJrJiPB.exe
  C:\Windows\System\dJrJiPB.exe
  2⤵
  PID:3908
- C:\Windows\System\MKuPllr.exe
  C:\Windows\System\MKuPllr.exe
  2⤵
  PID:3924
- C:\Windows\System\eggtUWc.exe
  C:\Windows\System\eggtUWc.exe
  2⤵
  PID:3944
- C:\Windows\System\YSTqrli.exe
  C:\Windows\System\YSTqrli.exe
  2⤵
  PID:3968
- C:\Windows\System\mmylWWg.exe
  C:\Windows\System\mmylWWg.exe
  2⤵
  PID:4012
- C:\Windows\System\gEHchXw.exe
  C:\Windows\System\gEHchXw.exe
  2⤵
  PID:4028
- C:\Windows\System\QCYAWTI.exe
  C:\Windows\System\QCYAWTI.exe
  2⤵
  PID:4044
- C:\Windows\System\nuAdNSc.exe
  C:\Windows\System\nuAdNSc.exe
  2⤵
  PID:4060
- C:\Windows\System\njhBaNa.exe
  C:\Windows\System\njhBaNa.exe
  2⤵
  PID:4076
- C:\Windows\System\ykLvXnP.exe
  C:\Windows\System\ykLvXnP.exe
  2⤵
  PID:4092
- C:\Windows\System\gCLXHYv.exe
  C:\Windows\System\gCLXHYv.exe
  2⤵
  PID:1364
- C:\Windows\System\GolNUCC.exe
  C:\Windows\System\GolNUCC.exe
  2⤵
  PID:3088
- C:\Windows\System\DweWCQL.exe
  C:\Windows\System\DweWCQL.exe
  2⤵
  PID:2828
- C:\Windows\System\NWNHIqk.exe
  C:\Windows\System\NWNHIqk.exe
  2⤵
  PID:2964
- C:\Windows\System\qQRMCxV.exe
  C:\Windows\System\qQRMCxV.exe
  2⤵
  PID:2672
- C:\Windows\System\AthQVnd.exe
  C:\Windows\System\AthQVnd.exe
  2⤵
  PID:1084
- C:\Windows\System\AxTNiDu.exe
  C:\Windows\System\AxTNiDu.exe
  2⤵
  PID:2628
- C:\Windows\System\OKdQjog.exe
  C:\Windows\System\OKdQjog.exe
  2⤵
  PID:3112
- C:\Windows\System\bEDTmmR.exe
  C:\Windows\System\bEDTmmR.exe
  2⤵
  PID:1308
- C:\Windows\System\ZvSwNMr.exe
  C:\Windows\System\ZvSwNMr.exe
  2⤵
  PID:3240
- C:\Windows\System\JebUCYP.exe
  C:\Windows\System\JebUCYP.exe
  2⤵
  PID:3308
- C:\Windows\System\yHcqETI.exe
  C:\Windows\System\yHcqETI.exe
  2⤵
  PID:3348
- C:\Windows\System\HBTLxgH.exe
  C:\Windows\System\HBTLxgH.exe
  2⤵
  PID:3360
- C:\Windows\System\lLcqNxu.exe
  C:\Windows\System\lLcqNxu.exe
  2⤵
  PID:3388
- C:\Windows\System\OHCKwtp.exe
  C:\Windows\System\OHCKwtp.exe
  2⤵
  PID:3400
- C:\Windows\System\ighzkUN.exe
  C:\Windows\System\ighzkUN.exe
  2⤵
  PID:3260
- C:\Windows\System\sqjvlNn.exe
  C:\Windows\System\sqjvlNn.exe
  2⤵
  PID:3416
- C:\Windows\System\bIzDuFi.exe
  C:\Windows\System\bIzDuFi.exe
  2⤵
  PID:3440
- C:\Windows\System\KluLqHd.exe
  C:\Windows\System\KluLqHd.exe
  2⤵
  PID:3480
- C:\Windows\System\ffljYpL.exe
  C:\Windows\System\ffljYpL.exe
  2⤵
  PID:3512
- C:\Windows\System\ZaAFDXe.exe
  C:\Windows\System\ZaAFDXe.exe
  2⤵
  PID:3464
- C:\Windows\System\HIYbGsX.exe
  C:\Windows\System\HIYbGsX.exe
  2⤵
  PID:3600
- C:\Windows\System\uNKZjYq.exe
  C:\Windows\System\uNKZjYq.exe
  2⤵
  PID:3612
- C:\Windows\System\NaocXEU.exe
  C:\Windows\System\NaocXEU.exe
  2⤵
  PID:1744
- C:\Windows\System\SNjAUPn.exe
  C:\Windows\System\SNjAUPn.exe
  2⤵
  PID:3688
- C:\Windows\System\zcqrpFW.exe
  C:\Windows\System\zcqrpFW.exe
  2⤵
  PID:3748
- C:\Windows\System\OBIhOQY.exe
  C:\Windows\System\OBIhOQY.exe
  2⤵
  PID:3792
- C:\Windows\System\NbuqFsU.exe
  C:\Windows\System\NbuqFsU.exe
  2⤵
  PID:3832
- C:\Windows\System\WwHAhvc.exe
  C:\Windows\System\WwHAhvc.exe
  2⤵
  PID:3868
- C:\Windows\System\rSwtQRG.exe
  C:\Windows\System\rSwtQRG.exe
  2⤵
  PID:3932
- C:\Windows\System\JaYUmGa.exe
  C:\Windows\System\JaYUmGa.exe
  2⤵
  PID:3848
- C:\Windows\System\RMhWgKl.exe
  C:\Windows\System\RMhWgKl.exe
  2⤵
  PID:3916
- C:\Windows\System\AryqFIn.exe
  C:\Windows\System\AryqFIn.exe
  2⤵
  PID:3960
- C:\Windows\System\okNLIKn.exe
  C:\Windows\System\okNLIKn.exe
  2⤵
  PID:3976
- C:\Windows\System\IVswLvZ.exe
  C:\Windows\System\IVswLvZ.exe
  2⤵
  PID:4000
- C:\Windows\System\WNLGORW.exe
  C:\Windows\System\WNLGORW.exe
  2⤵
  PID:4020
- C:\Windows\System\DcfGTdk.exe
  C:\Windows\System\DcfGTdk.exe
  2⤵
  PID:1568
- C:\Windows\System\RkoXMtA.exe
  C:\Windows\System\RkoXMtA.exe
  2⤵
  PID:3096
- C:\Windows\System\XmqyuFN.exe
  C:\Windows\System\XmqyuFN.exe
  2⤵
  PID:3148
- C:\Windows\System\dnuKoDy.exe
  C:\Windows\System\dnuKoDy.exe
  2⤵
  PID:2752
- C:\Windows\System\YUuHkeM.exe
  C:\Windows\System\YUuHkeM.exe
  2⤵
  PID:4052
- C:\Windows\System\ZWAxBTQ.exe
  C:\Windows\System\ZWAxBTQ.exe
  2⤵
  PID:1544
- C:\Windows\System\CKRyfSl.exe
  C:\Windows\System\CKRyfSl.exe
  2⤵
  PID:3356
- C:\Windows\System\OLbmzox.exe
  C:\Windows\System\OLbmzox.exe
  2⤵
  PID:3396
- C:\Windows\System\bzmKcsS.exe
  C:\Windows\System\bzmKcsS.exe
  2⤵
  PID:3552
- C:\Windows\System\NyEadrG.exe
  C:\Windows\System\NyEadrG.exe
  2⤵
  PID:3204
- C:\Windows\System\TFeYGuA.exe
  C:\Windows\System\TFeYGuA.exe
  2⤵
  PID:3516
- C:\Windows\System\wEKWYVA.exe
  C:\Windows\System\wEKWYVA.exe
  2⤵
  PID:3376
- C:\Windows\System\eMjsUZC.exe
  C:\Windows\System\eMjsUZC.exe
  2⤵
  PID:3288
- C:\Windows\System\jGBCrXT.exe
  C:\Windows\System\jGBCrXT.exe
  2⤵
  PID:3372
- C:\Windows\System\CGViebr.exe
  C:\Windows\System\CGViebr.exe
  2⤵
  PID:3608
- C:\Windows\System\tTmAPhK.exe
  C:\Windows\System\tTmAPhK.exe
  2⤵
  PID:3644
- C:\Windows\System\OpzhxlM.exe
  C:\Windows\System\OpzhxlM.exe
  2⤵
  PID:3660
- C:\Windows\System\ZphxkkZ.exe
  C:\Windows\System\ZphxkkZ.exe
  2⤵
  PID:3704
- C:\Windows\System\hJKPmnA.exe
  C:\Windows\System\hJKPmnA.exe
  2⤵
  PID:3760
- C:\Windows\System\ndQOYMD.exe
  C:\Windows\System\ndQOYMD.exe
  2⤵
  PID:3824
- C:\Windows\System\nMvsXgU.exe
  C:\Windows\System\nMvsXgU.exe
  2⤵
  PID:3844
- C:\Windows\System\clJPGXI.exe
  C:\Windows\System\clJPGXI.exe
  2⤵
  PID:3956
- C:\Windows\System\wyiNAmK.exe
  C:\Windows\System\wyiNAmK.exe
  2⤵
  PID:652
- C:\Windows\System\sFhbPjN.exe
  C:\Windows\System\sFhbPjN.exe
  2⤵
  PID:2884
- C:\Windows\System\TVhVdpY.exe
  C:\Windows\System\TVhVdpY.exe
  2⤵
  PID:3272
- C:\Windows\System\XbsgHkI.exe
  C:\Windows\System\XbsgHkI.exe
  2⤵
  PID:1800
- C:\Windows\System\SJqGEep.exe
  C:\Windows\System\SJqGEep.exe
  2⤵
  PID:844
- C:\Windows\System\HwtOwft.exe
  C:\Windows\System\HwtOwft.exe
  2⤵
  PID:3176
- C:\Windows\System\etJRAMM.exe
  C:\Windows\System\etJRAMM.exe
  2⤵
  PID:3404
- C:\Windows\System\vXIDULU.exe
  C:\Windows\System\vXIDULU.exe
  2⤵
  PID:3532
- C:\Windows\System\svbdvrP.exe
  C:\Windows\System\svbdvrP.exe
  2⤵
  PID:3508
- C:\Windows\System\uAYxvfH.exe
  C:\Windows\System\uAYxvfH.exe
  2⤵
  PID:3340
- C:\Windows\System\rOQkcNW.exe
  C:\Windows\System\rOQkcNW.exe
  2⤵
  PID:3424
- C:\Windows\System\ATOvjBB.exe
  C:\Windows\System\ATOvjBB.exe
  2⤵
  PID:3208
- C:\Windows\System\bBYGOOv.exe
  C:\Windows\System\bBYGOOv.exe
  2⤵
  PID:3700
- C:\Windows\System\wQdDltv.exe
  C:\Windows\System\wQdDltv.exe
  2⤵
  PID:3696
- C:\Windows\System\IFOaXsi.exe
  C:\Windows\System\IFOaXsi.exe
  2⤵
  PID:2200
- C:\Windows\System\BGgmBId.exe
  C:\Windows\System\BGgmBId.exe
  2⤵
  PID:1536
- C:\Windows\System\BgERbmK.exe
  C:\Windows\System\BgERbmK.exe
  2⤵
  PID:4040
- C:\Windows\System\odVZmaG.exe
  C:\Windows\System\odVZmaG.exe
  2⤵
  PID:3736
- C:\Windows\System\qBPwlrv.exe
  C:\Windows\System\qBPwlrv.exe
  2⤵
  PID:3200
- C:\Windows\System\ozCKrVF.exe
  C:\Windows\System\ozCKrVF.exe
  2⤵
  PID:3632
- C:\Windows\System\kWevmHr.exe
  C:\Windows\System\kWevmHr.exe
  2⤵
  PID:3120
- C:\Windows\System\nBiRyjj.exe
  C:\Windows\System\nBiRyjj.exe
  2⤵
  PID:3676
- C:\Windows\System\yxdrHQc.exe
  C:\Windows\System\yxdrHQc.exe
  2⤵
  PID:3364
- C:\Windows\System\MllBiLa.exe
  C:\Windows\System\MllBiLa.exe
  2⤵
  PID:3776
- C:\Windows\System\qfYEjts.exe
  C:\Windows\System\qfYEjts.exe
  2⤵
  PID:4108
- C:\Windows\System\rjWRjaK.exe
  C:\Windows\System\rjWRjaK.exe
  2⤵
  PID:4132
- C:\Windows\System\cwMwQeI.exe
  C:\Windows\System\cwMwQeI.exe
  2⤵
  PID:4148
- C:\Windows\System\Yvzmebs.exe
  C:\Windows\System\Yvzmebs.exe
  2⤵
  PID:4172
- C:\Windows\System\SgjvTAf.exe
  C:\Windows\System\SgjvTAf.exe
  2⤵
  PID:4188
- C:\Windows\System\DKYILRX.exe
  C:\Windows\System\DKYILRX.exe
  2⤵
  PID:4204
- C:\Windows\System\uyEVRSH.exe
  C:\Windows\System\uyEVRSH.exe
  2⤵
  PID:4224
- C:\Windows\System\qryEIsq.exe
  C:\Windows\System\qryEIsq.exe
  2⤵
  PID:4240
- C:\Windows\System\GnYAgcD.exe
  C:\Windows\System\GnYAgcD.exe
  2⤵
  PID:4260
- C:\Windows\System\ArGiXpb.exe
  C:\Windows\System\ArGiXpb.exe
  2⤵
  PID:4284
- C:\Windows\System\eRjraUZ.exe
  C:\Windows\System\eRjraUZ.exe
  2⤵
  PID:4300
- C:\Windows\System\DPjZrVS.exe
  C:\Windows\System\DPjZrVS.exe
  2⤵
  PID:4324
- C:\Windows\System\gpRbSpZ.exe
  C:\Windows\System\gpRbSpZ.exe
  2⤵
  PID:4340
- C:\Windows\System\AfbXENY.exe
  C:\Windows\System\AfbXENY.exe
  2⤵
  PID:4360
- C:\Windows\System\sYQLpEm.exe
  C:\Windows\System\sYQLpEm.exe
  2⤵
  PID:4380
- C:\Windows\System\PNTzeKx.exe
  C:\Windows\System\PNTzeKx.exe
  2⤵
  PID:4396
- C:\Windows\System\BsTkusg.exe
  C:\Windows\System\BsTkusg.exe
  2⤵
  PID:4416
- C:\Windows\System\wdWyfQG.exe
  C:\Windows\System\wdWyfQG.exe
  2⤵
  PID:4460
- C:\Windows\System\qhvGYNy.exe
  C:\Windows\System\qhvGYNy.exe
  2⤵
  PID:4476
- C:\Windows\System\WMykJLJ.exe
  C:\Windows\System\WMykJLJ.exe
  2⤵
  PID:4496
- C:\Windows\System\lexbtwU.exe
  C:\Windows\System\lexbtwU.exe
  2⤵
  PID:4520
- C:\Windows\System\bGsrvBL.exe
  C:\Windows\System\bGsrvBL.exe
  2⤵
  PID:4556
- C:\Windows\System\licUuCQ.exe
  C:\Windows\System\licUuCQ.exe
  2⤵
  PID:4572
- C:\Windows\System\wkDOpwJ.exe
  C:\Windows\System\wkDOpwJ.exe
  2⤵
  PID:4588
- C:\Windows\System\HKaJPvy.exe
  C:\Windows\System\HKaJPvy.exe
  2⤵
  PID:4612
- C:\Windows\System\WYRJEob.exe
  C:\Windows\System\WYRJEob.exe
  2⤵
  PID:4632
- C:\Windows\System\DhBFtty.exe
  C:\Windows\System\DhBFtty.exe
  2⤵
  PID:4648
- C:\Windows\System\kONvrYc.exe
  C:\Windows\System\kONvrYc.exe
  2⤵
  PID:4668
- C:\Windows\System\tiRfvui.exe
  C:\Windows\System\tiRfvui.exe
  2⤵
  PID:4684
- C:\Windows\System\nPrTlIS.exe
  C:\Windows\System\nPrTlIS.exe
  2⤵
  PID:4704
- C:\Windows\System\dJJvBEA.exe
  C:\Windows\System\dJJvBEA.exe
  2⤵
  PID:4720
- C:\Windows\System\kdSClrQ.exe
  C:\Windows\System\kdSClrQ.exe
  2⤵
  PID:4744
- C:\Windows\System\FVKMcpt.exe
  C:\Windows\System\FVKMcpt.exe
  2⤵
  PID:4764
- C:\Windows\System\ptncwwx.exe
  C:\Windows\System\ptncwwx.exe
  2⤵
  PID:4784
- C:\Windows\System\YrZJxoF.exe
  C:\Windows\System\YrZJxoF.exe
  2⤵
  PID:4808
- C:\Windows\System\kzYbniU.exe
  C:\Windows\System\kzYbniU.exe
  2⤵
  PID:4824
- C:\Windows\System\jogZKYD.exe
  C:\Windows\System\jogZKYD.exe
  2⤵
  PID:4840
- C:\Windows\System\OhmGgzB.exe
  C:\Windows\System\OhmGgzB.exe
  2⤵
  PID:4856
- C:\Windows\System\CJyqMlj.exe
  C:\Windows\System\CJyqMlj.exe
  2⤵
  PID:4880
- C:\Windows\System\lAuogrC.exe
  C:\Windows\System\lAuogrC.exe
  2⤵
  PID:4900
- C:\Windows\System\NuvDZNq.exe
  C:\Windows\System\NuvDZNq.exe
  2⤵
  PID:4916
- C:\Windows\System\ldnflce.exe
  C:\Windows\System\ldnflce.exe
  2⤵
  PID:4932
- C:\Windows\System\cTFSwMp.exe
  C:\Windows\System\cTFSwMp.exe
  2⤵
  PID:4948
- C:\Windows\System\qoFxjQf.exe
  C:\Windows\System\qoFxjQf.exe
  2⤵
  PID:4964
- C:\Windows\System\BitkCUA.exe
  C:\Windows\System\BitkCUA.exe
  2⤵
  PID:4984
- C:\Windows\System\YBbnPKV.exe
  C:\Windows\System\YBbnPKV.exe
  2⤵
  PID:5000
- C:\Windows\System\flUQHgl.exe
  C:\Windows\System\flUQHgl.exe
  2⤵
  PID:5024
- C:\Windows\System\CWiNlSq.exe
  C:\Windows\System\CWiNlSq.exe
  2⤵
  PID:5044
- C:\Windows\System\cYEqTKu.exe
  C:\Windows\System\cYEqTKu.exe
  2⤵
  PID:5060
- C:\Windows\System\UmqDrhD.exe
  C:\Windows\System\UmqDrhD.exe
  2⤵
  PID:5076
- C:\Windows\System\FSJIlJK.exe
  C:\Windows\System\FSJIlJK.exe
  2⤵
  PID:5092
- C:\Windows\System\bFhLfWk.exe
  C:\Windows\System\bFhLfWk.exe
  2⤵
  PID:5108
- C:\Windows\System\DVMnIHU.exe
  C:\Windows\System\DVMnIHU.exe
  2⤵
  PID:4100
- C:\Windows\System\GPWZJtM.exe
  C:\Windows\System\GPWZJtM.exe
  2⤵
  PID:4180
- C:\Windows\System\tbdQBpV.exe
  C:\Windows\System\tbdQBpV.exe
  2⤵
  PID:4248
- C:\Windows\System\nQdsRMc.exe
  C:\Windows\System\nQdsRMc.exe
  2⤵
  PID:4296
- C:\Windows\System\QzObeiw.exe
  C:\Windows\System\QzObeiw.exe
  2⤵
  PID:3772
- C:\Windows\System\AakkHDK.exe
  C:\Windows\System\AakkHDK.exe
  2⤵
  PID:3156
- C:\Windows\System\auFxguf.exe
  C:\Windows\System\auFxguf.exe
  2⤵
  PID:3900
- C:\Windows\System\SndQegu.exe
  C:\Windows\System\SndQegu.exe
  2⤵
  PID:3456
- C:\Windows\System\jtoBkGh.exe
  C:\Windows\System\jtoBkGh.exe
  2⤵
  PID:4160
- C:\Windows\System\vuTYBQf.exe
  C:\Windows\System\vuTYBQf.exe
  2⤵
  PID:4308
- C:\Windows\System\jNrlmaY.exe
  C:\Windows\System\jNrlmaY.exe
  2⤵
  PID:1548
- C:\Windows\System\vBVuXCr.exe
  C:\Windows\System\vBVuXCr.exe
  2⤵
  PID:4120
- C:\Windows\System\dLwiKtp.exe
  C:\Windows\System\dLwiKtp.exe
  2⤵
  PID:4232
- C:\Windows\System\gKPHWAd.exe
  C:\Windows\System\gKPHWAd.exe
  2⤵
  PID:4312
- C:\Windows\System\ORbPwRz.exe
  C:\Windows\System\ORbPwRz.exe
  2⤵
  PID:4468
- C:\Windows\System\VYWbEtM.exe
  C:\Windows\System\VYWbEtM.exe
  2⤵
  PID:4508
- C:\Windows\System\aDWyDSx.exe
  C:\Windows\System\aDWyDSx.exe
  2⤵
  PID:4424
- C:\Windows\System\WeZlsJl.exe
  C:\Windows\System\WeZlsJl.exe
  2⤵
  PID:4604
- C:\Windows\System\xfugjxJ.exe
  C:\Windows\System\xfugjxJ.exe
  2⤵
  PID:4676
- C:\Windows\System\OpYBTID.exe
  C:\Windows\System\OpYBTID.exe
  2⤵
  PID:4756
- C:\Windows\System\RmhxzLd.exe
  C:\Windows\System\RmhxzLd.exe
  2⤵
  PID:4796
- C:\Windows\System\MzkadTb.exe
  C:\Windows\System\MzkadTb.exe
  2⤵
  PID:4804
- C:\Windows\System\zBujzRK.exe
  C:\Windows\System\zBujzRK.exe
  2⤵
  PID:4868
- C:\Windows\System\KFuHPvI.exe
  C:\Windows\System\KFuHPvI.exe
  2⤵
  PID:4908
- C:\Windows\System\VEUriat.exe
  C:\Windows\System\VEUriat.exe
  2⤵
  PID:4976
- C:\Windows\System\LnKDGoe.exe
  C:\Windows\System\LnKDGoe.exe
  2⤵
  PID:5020
- C:\Windows\System\zyvaLrw.exe
  C:\Windows\System\zyvaLrw.exe
  2⤵
  PID:5116
- C:\Windows\System\mJVvAbz.exe
  C:\Windows\System\mJVvAbz.exe
  2⤵
  PID:4220
- C:\Windows\System\dZGGeZW.exe
  C:\Windows\System\dZGGeZW.exe
  2⤵
  PID:4200
- C:\Windows\System\TXzrwBr.exe
  C:\Windows\System\TXzrwBr.exe
  2⤵
  PID:3436
- C:\Windows\System\shmLqKV.exe
  C:\Windows\System\shmLqKV.exe
  2⤵
  PID:4164
- C:\Windows\System\LFFsvDV.exe
  C:\Windows\System\LFFsvDV.exe
  2⤵
  PID:4888
- C:\Windows\System\EdKofFU.exe
  C:\Windows\System\EdKofFU.exe
  2⤵
  PID:4640
- C:\Windows\System\gJbigjQ.exe
  C:\Windows\System\gJbigjQ.exe
  2⤵
  PID:4528
- C:\Windows\System\tJyGdkK.exe
  C:\Windows\System\tJyGdkK.exe
  2⤵
  PID:5084
- C:\Windows\System\VtdJYRW.exe
  C:\Windows\System\VtdJYRW.exe
  2⤵
  PID:4332
- C:\Windows\System\APBjYfx.exe
  C:\Windows\System\APBjYfx.exe
  2⤵
  PID:4392
- C:\Windows\System\plNgxWk.exe
  C:\Windows\System\plNgxWk.exe
  2⤵
  PID:4144
- C:\Windows\System\ELvYyfC.exe
  C:\Windows\System\ELvYyfC.exe
  2⤵
  PID:4376
- C:\Windows\System\uPzKjcB.exe
  C:\Windows\System\uPzKjcB.exe
  2⤵
  PID:4440
- C:\Windows\System\tjXjqvp.exe
  C:\Windows\System\tjXjqvp.exe
  2⤵
  PID:4484
- C:\Windows\System\NbUVfdc.exe
  C:\Windows\System\NbUVfdc.exe
  2⤵
  PID:3920
- C:\Windows\System\ckHpbOC.exe
  C:\Windows\System\ckHpbOC.exe
  2⤵
  PID:4540
- C:\Windows\System\TKqyLYp.exe
  C:\Windows\System\TKqyLYp.exe
  2⤵
  PID:4256
- C:\Windows\System\ctUjMLp.exe
  C:\Windows\System\ctUjMLp.exe
  2⤵
  PID:4664
- C:\Windows\System\ItDsphh.exe
  C:\Windows\System\ItDsphh.exe
  2⤵
  PID:3992
- C:\Windows\System\YnioRFu.exe
  C:\Windows\System\YnioRFu.exe
  2⤵
  PID:5132
- C:\Windows\System\rWQnbrl.exe
  C:\Windows\System\rWQnbrl.exe
  2⤵
  PID:5148
- C:\Windows\System\vatIZSr.exe
  C:\Windows\System\vatIZSr.exe
  2⤵
  PID:5224
- C:\Windows\System\IxZtGoK.exe
  C:\Windows\System\IxZtGoK.exe
  2⤵
  PID:5240
- C:\Windows\System\WTneruM.exe
  C:\Windows\System\WTneruM.exe
  2⤵
  PID:5256
- C:\Windows\System\gKKpHkN.exe
  C:\Windows\System\gKKpHkN.exe
  2⤵
  PID:5276
- C:\Windows\System\CAQrDgR.exe
  C:\Windows\System\CAQrDgR.exe
  2⤵
  PID:5300
- C:\Windows\System\UtGrDbQ.exe
  C:\Windows\System\UtGrDbQ.exe
  2⤵
  PID:5316
- C:\Windows\System\PhXszon.exe
  C:\Windows\System\PhXszon.exe
  2⤵
  PID:5340
- C:\Windows\System\hjHnIwN.exe
  C:\Windows\System\hjHnIwN.exe
  2⤵
  PID:5356
- C:\Windows\System\TGoRwAo.exe
  C:\Windows\System\TGoRwAo.exe
  2⤵
  PID:5372
- C:\Windows\System\ZjSuUYc.exe
  C:\Windows\System\ZjSuUYc.exe
  2⤵
  PID:5388
- C:\Windows\System\sCLqsaL.exe
  C:\Windows\System\sCLqsaL.exe
  2⤵
  PID:5404
- C:\Windows\System\LgPWBho.exe
  C:\Windows\System\LgPWBho.exe
  2⤵
  PID:5420
- C:\Windows\System\nBSewEk.exe
  C:\Windows\System\nBSewEk.exe
  2⤵
  PID:5436
- C:\Windows\System\UuSdlQs.exe
  C:\Windows\System\UuSdlQs.exe
  2⤵
  PID:5460
- C:\Windows\System\KiVxeLA.exe
  C:\Windows\System\KiVxeLA.exe
  2⤵
  PID:5488
- C:\Windows\System\RFDeYyR.exe
  C:\Windows\System\RFDeYyR.exe
  2⤵
  PID:5504
- C:\Windows\System\lgeNPES.exe
  C:\Windows\System\lgeNPES.exe
  2⤵
  PID:5520
- C:\Windows\System\zPflzIn.exe
  C:\Windows\System\zPflzIn.exe
  2⤵
  PID:5536
- C:\Windows\System\ViOjSuL.exe
  C:\Windows\System\ViOjSuL.exe
  2⤵
  PID:5552
- C:\Windows\System\ekMqoiP.exe
  C:\Windows\System\ekMqoiP.exe
  2⤵
  PID:5568
- C:\Windows\System\HLdICtU.exe
  C:\Windows\System\HLdICtU.exe
  2⤵
  PID:5588
- C:\Windows\System\lmdTTFC.exe
  C:\Windows\System\lmdTTFC.exe
  2⤵
  PID:5608
- C:\Windows\System\UxjODrf.exe
  C:\Windows\System\UxjODrf.exe
  2⤵
  PID:5640
- C:\Windows\System\kltMaFe.exe
  C:\Windows\System\kltMaFe.exe
  2⤵
  PID:5668
- C:\Windows\System\kHVKqKw.exe
  C:\Windows\System\kHVKqKw.exe
  2⤵
  PID:5684
- C:\Windows\System\wxZmSFe.exe
  C:\Windows\System\wxZmSFe.exe
  2⤵
  PID:5700
- C:\Windows\System\MSxKXPC.exe
  C:\Windows\System\MSxKXPC.exe
  2⤵
  PID:5720
- C:\Windows\System\zdkcTCJ.exe
  C:\Windows\System\zdkcTCJ.exe
  2⤵
  PID:5744
- C:\Windows\System\bQEjCcB.exe
  C:\Windows\System\bQEjCcB.exe
  2⤵
  PID:5760
- C:\Windows\System\zYGxRvZ.exe
  C:\Windows\System\zYGxRvZ.exe
  2⤵
  PID:5776
- C:\Windows\System\ERNrwyO.exe
  C:\Windows\System\ERNrwyO.exe
  2⤵
  PID:5828
- C:\Windows\System\GqWiwev.exe
  C:\Windows\System\GqWiwev.exe
  2⤵
  PID:5844
- C:\Windows\System\RIQYaVH.exe
  C:\Windows\System\RIQYaVH.exe
  2⤵
  PID:5860
- C:\Windows\System\IXixrYV.exe
  C:\Windows\System\IXixrYV.exe
  2⤵
  PID:5876
- C:\Windows\System\oKUhevR.exe
  C:\Windows\System\oKUhevR.exe
  2⤵
  PID:5908
- C:\Windows\System\UbMKFdV.exe
  C:\Windows\System\UbMKFdV.exe
  2⤵
  PID:5924
- C:\Windows\System\IvnIYJZ.exe
  C:\Windows\System\IvnIYJZ.exe
  2⤵
  PID:5940
- C:\Windows\System\BepKDyX.exe
  C:\Windows\System\BepKDyX.exe
  2⤵
  PID:5956
- C:\Windows\System\WIESQcY.exe
  C:\Windows\System\WIESQcY.exe
  2⤵
  PID:5988
- C:\Windows\System\JQGHxtN.exe
  C:\Windows\System\JQGHxtN.exe
  2⤵
  PID:6012
- C:\Windows\System\LqJHRhR.exe
  C:\Windows\System\LqJHRhR.exe
  2⤵
  PID:6028
- C:\Windows\System\lnttBmy.exe
  C:\Windows\System\lnttBmy.exe
  2⤵
  PID:6064
- C:\Windows\System\qKLPGFc.exe
  C:\Windows\System\qKLPGFc.exe
  2⤵
  PID:6080
- C:\Windows\System\gNkXyJe.exe
  C:\Windows\System\gNkXyJe.exe
  2⤵
  PID:6096
- C:\Windows\System\UYmSMYD.exe
  C:\Windows\System\UYmSMYD.exe
  2⤵
  PID:6116
- C:\Windows\System\vlDfVCk.exe
  C:\Windows\System\vlDfVCk.exe
  2⤵
  PID:5008
- C:\Windows\System\fsznSIB.exe
  C:\Windows\System\fsznSIB.exe
  2⤵
  PID:4216
- C:\Windows\System\jzkanTH.exe
  C:\Windows\System\jzkanTH.exe
  2⤵
  PID:4928
- C:\Windows\System\JgJyaLk.exe
  C:\Windows\System\JgJyaLk.exe
  2⤵
  PID:4852
- C:\Windows\System\ReCPKwW.exe
  C:\Windows\System\ReCPKwW.exe
  2⤵
  PID:4892
- C:\Windows\System\ttRDyeA.exe
  C:\Windows\System\ttRDyeA.exe
  2⤵
  PID:5072
- C:\Windows\System\zxJvHgE.exe
  C:\Windows\System\zxJvHgE.exe
  2⤵
  PID:5156
- C:\Windows\System\xuDfAlf.exe
  C:\Windows\System\xuDfAlf.exe
  2⤵
  PID:5176
- C:\Windows\System\RooXZwf.exe
  C:\Windows\System\RooXZwf.exe
  2⤵
  PID:5192
- C:\Windows\System\CTgAiOP.exe
  C:\Windows\System\CTgAiOP.exe
  2⤵
  PID:4660
- C:\Windows\System\Emtjwoh.exe
  C:\Windows\System\Emtjwoh.exe
  2⤵
  PID:4700
- C:\Windows\System\PqrLmdA.exe
  C:\Windows\System\PqrLmdA.exe
  2⤵
  PID:2320
- C:\Windows\System\XAvWfJo.exe
  C:\Windows\System\XAvWfJo.exe
  2⤵
  PID:4412
- C:\Windows\System\zEyAzfZ.exe
  C:\Windows\System\zEyAzfZ.exe
  2⤵
  PID:3040
- C:\Windows\System\oLYSBfH.exe
  C:\Windows\System\oLYSBfH.exe
  2⤵
  PID:4316
- C:\Windows\System\CbiRVod.exe
  C:\Windows\System\CbiRVod.exe
  2⤵
  PID:4924
- C:\Windows\System\MdBQGPB.exe
  C:\Windows\System\MdBQGPB.exe
  2⤵
  PID:4712
- C:\Windows\System\iHJsdeU.exe
  C:\Windows\System\iHJsdeU.exe
  2⤵
  PID:4488
- C:\Windows\System\pvtVigt.exe
  C:\Windows\System\pvtVigt.exe
  2⤵
  PID:4552
- C:\Windows\System\MDQGIhM.exe
  C:\Windows\System\MDQGIhM.exe
  2⤵
  PID:4800
- C:\Windows\System\eDNhaBW.exe
  C:\Windows\System\eDNhaBW.exe
  2⤵
  PID:4536
- C:\Windows\System\lOjAXpY.exe
  C:\Windows\System\lOjAXpY.exe
  2⤵
  PID:5216
- C:\Windows\System\FXMuxNR.exe
  C:\Windows\System\FXMuxNR.exe
  2⤵
  PID:4532
- C:\Windows\System\ybKFOiq.exe
  C:\Windows\System\ybKFOiq.exe
  2⤵
  PID:4836
- C:\Windows\System\sjNzoPv.exe
  C:\Windows\System\sjNzoPv.exe
  2⤵
  PID:5284
- C:\Windows\System\LZUFlyd.exe
  C:\Windows\System\LZUFlyd.exe
  2⤵
  PID:5288
- C:\Windows\System\sPBIvst.exe
  C:\Windows\System\sPBIvst.exe
  2⤵
  PID:5272
- C:\Windows\System\yCAnNBk.exe
  C:\Windows\System\yCAnNBk.exe
  2⤵
  PID:5308
- C:\Windows\System\ZLRTati.exe
  C:\Windows\System\ZLRTati.exe
  2⤵
  PID:5384
- C:\Windows\System\FMTaKEJ.exe
  C:\Windows\System\FMTaKEJ.exe
  2⤵
  PID:5396
- C:\Windows\System\ZEWYECf.exe
  C:\Windows\System\ZEWYECf.exe
  2⤵
  PID:5412
- C:\Windows\System\XsYLWpY.exe
  C:\Windows\System\XsYLWpY.exe
  2⤵
  PID:5512
- C:\Windows\System\RNhkkoG.exe
  C:\Windows\System\RNhkkoG.exe
  2⤵
  PID:5516
- C:\Windows\System\YsUajyS.exe
  C:\Windows\System\YsUajyS.exe
  2⤵
  PID:5416
- C:\Windows\System\shDveNo.exe
  C:\Windows\System\shDveNo.exe
  2⤵
  PID:5620
- C:\Windows\System\QKvyFnN.exe
  C:\Windows\System\QKvyFnN.exe
  2⤵
  PID:5680
- C:\Windows\System\YVdjyTR.exe
  C:\Windows\System\YVdjyTR.exe
  2⤵
  PID:5528
- C:\Windows\System\RfbpHFs.exe
  C:\Windows\System\RfbpHFs.exe
  2⤵
  PID:5652
- C:\Windows\System\sMOkaez.exe
  C:\Windows\System\sMOkaez.exe
  2⤵
  PID:5692
- C:\Windows\System\lAMDwcD.exe
  C:\Windows\System\lAMDwcD.exe
  2⤵
  PID:5752
- C:\Windows\System\ABNGDwX.exe
  C:\Windows\System\ABNGDwX.exe
  2⤵
  PID:5804
- C:\Windows\System\XvmgxVF.exe
  C:\Windows\System\XvmgxVF.exe
  2⤵
  PID:5820
- C:\Windows\System\REVDMut.exe
  C:\Windows\System\REVDMut.exe
  2⤵
  PID:5788
- C:\Windows\System\rwMkfnk.exe
  C:\Windows\System\rwMkfnk.exe
  2⤵
  PID:5856
- C:\Windows\System\YMgJRRr.exe
  C:\Windows\System\YMgJRRr.exe
  2⤵
  PID:5904
- C:\Windows\System\hNdkeIH.exe
  C:\Windows\System\hNdkeIH.exe
  2⤵
  PID:5972
- C:\Windows\System\gniCaLM.exe
  C:\Windows\System\gniCaLM.exe
  2⤵
  PID:5916
- C:\Windows\System\NGoSEvM.exe
  C:\Windows\System\NGoSEvM.exe
  2⤵
  PID:6112
- C:\Windows\System\ohAAsIK.exe
  C:\Windows\System\ohAAsIK.exe
  2⤵
  PID:6132
- C:\Windows\System\hVNTvcD.exe
  C:\Windows\System\hVNTvcD.exe
  2⤵
  PID:4336
- C:\Windows\System\eZfMZmM.exe
  C:\Windows\System\eZfMZmM.exe
  2⤵
  PID:4740
- C:\Windows\System\dlxeRMe.exe
  C:\Windows\System\dlxeRMe.exe
  2⤵
  PID:4940
- C:\Windows\System\tqsWvGY.exe
  C:\Windows\System\tqsWvGY.exe
  2⤵
  PID:5168
- C:\Windows\System\rqcgrYM.exe
  C:\Windows\System\rqcgrYM.exe
  2⤵
  PID:4696
- C:\Windows\System\AEkoGYT.exe
  C:\Windows\System\AEkoGYT.exe
  2⤵
  PID:3812
- C:\Windows\System\yEuKuaw.exe
  C:\Windows\System\yEuKuaw.exe
  2⤵
  PID:3904
- C:\Windows\System\QcByoqA.exe
  C:\Windows\System\QcByoqA.exe
  2⤵
  PID:4820
- C:\Windows\System\TuAhcYG.exe
  C:\Windows\System\TuAhcYG.exe
  2⤵
  PID:5212
- C:\Windows\System\LNzZpRI.exe
  C:\Windows\System\LNzZpRI.exe
  2⤵
  PID:5328
- C:\Windows\System\fiFaIUt.exe
  C:\Windows\System\fiFaIUt.exe
  2⤵
  PID:5364
- C:\Windows\System\rhgyeud.exe
  C:\Windows\System\rhgyeud.exe
  2⤵
  PID:5576
- C:\Windows\System\hTkaTqa.exe
  C:\Windows\System\hTkaTqa.exe
  2⤵
  PID:5676
- C:\Windows\System\fTrjvYN.exe
  C:\Windows\System\fTrjvYN.exe
  2⤵
  PID:3940
- C:\Windows\System\vTvAfuK.exe
  C:\Windows\System\vTvAfuK.exe
  2⤵
  PID:5648
- C:\Windows\System\tOtLZhS.exe
  C:\Windows\System\tOtLZhS.exe
  2⤵
  PID:5816
- C:\Windows\System\cKTUbwa.exe
  C:\Windows\System\cKTUbwa.exe
  2⤵
  PID:5964
- C:\Windows\System\POIGJOw.exe
  C:\Windows\System\POIGJOw.exe
  2⤵
  PID:5948
- C:\Windows\System\btETDvp.exe
  C:\Windows\System\btETDvp.exe
  2⤵
  PID:6056
- C:\Windows\System\uIKauUU.exe
  C:\Windows\System\uIKauUU.exe
  2⤵
  PID:6060
- C:\Windows\System\BegBNLb.exe
  C:\Windows\System\BegBNLb.exe
  2⤵
  PID:6092
- C:\Windows\System\TxcVWoG.exe
  C:\Windows\System\TxcVWoG.exe
  2⤵
  PID:5484
- C:\Windows\System\FVXpIkL.exe
  C:\Windows\System\FVXpIkL.exe
  2⤵
  PID:5708
- C:\Windows\System\KrdKRYi.exe
  C:\Windows\System\KrdKRYi.exe
  2⤵
  PID:4436
- C:\Windows\System\izXDGmR.exe
  C:\Windows\System\izXDGmR.exe
  2⤵
  PID:4428
- C:\Windows\System\FRnTHmb.exe
  C:\Windows\System\FRnTHmb.exe
  2⤵
  PID:4656
- C:\Windows\System\OpuLBJc.exe
  C:\Windows\System\OpuLBJc.exe
  2⤵
  PID:5872
- C:\Windows\System\laJUkpf.exe
  C:\Windows\System\laJUkpf.exe
  2⤵
  PID:6104
- C:\Windows\System\WtCmAzM.exe
  C:\Windows\System\WtCmAzM.exe
  2⤵
  PID:6136
- C:\Windows\System\joWaCGe.exe
  C:\Windows\System\joWaCGe.exe
  2⤵
  PID:4960
- C:\Windows\System\IVdZIxn.exe
  C:\Windows\System\IVdZIxn.exe
  2⤵
  PID:4996
- C:\Windows\System\dcGtWKS.exe
  C:\Windows\System\dcGtWKS.exe
  2⤵
  PID:5068
- C:\Windows\System\VqKzYxq.exe
  C:\Windows\System\VqKzYxq.exe
  2⤵
  PID:4516
- C:\Windows\System\HEKWiPE.exe
  C:\Windows\System\HEKWiPE.exe
  2⤵
  PID:5636
- C:\Windows\System\zrihPGR.exe
  C:\Windows\System\zrihPGR.exe
  2⤵
  PID:4732
- C:\Windows\System\nmJoDQc.exe
  C:\Windows\System\nmJoDQc.exe
  2⤵
  PID:5840
- C:\Windows\System\cvNAdwu.exe
  C:\Windows\System\cvNAdwu.exe
  2⤵
  PID:5952
- C:\Windows\System\sgJzeMy.exe
  C:\Windows\System\sgJzeMy.exe
  2⤵
  PID:5204
- C:\Windows\System\HfFOjim.exe
  C:\Windows\System\HfFOjim.exe
  2⤵
  PID:5740
- C:\Windows\System\yYavtvu.exe
  C:\Windows\System\yYavtvu.exe
  2⤵
  PID:6072
- C:\Windows\System\EFMvHgc.exe
  C:\Windows\System\EFMvHgc.exe
  2⤵
  PID:5996
- C:\Windows\System\yfwLrWg.exe
  C:\Windows\System\yfwLrWg.exe
  2⤵
  PID:5432
- C:\Windows\System\jUYVamJ.exe
  C:\Windows\System\jUYVamJ.exe
  2⤵
  PID:5624
- C:\Windows\System\AviiROK.exe
  C:\Windows\System\AviiROK.exe
  2⤵
  PID:5868
- C:\Windows\System\CLEFaJh.exe
  C:\Windows\System\CLEFaJh.exe
  2⤵
  PID:4512
- C:\Windows\System\JQwiMob.exe
  C:\Windows\System\JQwiMob.exe
  2⤵
  PID:4992
- C:\Windows\System\pwzGSda.exe
  C:\Windows\System\pwzGSda.exe
  2⤵
  PID:5716
- C:\Windows\System\UwHWOBE.exe
  C:\Windows\System\UwHWOBE.exe
  2⤵
  PID:2596
- C:\Windows\System\XiFKziI.exe
  C:\Windows\System\XiFKziI.exe
  2⤵
  PID:4408
- C:\Windows\System\WHPKvAf.exe
  C:\Windows\System\WHPKvAf.exe
  2⤵
  PID:5796
- C:\Windows\System\eaDIefA.exe
  C:\Windows\System\eaDIefA.exe
  2⤵
  PID:5128
- C:\Windows\System\ULfYmYG.exe
  C:\Windows\System\ULfYmYG.exe
  2⤵
  PID:5604
- C:\Windows\System\xFAgrjP.exe
  C:\Windows\System\xFAgrjP.exe
  2⤵
  PID:5336
- C:\Windows\System\Srimpiw.exe
  C:\Windows\System\Srimpiw.exe
  2⤵
  PID:4444
- C:\Windows\System\DWkMkFx.exe
  C:\Windows\System\DWkMkFx.exe
  2⤵
  PID:5324
- C:\Windows\System\gnEZrMw.exe
  C:\Windows\System\gnEZrMw.exe
  2⤵
  PID:4280
- C:\Windows\System\swJtTjr.exe
  C:\Windows\System\swJtTjr.exe
  2⤵
  PID:6024
- C:\Windows\System\WBmrkCa.exe
  C:\Windows\System\WBmrkCa.exe
  2⤵
  PID:5040
- C:\Windows\System\HgHuHBw.exe
  C:\Windows\System\HgHuHBw.exe
  2⤵
  PID:5296
- C:\Windows\System\HFzvxkf.exe
  C:\Windows\System\HFzvxkf.exe
  2⤵
  PID:4548
- C:\Windows\System\pspJmXH.exe
  C:\Windows\System\pspJmXH.exe
  2⤵
  PID:6156
- C:\Windows\System\whrwpdz.exe
  C:\Windows\System\whrwpdz.exe
  2⤵
  PID:6172
- C:\Windows\System\XNhnoth.exe
  C:\Windows\System\XNhnoth.exe
  2⤵
  PID:6192
- C:\Windows\System\rZouyFj.exe
  C:\Windows\System\rZouyFj.exe
  2⤵
  PID:6212
- C:\Windows\System\LfgGuwD.exe
  C:\Windows\System\LfgGuwD.exe
  2⤵
  PID:6236
- C:\Windows\System\WZYIAtk.exe
  C:\Windows\System\WZYIAtk.exe
  2⤵
  PID:6252
- C:\Windows\System\mBMJDpp.exe
  C:\Windows\System\mBMJDpp.exe
  2⤵
  PID:6268
- C:\Windows\System\HJvqxXa.exe
  C:\Windows\System\HJvqxXa.exe
  2⤵
  PID:6304
- C:\Windows\System\KuXZOFK.exe
  C:\Windows\System\KuXZOFK.exe
  2⤵
  PID:6324
- C:\Windows\System\JDKFgbG.exe
  C:\Windows\System\JDKFgbG.exe
  2⤵
  PID:6340
- C:\Windows\System\YmRFGKl.exe
  C:\Windows\System\YmRFGKl.exe
  2⤵
  PID:6372
- C:\Windows\System\BVceInF.exe
  C:\Windows\System\BVceInF.exe
  2⤵
  PID:6392
- C:\Windows\System\WzrBwJx.exe
  C:\Windows\System\WzrBwJx.exe
  2⤵
  PID:6408
- C:\Windows\System\tWIJalq.exe
  C:\Windows\System\tWIJalq.exe
  2⤵
  PID:6424
- C:\Windows\System\JGQyXIz.exe
  C:\Windows\System\JGQyXIz.exe
  2⤵
  PID:6456
- C:\Windows\System\BcFkwuy.exe
  C:\Windows\System\BcFkwuy.exe
  2⤵
  PID:6472
- C:\Windows\System\bohvOPo.exe
  C:\Windows\System\bohvOPo.exe
  2⤵
  PID:6496
- C:\Windows\System\wIwfANR.exe
  C:\Windows\System\wIwfANR.exe
  2⤵
  PID:6520
- C:\Windows\System\SnQxUQw.exe
  C:\Windows\System\SnQxUQw.exe
  2⤵
  PID:6536
- C:\Windows\System\lLWUZAw.exe
  C:\Windows\System\lLWUZAw.exe
  2⤵
  PID:6556
- C:\Windows\System\ygSVzkr.exe
  C:\Windows\System\ygSVzkr.exe
  2⤵
  PID:6588
- C:\Windows\System\bTosMsA.exe
  C:\Windows\System\bTosMsA.exe
  2⤵
  PID:6604
- C:\Windows\System\bqFNhHn.exe
  C:\Windows\System\bqFNhHn.exe
  2⤵
  PID:6620
- C:\Windows\System\eOrsrXw.exe
  C:\Windows\System\eOrsrXw.exe
  2⤵
  PID:6636
- C:\Windows\System\wckaRbu.exe
  C:\Windows\System\wckaRbu.exe
  2⤵
  PID:6652
- C:\Windows\System\xbyrggR.exe
  C:\Windows\System\xbyrggR.exe
  2⤵
  PID:6668
- C:\Windows\System\lOPxXhu.exe
  C:\Windows\System\lOPxXhu.exe
  2⤵
  PID:6684
- C:\Windows\System\yRFtxYS.exe
  C:\Windows\System\yRFtxYS.exe
  2⤵
  PID:6708
- C:\Windows\System\ESYXaQb.exe
  C:\Windows\System\ESYXaQb.exe
  2⤵
  PID:6728
- C:\Windows\System\yiDNokT.exe
  C:\Windows\System\yiDNokT.exe
  2⤵
  PID:6744
- C:\Windows\System\LyHCHmg.exe
  C:\Windows\System\LyHCHmg.exe
  2⤵
  PID:6764
- C:\Windows\System\mtVhTkw.exe
  C:\Windows\System\mtVhTkw.exe
  2⤵
  PID:6784
- C:\Windows\System\IrmyreZ.exe
  C:\Windows\System\IrmyreZ.exe
  2⤵
  PID:6800
- C:\Windows\System\vPZinzB.exe
  C:\Windows\System\vPZinzB.exe
  2⤵
  PID:6816
- C:\Windows\System\uNdXAwD.exe
  C:\Windows\System\uNdXAwD.exe
  2⤵
  PID:6832
- C:\Windows\System\AuWhiqc.exe
  C:\Windows\System\AuWhiqc.exe
  2⤵
  PID:6848
- C:\Windows\System\GEWvbBp.exe
  C:\Windows\System\GEWvbBp.exe
  2⤵
  PID:6864
- C:\Windows\System\dXnlvyp.exe
  C:\Windows\System\dXnlvyp.exe
  2⤵
  PID:6880
- C:\Windows\System\bSncJjz.exe
  C:\Windows\System\bSncJjz.exe
  2⤵
  PID:6944
- C:\Windows\System\UHiZKrl.exe
  C:\Windows\System\UHiZKrl.exe
  2⤵
  PID:6960
- C:\Windows\System\mQnTVug.exe
  C:\Windows\System\mQnTVug.exe
  2⤵
  PID:6976
- C:\Windows\System\QTwpjtX.exe
  C:\Windows\System\QTwpjtX.exe
  2⤵
  PID:6992
- C:\Windows\System\OYgcmCF.exe
  C:\Windows\System\OYgcmCF.exe
  2⤵
  PID:7008
- C:\Windows\System\mdCsilW.exe
  C:\Windows\System\mdCsilW.exe
  2⤵
  PID:7024
- C:\Windows\System\DkKENMn.exe
  C:\Windows\System\DkKENMn.exe
  2⤵
  PID:7044
- C:\Windows\System\cVjlRjt.exe
  C:\Windows\System\cVjlRjt.exe
  2⤵
  PID:7064
- C:\Windows\System\tBOjbBn.exe
  C:\Windows\System\tBOjbBn.exe
  2⤵
  PID:7088
- C:\Windows\System\Etyvvdx.exe
  C:\Windows\System\Etyvvdx.exe
  2⤵
  PID:7104
- C:\Windows\System\GHWBslL.exe
  C:\Windows\System\GHWBslL.exe
  2⤵
  PID:7148
- C:\Windows\System\PvwlOng.exe
  C:\Windows\System\PvwlOng.exe
  2⤵
  PID:7164
- C:\Windows\System\cZzEIUj.exe
  C:\Windows\System\cZzEIUj.exe
  2⤵
  PID:4584
- C:\Windows\System\lWjZUju.exe
  C:\Windows\System\lWjZUju.exe
  2⤵
  PID:6184
- C:\Windows\System\Nrhjnjs.exe
  C:\Windows\System\Nrhjnjs.exe
  2⤵
  PID:4116
- C:\Windows\System\vuInZRU.exe
  C:\Windows\System\vuInZRU.exe
  2⤵
  PID:6260
- C:\Windows\System\MzBCzfk.exe
  C:\Windows\System\MzBCzfk.exe
  2⤵
  PID:5812
- C:\Windows\System\UWmWlBa.exe
  C:\Windows\System\UWmWlBa.exe
  2⤵
  PID:6316
- C:\Windows\System\wHuiIFB.exe
  C:\Windows\System\wHuiIFB.exe
  2⤵
  PID:4792
- C:\Windows\System\LFpVTnt.exe
  C:\Windows\System\LFpVTnt.exe
  2⤵
  PID:6248
- C:\Windows\System\tBULFOF.exe
  C:\Windows\System\tBULFOF.exe
  2⤵
  PID:6404
- C:\Windows\System\SYhtPpq.exe
  C:\Windows\System\SYhtPpq.exe
  2⤵
  PID:5100
- C:\Windows\System\XhVjEDp.exe
  C:\Windows\System\XhVjEDp.exe
  2⤵
  PID:5736
- C:\Windows\System\zewaeWy.exe
  C:\Windows\System\zewaeWy.exe
  2⤵
  PID:6280
- C:\Windows\System\ovXcoMd.exe
  C:\Windows\System\ovXcoMd.exe
  2⤵
  PID:6380
- C:\Windows\System\LTDvOzF.exe
  C:\Windows\System\LTDvOzF.exe
  2⤵
  PID:6420
- C:\Windows\System\lxpYgyN.exe
  C:\Windows\System\lxpYgyN.exe
  2⤵
  PID:6480
- C:\Windows\System\gauzEwu.exe
  C:\Windows\System\gauzEwu.exe
  2⤵
  PID:6532
- C:\Windows\System\dpPOlGd.exe
  C:\Windows\System\dpPOlGd.exe
  2⤵
  PID:6516
- C:\Windows\System\rFvZrQB.exe
  C:\Windows\System\rFvZrQB.exe
  2⤵
  PID:6568
- C:\Windows\System\GRtulEZ.exe
  C:\Windows\System\GRtulEZ.exe
  2⤵
  PID:6468
- C:\Windows\System\tuOJQvn.exe
  C:\Windows\System\tuOJQvn.exe
  2⤵
  PID:6648
- C:\Windows\System\dDOMpkK.exe
  C:\Windows\System\dDOMpkK.exe
  2⤵
  PID:6720
- C:\Windows\System\UCaItQe.exe
  C:\Windows\System\UCaItQe.exe
  2⤵
  PID:6760
- C:\Windows\System\AYYRqoL.exe
  C:\Windows\System\AYYRqoL.exe
  2⤵
  PID:6796
- C:\Windows\System\MGnTNkp.exe
  C:\Windows\System\MGnTNkp.exe
  2⤵
  PID:6900
- C:\Windows\System\qWgPoKd.exe
  C:\Windows\System\qWgPoKd.exe
  2⤵
  PID:6792
- C:\Windows\System\wthvpiP.exe
  C:\Windows\System\wthvpiP.exe
  2⤵
  PID:6928
- C:\Windows\System\mjBJvUR.exe
  C:\Windows\System\mjBJvUR.exe
  2⤵
  PID:6808
- C:\Windows\System\HtRDtoL.exe
  C:\Windows\System\HtRDtoL.exe
  2⤵
  PID:6932
- C:\Windows\System\wlOOluN.exe
  C:\Windows\System\wlOOluN.exe
  2⤵
  PID:6696
- C:\Windows\System\yMKoUVr.exe
  C:\Windows\System\yMKoUVr.exe
  2⤵
  PID:6772
- C:\Windows\System\ZnCKaKM.exe
  C:\Windows\System\ZnCKaKM.exe
  2⤵
  PID:6972
- C:\Windows\System\uFIzhLO.exe
  C:\Windows\System\uFIzhLO.exe
  2⤵
  PID:7076
- C:\Windows\System\kFGfPIV.exe
  C:\Windows\System\kFGfPIV.exe
  2⤵
  PID:7120
- C:\Windows\System\XaiQNBf.exe
  C:\Windows\System\XaiQNBf.exe
  2⤵
  PID:7096
- C:\Windows\System\CgnSGKw.exe
  C:\Windows\System\CgnSGKw.exe
  2⤵
  PID:7132
- C:\Windows\System\mQmIZxq.exe
  C:\Windows\System\mQmIZxq.exe
  2⤵
  PID:6984
- C:\Windows\System\plYfKMx.exe
  C:\Windows\System\plYfKMx.exe
  2⤵
  PID:6228
- C:\Windows\System\iXUryRz.exe
  C:\Windows\System\iXUryRz.exe
  2⤵
  PID:7156
- C:\Windows\System\YrUFLqP.exe
  C:\Windows\System\YrUFLqP.exe
  2⤵
  PID:6220
- C:\Windows\System\odiyyeh.exe
  C:\Windows\System\odiyyeh.exe
  2⤵
  PID:6356
- C:\Windows\System\sgsvDZA.exe
  C:\Windows\System\sgsvDZA.exe
  2⤵
  PID:6400
- C:\Windows\System\eKwgwey.exe
  C:\Windows\System\eKwgwey.exe
  2⤵
  PID:6336
- C:\Windows\System\AEcOJeK.exe
  C:\Windows\System\AEcOJeK.exe
  2⤵
  PID:6300
- C:\Windows\System\OIbAyMH.exe
  C:\Windows\System\OIbAyMH.exe
  2⤵
  PID:5564
- C:\Windows\System\KnffFTN.exe
  C:\Windows\System\KnffFTN.exe
  2⤵
  PID:6484
- C:\Windows\System\nqxUHmI.exe
  C:\Windows\System\nqxUHmI.exe
  2⤵
  PID:6464
- C:\Windows\System\WOzQowg.exe
  C:\Windows\System\WOzQowg.exe
  2⤵
  PID:6692
- C:\Windows\System\lhMqsFR.exe
  C:\Windows\System\lhMqsFR.exe
  2⤵
  PID:6000
- C:\Windows\System\jqZvyCm.exe
  C:\Windows\System\jqZvyCm.exe
  2⤵
  PID:6908
- C:\Windows\System\FbMiBva.exe
  C:\Windows\System\FbMiBva.exe
  2⤵
  PID:6912
- C:\Windows\System\kVtPVyV.exe
  C:\Windows\System\kVtPVyV.exe
  2⤵
  PID:6664
- C:\Windows\System\aaFtewd.exe
  C:\Windows\System\aaFtewd.exe
  2⤵
  PID:7084
- C:\Windows\System\pVSWjqJ.exe
  C:\Windows\System\pVSWjqJ.exe
  2⤵
  PID:6180
- C:\Windows\System\dYTkDFI.exe
  C:\Windows\System\dYTkDFI.exe
  2⤵
  PID:5600
- C:\Windows\System\YHiHGDr.exe
  C:\Windows\System\YHiHGDr.exe
  2⤵
  PID:6920
- C:\Windows\System\pOeCkCN.exe
  C:\Windows\System\pOeCkCN.exe
  2⤵
  PID:7016
- C:\Windows\System\qqcJvNy.exe
  C:\Windows\System\qqcJvNy.exe
  2⤵
  PID:7036
- C:\Windows\System\rJwkisO.exe
  C:\Windows\System\rJwkisO.exe
  2⤵
  PID:7056
- C:\Windows\System\YavKmND.exe
  C:\Windows\System\YavKmND.exe
  2⤵
  PID:7060
- C:\Windows\System\lNLkFkd.exe
  C:\Windows\System\lNLkFkd.exe
  2⤵
  PID:6284
- C:\Windows\System\RqDljJN.exe
  C:\Windows\System\RqDljJN.exe
  2⤵
  PID:6124
- C:\Windows\System\nHsbeUT.exe
  C:\Windows\System\nHsbeUT.exe
  2⤵
  PID:6444
- C:\Windows\System\BdoDnAt.exe
  C:\Windows\System\BdoDnAt.exe
  2⤵
  PID:6580
- C:\Windows\System\uhvnRft.exe
  C:\Windows\System\uhvnRft.exe
  2⤵
  PID:6416
- C:\Windows\System\iTfYwSn.exe
  C:\Windows\System\iTfYwSn.exe
  2⤵
  PID:6548
- C:\Windows\System\XnOvxrq.exe
  C:\Windows\System\XnOvxrq.exe
  2⤵
  PID:6660
- C:\Windows\System\vbAUatA.exe
  C:\Windows\System\vbAUatA.exe
  2⤵
  PID:7116
- C:\Windows\System\oyNDsaX.exe
  C:\Windows\System\oyNDsaX.exe
  2⤵
  PID:7128
- C:\Windows\System\piWMwFJ.exe
  C:\Windows\System\piWMwFJ.exe
  2⤵
  PID:5184
- C:\Windows\System\InOnghY.exe
  C:\Windows\System\InOnghY.exe
  2⤵
  PID:6828
- C:\Windows\System\zPdqKSJ.exe
  C:\Windows\System\zPdqKSJ.exe
  2⤵
  PID:6148
- C:\Windows\System\trPDVWD.exe
  C:\Windows\System\trPDVWD.exe
  2⤵
  PID:6204
- C:\Windows\System\ueqsUiQ.exe
  C:\Windows\System\ueqsUiQ.exe
  2⤵
  PID:7040
- C:\Windows\System\yRxkmTZ.exe
  C:\Windows\System\yRxkmTZ.exe
  2⤵
  PID:7140
- C:\Windows\System\vYtdJEh.exe
  C:\Windows\System\vYtdJEh.exe
  2⤵
  PID:6512
- C:\Windows\System\DYWjVgx.exe
  C:\Windows\System\DYWjVgx.exe
  2⤵
  PID:6508
- C:\Windows\System\QmrCsIa.exe
  C:\Windows\System\QmrCsIa.exe
  2⤵
  PID:6740
- C:\Windows\System\FqotKgP.exe
  C:\Windows\System\FqotKgP.exe
  2⤵
  PID:6552
- C:\Windows\System\lbuxsIu.exe
  C:\Windows\System\lbuxsIu.exe
  2⤵
  PID:7172
- C:\Windows\System\nCrtuJu.exe
  C:\Windows\System\nCrtuJu.exe
  2⤵
  PID:7192
- C:\Windows\System\CvNjAeA.exe
  C:\Windows\System\CvNjAeA.exe
  2⤵
  PID:7208
- C:\Windows\System\IANIYDf.exe
  C:\Windows\System\IANIYDf.exe
  2⤵
  PID:7224
- C:\Windows\System\DWyqLSf.exe
  C:\Windows\System\DWyqLSf.exe
  2⤵
  PID:7244
- C:\Windows\System\AMZpeFY.exe
  C:\Windows\System\AMZpeFY.exe
  2⤵
  PID:7260
- C:\Windows\System\KRnHHbS.exe
  C:\Windows\System\KRnHHbS.exe
  2⤵
  PID:7284
- C:\Windows\System\ksCAKoI.exe
  C:\Windows\System\ksCAKoI.exe
  2⤵
  PID:7308
- C:\Windows\System\uwtakue.exe
  C:\Windows\System\uwtakue.exe
  2⤵
  PID:7336
- C:\Windows\System\IIaYxCJ.exe
  C:\Windows\System\IIaYxCJ.exe
  2⤵
  PID:7360
- C:\Windows\System\nXcjfBU.exe
  C:\Windows\System\nXcjfBU.exe
  2⤵
  PID:7380
- C:\Windows\System\oMIfxNK.exe
  C:\Windows\System\oMIfxNK.exe
  2⤵
  PID:7396
- C:\Windows\System\XLVIevm.exe
  C:\Windows\System\XLVIevm.exe
  2⤵
  PID:7420
- C:\Windows\System\IpIrhKu.exe
  C:\Windows\System\IpIrhKu.exe
  2⤵
  PID:7440
- C:\Windows\System\VPeHLgn.exe
  C:\Windows\System\VPeHLgn.exe
  2⤵
  PID:7456
- C:\Windows\System\GSbLykm.exe
  C:\Windows\System\GSbLykm.exe
  2⤵
  PID:7488
- C:\Windows\System\eTFcMha.exe
  C:\Windows\System\eTFcMha.exe
  2⤵
  PID:7508
- C:\Windows\System\ShekVJI.exe
  C:\Windows\System\ShekVJI.exe
  2⤵
  PID:7524
- C:\Windows\System\ynpkXsY.exe
  C:\Windows\System\ynpkXsY.exe
  2⤵
  PID:7540
- C:\Windows\System\CIMxorK.exe
  C:\Windows\System\CIMxorK.exe
  2⤵
  PID:7556
- C:\Windows\System\wMfzaVq.exe
  C:\Windows\System\wMfzaVq.exe
  2⤵
  PID:7572
- C:\Windows\System\JTLCXRL.exe
  C:\Windows\System\JTLCXRL.exe
  2⤵
  PID:7588
- C:\Windows\System\QoCJPTU.exe
  C:\Windows\System\QoCJPTU.exe
  2⤵
  PID:7604
- C:\Windows\System\xoehHbA.exe
  C:\Windows\System\xoehHbA.exe
  2⤵
  PID:7620
- C:\Windows\System\SQNCqor.exe
  C:\Windows\System\SQNCqor.exe
  2⤵
  PID:7636
- C:\Windows\System\tOJZTiN.exe
  C:\Windows\System\tOJZTiN.exe
  2⤵
  PID:7652
- C:\Windows\System\LbBLNMc.exe
  C:\Windows\System\LbBLNMc.exe
  2⤵
  PID:7668
- C:\Windows\System\haJkftz.exe
  C:\Windows\System\haJkftz.exe
  2⤵
  PID:7684
- C:\Windows\System\xNfqQSN.exe
  C:\Windows\System\xNfqQSN.exe
  2⤵
  PID:7708
- C:\Windows\System\zDPaGYF.exe
  C:\Windows\System\zDPaGYF.exe
  2⤵
  PID:7728
- C:\Windows\System\KTenXyf.exe
  C:\Windows\System\KTenXyf.exe
  2⤵
  PID:7744
- C:\Windows\System\AvidJju.exe
  C:\Windows\System\AvidJju.exe
  2⤵
  PID:7780
- C:\Windows\System\bCAsXGn.exe
  C:\Windows\System\bCAsXGn.exe
  2⤵
  PID:7812
- C:\Windows\System\AjVDMES.exe
  C:\Windows\System\AjVDMES.exe
  2⤵
  PID:7836
- C:\Windows\System\YgBJSUc.exe
  C:\Windows\System\YgBJSUc.exe
  2⤵
  PID:7900
- C:\Windows\System\MPRbIBs.exe
  C:\Windows\System\MPRbIBs.exe
  2⤵
  PID:7916
- C:\Windows\System\Uuffscq.exe
  C:\Windows\System\Uuffscq.exe
  2⤵
  PID:7936
- C:\Windows\System\PPoUrpw.exe
  C:\Windows\System\PPoUrpw.exe
  2⤵
  PID:7956
- C:\Windows\System\FaEJtOM.exe
  C:\Windows\System\FaEJtOM.exe
  2⤵
  PID:7972
- C:\Windows\System\xqtNlmm.exe
  C:\Windows\System\xqtNlmm.exe
  2⤵
  PID:7992
- C:\Windows\System\OTxShba.exe
  C:\Windows\System\OTxShba.exe
  2⤵
  PID:8012
- C:\Windows\System\lHisYIP.exe
  C:\Windows\System\lHisYIP.exe
  2⤵
  PID:8028
- C:\Windows\System\ddFEFMG.exe
  C:\Windows\System\ddFEFMG.exe
  2⤵
  PID:8048
- C:\Windows\System\acRZuwn.exe
  C:\Windows\System\acRZuwn.exe
  2⤵
  PID:8068
- C:\Windows\System\XDzAPvk.exe
  C:\Windows\System\XDzAPvk.exe
  2⤵
  PID:8084
- C:\Windows\System\zdAhyfr.exe
  C:\Windows\System\zdAhyfr.exe
  2⤵
  PID:8108
- C:\Windows\System\DOunfDA.exe
  C:\Windows\System\DOunfDA.exe
  2⤵
  PID:8124
- C:\Windows\System\BnyVSVv.exe
  C:\Windows\System\BnyVSVv.exe
  2⤵
  PID:8140
- C:\Windows\System\pruIHCJ.exe
  C:\Windows\System\pruIHCJ.exe
  2⤵
  PID:8160
- C:\Windows\System\WbFCjwO.exe
  C:\Windows\System\WbFCjwO.exe
  2⤵
  PID:8184
- C:\Windows\System\gKkttPS.exe
  C:\Windows\System\gKkttPS.exe
  2⤵
  PID:6940
- C:\Windows\System\fDQCKrR.exe
  C:\Windows\System\fDQCKrR.exe
  2⤵
  PID:6452
- C:\Windows\System\cOxtZcA.exe
  C:\Windows\System\cOxtZcA.exe
  2⤵
  PID:6276
- C:\Windows\System\ZbXoKyJ.exe
  C:\Windows\System\ZbXoKyJ.exe
  2⤵
  PID:5456
- C:\Windows\System\ngJGVEW.exe
  C:\Windows\System\ngJGVEW.exe
  2⤵
  PID:6208
- C:\Windows\System\HhuNWfV.exe
  C:\Windows\System\HhuNWfV.exe
  2⤵
  PID:7268
- C:\Windows\System\hQtYWqY.exe
  C:\Windows\System\hQtYWqY.exe
  2⤵
  PID:7316
- C:\Windows\System\BPXuWRu.exe
  C:\Windows\System\BPXuWRu.exe
  2⤵
  PID:7332
- C:\Windows\System\vgHTFJW.exe
  C:\Windows\System\vgHTFJW.exe
  2⤵
  PID:7372
- C:\Windows\System\DwgsQTE.exe
  C:\Windows\System\DwgsQTE.exe
  2⤵
  PID:7448
- C:\Windows\System\hHrnqLk.exe
  C:\Windows\System\hHrnqLk.exe
  2⤵
  PID:7500
- C:\Windows\System\XgFGKhS.exe
  C:\Windows\System\XgFGKhS.exe
  2⤵
  PID:7532
- C:\Windows\System\pXVcomI.exe
  C:\Windows\System\pXVcomI.exe
  2⤵
  PID:7632
- C:\Windows\System\wSdVXRK.exe
  C:\Windows\System\wSdVXRK.exe
  2⤵
  PID:6888
- C:\Windows\System\gqoExdy.exe
  C:\Windows\System\gqoExdy.exe
  2⤵
  PID:7468
- C:\Windows\System\bNYoAiv.exe
  C:\Windows\System\bNYoAiv.exe
  2⤵
  PID:7476
- C:\Windows\System\GhhuQpR.exe
  C:\Windows\System\GhhuQpR.exe
  2⤵
  PID:7584
- C:\Windows\System\DBFjtca.exe
  C:\Windows\System\DBFjtca.exe
  2⤵
  PID:7696
- C:\Windows\System\SuEyNgO.exe
  C:\Windows\System\SuEyNgO.exe
  2⤵
  PID:7740
- C:\Windows\System\zgofWtE.exe
  C:\Windows\System\zgofWtE.exe
  2⤵
  PID:7796
- C:\Windows\System\xjiuono.exe
  C:\Windows\System\xjiuono.exe
  2⤵
  PID:7648
- C:\Windows\System\czCCVWu.exe
  C:\Windows\System\czCCVWu.exe
  2⤵
  PID:7848
- C:\Windows\System\rciucEP.exe
  C:\Windows\System\rciucEP.exe
  2⤵
  PID:7868
- C:\Windows\System\CKceBha.exe
  C:\Windows\System\CKceBha.exe
  2⤵
  PID:7880
- C:\Windows\System\wBlZUWh.exe
  C:\Windows\System\wBlZUWh.exe
  2⤵
  PID:7892
- C:\Windows\System\lrPAsSJ.exe
  C:\Windows\System\lrPAsSJ.exe
  2⤵
  PID:7820
- C:\Windows\System\nVYgFob.exe
  C:\Windows\System\nVYgFob.exe
  2⤵
  PID:7896
- C:\Windows\System\lJnSDzw.exe
  C:\Windows\System\lJnSDzw.exe
  2⤵
  PID:7964
- C:\Windows\System\DVZzFIL.exe
  C:\Windows\System\DVZzFIL.exe
  2⤵
  PID:8004
- C:\Windows\System\DcmwyRr.exe
  C:\Windows\System\DcmwyRr.exe
  2⤵
  PID:8076
- C:\Windows\System\UdoocLM.exe
  C:\Windows\System\UdoocLM.exe
  2⤵
  PID:8120
- C:\Windows\System\jMzQhlC.exe
  C:\Windows\System\jMzQhlC.exe
  2⤵
  PID:6440
- C:\Windows\System\EDUvZzS.exe
  C:\Windows\System\EDUvZzS.exe
  2⤵
  PID:6168
- C:\Windows\System\SipODCv.exe
  C:\Windows\System\SipODCv.exe
  2⤵
  PID:7280
- C:\Windows\System\PeVgAoF.exe
  C:\Windows\System\PeVgAoF.exe
  2⤵
  PID:7368
- C:\Windows\System\sHubPUW.exe
  C:\Windows\System\sHubPUW.exe
  2⤵
  PID:7568
- C:\Windows\System\RijzLSL.exe
  C:\Windows\System\RijzLSL.exe
  2⤵
  PID:7436
- C:\Windows\System\caNcxrQ.exe
  C:\Windows\System\caNcxrQ.exe
  2⤵
  PID:7980
- C:\Windows\System\tZzVbKN.exe
  C:\Windows\System\tZzVbKN.exe
  2⤵
  PID:7552
- C:\Windows\System\oKLHAuu.exe
  C:\Windows\System\oKLHAuu.exe
  2⤵
  PID:8180
- C:\Windows\System\qrzNkbL.exe
  C:\Windows\System\qrzNkbL.exe
  2⤵
  PID:7616
- C:\Windows\System\ZFxcylE.exe
  C:\Windows\System\ZFxcylE.exe
  2⤵
  PID:7864
- C:\Windows\System\gWZyHHu.exe
  C:\Windows\System\gWZyHHu.exe
  2⤵
  PID:7356
- C:\Windows\System\ObgOHbN.exe
  C:\Windows\System\ObgOHbN.exe
  2⤵
  PID:7472
- C:\Windows\System\MmsLpaN.exe
  C:\Windows\System\MmsLpaN.exe
  2⤵
  PID:7388
- C:\Windows\System\canBtzD.exe
  C:\Windows\System\canBtzD.exe
  2⤵
  PID:7240
- C:\Windows\System\EweqHGo.exe
  C:\Windows\System\EweqHGo.exe
  2⤵
  PID:7188
- C:\Windows\System\pDYLkMj.exe
  C:\Windows\System\pDYLkMj.exe
  2⤵
  PID:7792
- C:\Windows\System\QzjqnFR.exe
  C:\Windows\System\QzjqnFR.exe
  2⤵
  PID:7876
- C:\Windows\System\oSsAPcU.exe
  C:\Windows\System\oSsAPcU.exe
  2⤵
  PID:7256
- C:\Windows\System\ytfQhjD.exe
  C:\Windows\System\ytfQhjD.exe
  2⤵
  PID:7752
- C:\Windows\System\AJwledJ.exe
  C:\Windows\System\AJwledJ.exe
  2⤵
  PID:7832
- C:\Windows\System\OPAwaLw.exe
  C:\Windows\System\OPAwaLw.exe
  2⤵
  PID:8000
- C:\Windows\System\JSUAADj.exe
  C:\Windows\System\JSUAADj.exe
  2⤵
  PID:7180
- C:\Windows\System\XUZqxer.exe
  C:\Windows\System\XUZqxer.exe
  2⤵
  PID:6448
- C:\Windows\System\ywCygsy.exe
  C:\Windows\System\ywCygsy.exe
  2⤵
  PID:7484
- C:\Windows\System\cGaBtxc.exe
  C:\Windows\System\cGaBtxc.exe
  2⤵
  PID:7952
- C:\Windows\System\eStdtCZ.exe
  C:\Windows\System\eStdtCZ.exe
  2⤵
  PID:8040
- C:\Windows\System\rTdiQWt.exe
  C:\Windows\System\rTdiQWt.exe
  2⤵
  PID:8168
- C:\Windows\System\TuBJdCV.exe
  C:\Windows\System\TuBJdCV.exe
  2⤵
  PID:8024
- C:\Windows\System\mMAieRn.exe
  C:\Windows\System\mMAieRn.exe
  2⤵
  PID:7808
- C:\Windows\System\rMscIKu.exe
  C:\Windows\System\rMscIKu.exe
  2⤵
  PID:8096
- C:\Windows\System\vzlzmvf.exe
  C:\Windows\System\vzlzmvf.exe
  2⤵
  PID:8176
- C:\Windows\System\xzdcRLR.exe
  C:\Windows\System\xzdcRLR.exe
  2⤵
  PID:7292
- C:\Windows\System\RiRNzAP.exe
  C:\Windows\System\RiRNzAP.exe
  2⤵
  PID:7720
- C:\Windows\System\kGgdfNm.exe
  C:\Windows\System\kGgdfNm.exe
  2⤵
  PID:7872
- C:\Windows\System\uIQvoJB.exe
  C:\Windows\System\uIQvoJB.exe
  2⤵
  PID:7928
- C:\Windows\System\NJWvZhi.exe
  C:\Windows\System\NJWvZhi.exe
  2⤵
  PID:8136
- C:\Windows\System\KickhVg.exe
  C:\Windows\System\KickhVg.exe
  2⤵
  PID:8116
- C:\Windows\System\WMXuVac.exe
  C:\Windows\System\WMXuVac.exe
  2⤵
  PID:7504
- C:\Windows\System\YKBBgNK.exe
  C:\Windows\System\YKBBgNK.exe
  2⤵
  PID:7496
- C:\Windows\System\CraxTmJ.exe
  C:\Windows\System\CraxTmJ.exe
  2⤵
  PID:8060
- C:\Windows\System\AOSRDfq.exe
  C:\Windows\System\AOSRDfq.exe
  2⤵
  PID:7408
- C:\Windows\System\inJkLXc.exe
  C:\Windows\System\inJkLXc.exe
  2⤵
  PID:7664
- C:\Windows\System\QBclump.exe
  C:\Windows\System\QBclump.exe
  2⤵
  PID:7216
- C:\Windows\System\rUtHkii.exe
  C:\Windows\System\rUtHkii.exe
  2⤵
  PID:7760
- C:\Windows\System\LAWXjkT.exe
  C:\Windows\System\LAWXjkT.exe
  2⤵
  PID:7200
- C:\Windows\System\ijmPtAJ.exe
  C:\Windows\System\ijmPtAJ.exe
  2⤵
  PID:7912
- C:\Windows\System\nmXJEFc.exe
  C:\Windows\System\nmXJEFc.exe
  2⤵
  PID:7348
- C:\Windows\System\ljbCeFh.exe
  C:\Windows\System\ljbCeFh.exe
  2⤵
  PID:7324
- C:\Windows\System\DlscKDA.exe
  C:\Windows\System\DlscKDA.exe
  2⤵
  PID:7924
- C:\Windows\System\MakKWyy.exe
  C:\Windows\System\MakKWyy.exe
  2⤵
  PID:7072
- C:\Windows\System\jZufTQp.exe
  C:\Windows\System\jZufTQp.exe
  2⤵
  PID:7600
- C:\Windows\System\hUUvfhm.exe
  C:\Windows\System\hUUvfhm.exe
  2⤵
  PID:8200
- C:\Windows\System\BvPVxtS.exe
  C:\Windows\System\BvPVxtS.exe
  2⤵
  PID:8236
- C:\Windows\System\kbffuIm.exe
  C:\Windows\System\kbffuIm.exe
  2⤵
  PID:8256
- C:\Windows\System\ghtnlRw.exe
  C:\Windows\System\ghtnlRw.exe
  2⤵
  PID:8272
- C:\Windows\System\aqgIRVH.exe
  C:\Windows\System\aqgIRVH.exe
  2⤵
  PID:8300
- C:\Windows\System\AIrJHbt.exe
  C:\Windows\System\AIrJHbt.exe
  2⤵
  PID:8316
- C:\Windows\System\NcTlcQV.exe
  C:\Windows\System\NcTlcQV.exe
  2⤵
  PID:8332
- C:\Windows\System\gfeETlk.exe
  C:\Windows\System\gfeETlk.exe
  2⤵
  PID:8352
- C:\Windows\System\triijkZ.exe
  C:\Windows\System\triijkZ.exe
  2⤵
  PID:8368
- C:\Windows\System\blSTKNO.exe
  C:\Windows\System\blSTKNO.exe
  2⤵
  PID:8384
- C:\Windows\System\vMxSnCX.exe
  C:\Windows\System\vMxSnCX.exe
  2⤵
  PID:8404
- C:\Windows\System\YHnplok.exe
  C:\Windows\System\YHnplok.exe
  2⤵
  PID:8420
- C:\Windows\System\buDVlSg.exe
  C:\Windows\System\buDVlSg.exe
  2⤵
  PID:8452
- C:\Windows\System\posMQRS.exe
  C:\Windows\System\posMQRS.exe
  2⤵
  PID:8484
- C:\Windows\System\weAjZfD.exe
  C:\Windows\System\weAjZfD.exe
  2⤵
  PID:8500
- C:\Windows\System\IQCxDFp.exe
  C:\Windows\System\IQCxDFp.exe
  2⤵
  PID:8520
- C:\Windows\System\urtGhnw.exe
  C:\Windows\System\urtGhnw.exe
  2⤵
  PID:8536
- C:\Windows\System\fTrZPDo.exe
  C:\Windows\System\fTrZPDo.exe
  2⤵
  PID:8556
- C:\Windows\System\zVUSFjT.exe
  C:\Windows\System\zVUSFjT.exe
  2⤵
  PID:8584
- C:\Windows\System\eQqSGqi.exe
  C:\Windows\System\eQqSGqi.exe
  2⤵
  PID:8600
- C:\Windows\System\UlnKVrr.exe
  C:\Windows\System\UlnKVrr.exe
  2⤵
  PID:8620
- C:\Windows\System\FZWOdRM.exe
  C:\Windows\System\FZWOdRM.exe
  2⤵
  PID:8636
- C:\Windows\System\TrMPIGm.exe
  C:\Windows\System\TrMPIGm.exe
  2⤵
  PID:8652
- C:\Windows\System\UNhuBZy.exe
  C:\Windows\System\UNhuBZy.exe
  2⤵
  PID:8688
- C:\Windows\System\ugmkvJk.exe
  C:\Windows\System\ugmkvJk.exe
  2⤵
  PID:8704
- C:\Windows\System\DwgoGUQ.exe
  C:\Windows\System\DwgoGUQ.exe
  2⤵
  PID:8720
- C:\Windows\System\gGpWLaf.exe
  C:\Windows\System\gGpWLaf.exe
  2⤵
  PID:8736
- C:\Windows\System\NbRKYyv.exe
  C:\Windows\System\NbRKYyv.exe
  2⤵
  PID:8752
- C:\Windows\System\XjbwDRp.exe
  C:\Windows\System\XjbwDRp.exe
  2⤵
  PID:8784
- C:\Windows\System\xHdQGEQ.exe
  C:\Windows\System\xHdQGEQ.exe
  2⤵
  PID:8808
- C:\Windows\System\pBWZmhE.exe
  C:\Windows\System\pBWZmhE.exe
  2⤵
  PID:8824
- C:\Windows\System\JEhYLvs.exe
  C:\Windows\System\JEhYLvs.exe
  2⤵
  PID:8840
- C:\Windows\System\AIcQuAQ.exe
  C:\Windows\System\AIcQuAQ.exe
  2⤵
  PID:8856
- C:\Windows\System\NrrMPNQ.exe
  C:\Windows\System\NrrMPNQ.exe
  2⤵
  PID:8876
- C:\Windows\System\hfImCeS.exe
  C:\Windows\System\hfImCeS.exe
  2⤵
  PID:8900
- C:\Windows\System\wpNJjEG.exe
  C:\Windows\System\wpNJjEG.exe
  2⤵
  PID:8916
- C:\Windows\System\kIAIwsy.exe
  C:\Windows\System\kIAIwsy.exe
  2⤵
  PID:8932
- C:\Windows\System\KTEwmRa.exe
  C:\Windows\System\KTEwmRa.exe
  2⤵
  PID:8952
- C:\Windows\System\BnTuIsH.exe
  C:\Windows\System\BnTuIsH.exe
  2⤵
  PID:8976
- C:\Windows\System\huWkYqb.exe
  C:\Windows\System\huWkYqb.exe
  2⤵
  PID:8992
- C:\Windows\System\AdTeSkJ.exe
  C:\Windows\System\AdTeSkJ.exe
  2⤵
  PID:9028
- C:\Windows\System\zyFItkY.exe
  C:\Windows\System\zyFItkY.exe
  2⤵
  PID:9044
- C:\Windows\System\tSnysKX.exe
  C:\Windows\System\tSnysKX.exe
  2⤵
  PID:9060
- C:\Windows\System\WAtUyMg.exe
  C:\Windows\System\WAtUyMg.exe
  2⤵
  PID:9076
- C:\Windows\System\hvATSCo.exe
  C:\Windows\System\hvATSCo.exe
  2⤵
  PID:9100
- C:\Windows\System\eUsLIzj.exe
  C:\Windows\System\eUsLIzj.exe
  2⤵
  PID:9120
- C:\Windows\System\fkXkvUT.exe
  C:\Windows\System\fkXkvUT.exe
  2⤵
  PID:9140
- C:\Windows\System\uKXEOqH.exe
  C:\Windows\System\uKXEOqH.exe
  2⤵
  PID:9156
- C:\Windows\System\apZRpLu.exe
  C:\Windows\System\apZRpLu.exe
  2⤵
  PID:9172
- C:\Windows\System\gqIKlma.exe
  C:\Windows\System\gqIKlma.exe
  2⤵
  PID:9188
- C:\Windows\System\QwodiDW.exe
  C:\Windows\System\QwodiDW.exe
  2⤵
  PID:9204
- C:\Windows\System\ZqefEje.exe
  C:\Windows\System\ZqefEje.exe
  2⤵
  PID:7828
- C:\Windows\System\dljwLkV.exe
  C:\Windows\System\dljwLkV.exe
  2⤵
  PID:7404
- C:\Windows\System\sGtxmcN.exe
  C:\Windows\System\sGtxmcN.exe
  2⤵
  PID:7988
- C:\Windows\System\TRNrVZs.exe
  C:\Windows\System\TRNrVZs.exe
  2⤵
  PID:7736
- C:\Windows\System\KysPWeG.exe
  C:\Windows\System\KysPWeG.exe
  2⤵
  PID:8264
- C:\Windows\System\CeZScRB.exe
  C:\Windows\System\CeZScRB.exe
  2⤵
  PID:8252
- C:\Windows\System\oYxlesO.exe
  C:\Windows\System\oYxlesO.exe
  2⤵
  PID:8296
- C:\Windows\System\UuhgiPO.exe
  C:\Windows\System\UuhgiPO.exe
  2⤵
  PID:8344
- C:\Windows\System\ZPWZgMd.exe
  C:\Windows\System\ZPWZgMd.exe
  2⤵
  PID:8360
- C:\Windows\System\oAUtHlL.exe
  C:\Windows\System\oAUtHlL.exe
  2⤵
  PID:8440
- C:\Windows\System\athLGoL.exe
  C:\Windows\System\athLGoL.exe
  2⤵
  PID:8464
- C:\Windows\System\PuJxyFW.exe
  C:\Windows\System\PuJxyFW.exe
  2⤵
  PID:8508
- C:\Windows\System\dzebEhV.exe
  C:\Windows\System\dzebEhV.exe
  2⤵
  PID:8544
- C:\Windows\System\XKEBaUH.exe
  C:\Windows\System\XKEBaUH.exe
  2⤵
  PID:8568
- C:\Windows\System\SuYcOzQ.exe
  C:\Windows\System\SuYcOzQ.exe
  2⤵
  PID:8592
- C:\Windows\System\HYxNwBR.exe
  C:\Windows\System\HYxNwBR.exe
  2⤵
  PID:8608
- C:\Windows\System\ZgzvUJW.exe
  C:\Windows\System\ZgzvUJW.exe
  2⤵
  PID:8648
- C:\Windows\System\TJXupqF.exe
  C:\Windows\System\TJXupqF.exe
  2⤵
  PID:8672
- C:\Windows\System\MwpjbvH.exe
  C:\Windows\System\MwpjbvH.exe
  2⤵
  PID:8700
- C:\Windows\System\qxnyKby.exe
  C:\Windows\System\qxnyKby.exe
  2⤵
  PID:8792
- C:\Windows\System\mUCFVsa.exe
  C:\Windows\System\mUCFVsa.exe
  2⤵
  PID:8772
- C:\Windows\System\CWrZRPM.exe
  C:\Windows\System\CWrZRPM.exe
  2⤵
  PID:8816
- C:\Windows\System\BYaYnbP.exe
  C:\Windows\System\BYaYnbP.exe
  2⤵
  PID:8868
- C:\Windows\System\ukYvhRe.exe
  C:\Windows\System\ukYvhRe.exe
  2⤵
  PID:8944
- C:\Windows\System\lafdUca.exe
  C:\Windows\System\lafdUca.exe
  2⤵
  PID:8892
- C:\Windows\System\jfhGkQv.exe
  C:\Windows\System\jfhGkQv.exe
  2⤵
  PID:8924
- C:\Windows\System\SuIDRKZ.exe
  C:\Windows\System\SuIDRKZ.exe
  2⤵
  PID:8972
- C:\Windows\System\gaKwvkl.exe
  C:\Windows\System\gaKwvkl.exe
  2⤵
  PID:9024
- C:\Windows\System\DZmDNgB.exe
  C:\Windows\System\DZmDNgB.exe
  2⤵
  PID:9072
- C:\Windows\System\wpcyUgl.exe
  C:\Windows\System\wpcyUgl.exe
  2⤵
  PID:9116
- C:\Windows\System\IndLuRw.exe
  C:\Windows\System\IndLuRw.exe
  2⤵
  PID:9184
- C:\Windows\System\tqUODRY.exe
  C:\Windows\System\tqUODRY.exe
  2⤵
  PID:8212
- C:\Windows\System\gEFCyCZ.exe
  C:\Windows\System\gEFCyCZ.exe
  2⤵
  PID:6368
- C:\Windows\System\BnmFZeN.exe
  C:\Windows\System\BnmFZeN.exe
  2⤵
  PID:8280
- C:\Windows\System\rHFZXpo.exe
  C:\Windows\System\rHFZXpo.exe
  2⤵
  PID:8232
- C:\Windows\System\iJFLCMJ.exe
  C:\Windows\System\iJFLCMJ.exe
  2⤵
  PID:7220
- C:\Windows\System\awgPjUE.exe
  C:\Windows\System\awgPjUE.exe
  2⤵
  PID:9200
- C:\Windows\System\pLhBTWm.exe
  C:\Windows\System\pLhBTWm.exe
  2⤵
  PID:8248
- C:\Windows\System\AuOozWs.exe
  C:\Windows\System\AuOozWs.exe
  2⤵
  PID:8380
- C:\Windows\System\kbsNGQh.exe
  C:\Windows\System\kbsNGQh.exe
  2⤵
  PID:8680
- C:\Windows\System\paItzlh.exe
  C:\Windows\System\paItzlh.exe
  2⤵
  PID:8436
- C:\Windows\System\ouMtWcv.exe
  C:\Windows\System\ouMtWcv.exe
  2⤵
  PID:8664
- C:\Windows\System\IcLdyvO.exe
  C:\Windows\System\IcLdyvO.exe
  2⤵
  PID:8764
- C:\Windows\System\dKXaDfs.exe
  C:\Windows\System\dKXaDfs.exe
  2⤵
  PID:8748
- C:\Windows\System\iafIEhO.exe
  C:\Windows\System\iafIEhO.exe
  2⤵
  PID:8836
- C:\Windows\System\rJtKAbn.exe
  C:\Windows\System\rJtKAbn.exe
  2⤵
  PID:8804
- C:\Windows\System\hWVTXMF.exe
  C:\Windows\System\hWVTXMF.exe
  2⤵
  PID:8744
- C:\Windows\System\gZElJNA.exe
  C:\Windows\System\gZElJNA.exe
  2⤵
  PID:8948
- C:\Windows\System\chHujOQ.exe
  C:\Windows\System\chHujOQ.exe
  2⤵
  PID:8964
- C:\Windows\System\onQmDGG.exe
  C:\Windows\System\onQmDGG.exe
  2⤵
  PID:8852
- C:\Windows\System\YWqdtNB.exe
  C:\Windows\System\YWqdtNB.exe
  2⤵
  PID:9040
- C:\Windows\System\QDYXPoS.exe
  C:\Windows\System\QDYXPoS.exe
  2⤵
  PID:9056
- C:\Windows\System\kUVurLK.exe
  C:\Windows\System\kUVurLK.exe
  2⤵
  PID:7032
- C:\Windows\System\TYiKsJX.exe
  C:\Windows\System\TYiKsJX.exe
  2⤵
  PID:8348
- C:\Windows\System\NrYPcdg.exe
  C:\Windows\System\NrYPcdg.exe
  2⤵
  PID:8312
- C:\Windows\System\fenyuOX.exe
  C:\Windows\System\fenyuOX.exe
  2⤵
  PID:8428
- C:\Windows\System\EyGLwjU.exe
  C:\Windows\System\EyGLwjU.exe
  2⤵
  PID:7548
- C:\Windows\System\WdeKbfr.exe
  C:\Windows\System\WdeKbfr.exe
  2⤵
  PID:8432
- C:\Windows\System\LeSEGmF.exe
  C:\Windows\System\LeSEGmF.exe
  2⤵
  PID:8516
- C:\Windows\System\kRgvXkB.exe
  C:\Windows\System\kRgvXkB.exe
  2⤵
  PID:8684
- C:\Windows\System\rasqElK.exe
  C:\Windows\System\rasqElK.exe
  2⤵
  PID:8780
- C:\Windows\System\BFNdvos.exe
  C:\Windows\System\BFNdvos.exe
  2⤵
  PID:8820
- C:\Windows\System\bewYQpK.exe
  C:\Windows\System\bewYQpK.exe
  2⤵
  PID:9012
- C:\Windows\System\CZHaAfz.exe
  C:\Windows\System\CZHaAfz.exe
  2⤵
  PID:8960
- C:\Windows\System\XufjdYh.exe
  C:\Windows\System\XufjdYh.exe
  2⤵
  PID:9180
- C:\Windows\System\VzjvzfJ.exe
  C:\Windows\System\VzjvzfJ.exe
  2⤵
  PID:8376
- C:\Windows\System\YzMOoIm.exe
  C:\Windows\System\YzMOoIm.exe
  2⤵
  PID:8132
- C:\Windows\System\RuEPuwp.exe
  C:\Windows\System\RuEPuwp.exe
  2⤵
  PID:8444
- C:\Windows\System\YmqtuIk.exe
  C:\Windows\System\YmqtuIk.exe
  2⤵
  PID:9164
- C:\Windows\System\FNhvFkK.exe
  C:\Windows\System\FNhvFkK.exe
  2⤵
  PID:8712
- C:\Windows\System\COzQURS.exe
  C:\Windows\System\COzQURS.exe
  2⤵
  PID:8644
- C:\Windows\System\ptUCPBq.exe
  C:\Windows\System\ptUCPBq.exe
  2⤵
  PID:8400
- C:\Windows\System\stNCejg.exe
  C:\Windows\System\stNCejg.exe
  2⤵
  PID:7432
- C:\Windows\System\pohIgmi.exe
  C:\Windows\System\pohIgmi.exe
  2⤵
  PID:8580
- C:\Windows\System\qrJdjNQ.exe
  C:\Windows\System\qrJdjNQ.exe
  2⤵
  PID:8768
- C:\Windows\System\fFpACpH.exe
  C:\Windows\System\fFpACpH.exe
  2⤵
  PID:8908
- C:\Windows\System\tgQQpfd.exe
  C:\Windows\System\tgQQpfd.exe
  2⤵
  PID:8216
- C:\Windows\System\hFlyrCD.exe
  C:\Windows\System\hFlyrCD.exe
  2⤵
  PID:9132
- C:\Windows\System\qRLouHc.exe
  C:\Windows\System\qRLouHc.exe
  2⤵
  PID:8472
- C:\Windows\System\jrHqgpa.exe
  C:\Windows\System\jrHqgpa.exe
  2⤵
  PID:8324
- C:\Windows\System\BEDxZUM.exe
  C:\Windows\System\BEDxZUM.exe
  2⤵
  PID:9228
- C:\Windows\System\CIlMAgU.exe
  C:\Windows\System\CIlMAgU.exe
  2⤵
  PID:9248
- C:\Windows\System\EJMfliw.exe
  C:\Windows\System\EJMfliw.exe
  2⤵
  PID:9264
- C:\Windows\System\MVJbNHz.exe
  C:\Windows\System\MVJbNHz.exe
  2⤵
  PID:9284
- C:\Windows\System\ikwxjUh.exe
  C:\Windows\System\ikwxjUh.exe
  2⤵
  PID:9304
- C:\Windows\System\BXUufeO.exe
  C:\Windows\System\BXUufeO.exe
  2⤵
  PID:9328
- C:\Windows\System\gvpRDOs.exe
  C:\Windows\System\gvpRDOs.exe
  2⤵
  PID:9344
- C:\Windows\System\COYPdsT.exe
  C:\Windows\System\COYPdsT.exe
  2⤵
  PID:9376
- C:\Windows\System\FnAfczb.exe
  C:\Windows\System\FnAfczb.exe
  2⤵
  PID:9396
- C:\Windows\System\eTCrfjb.exe
  C:\Windows\System\eTCrfjb.exe
  2⤵
  PID:9412
- C:\Windows\System\mZJoMSr.exe
  C:\Windows\System\mZJoMSr.exe
  2⤵
  PID:9432
- C:\Windows\System\qhfSdCn.exe
  C:\Windows\System\qhfSdCn.exe
  2⤵
  PID:9452
- C:\Windows\System\bRIEbjZ.exe
  C:\Windows\System\bRIEbjZ.exe
  2⤵
  PID:9468
- C:\Windows\System\BEsRhRJ.exe
  C:\Windows\System\BEsRhRJ.exe
  2⤵
  PID:9492
- C:\Windows\System\hSpipcW.exe
  C:\Windows\System\hSpipcW.exe
  2⤵
  PID:9512
- C:\Windows\System\vEoAKHg.exe
  C:\Windows\System\vEoAKHg.exe
  2⤵
  PID:9528
- C:\Windows\System\FRwvEVU.exe
  C:\Windows\System\FRwvEVU.exe
  2⤵
  PID:9556
- C:\Windows\System\NVnNlJM.exe
  C:\Windows\System\NVnNlJM.exe
  2⤵
  PID:9576
- C:\Windows\System\EOZpAhr.exe
  C:\Windows\System\EOZpAhr.exe
  2⤵
  PID:9600
- C:\Windows\System\XtFDfjt.exe
  C:\Windows\System\XtFDfjt.exe
  2⤵
  PID:9616
- C:\Windows\System\BClvsgG.exe
  C:\Windows\System\BClvsgG.exe
  2⤵
  PID:9636
- C:\Windows\System\XKsfKDb.exe
  C:\Windows\System\XKsfKDb.exe
  2⤵
  PID:9652
- C:\Windows\System\DCrlPts.exe
  C:\Windows\System\DCrlPts.exe
  2⤵
  PID:9672
- C:\Windows\System\rJHXWCq.exe
  C:\Windows\System\rJHXWCq.exe
  2⤵
  PID:9688
- C:\Windows\System\FPUdQbu.exe
  C:\Windows\System\FPUdQbu.exe
  2⤵
  PID:9704
- C:\Windows\System\JMPSVzW.exe
  C:\Windows\System\JMPSVzW.exe
  2⤵
  PID:9740
- C:\Windows\System\YzfoJZS.exe
  C:\Windows\System\YzfoJZS.exe
  2⤵
  PID:9756
- C:\Windows\System\qrrTpJW.exe
  C:\Windows\System\qrrTpJW.exe
  2⤵
  PID:9772
- C:\Windows\System\teDlYPd.exe
  C:\Windows\System\teDlYPd.exe
  2⤵
  PID:9800
- C:\Windows\System\jCqZDkE.exe
  C:\Windows\System\jCqZDkE.exe
  2⤵
  PID:9820
- C:\Windows\System\AAtXnQz.exe
  C:\Windows\System\AAtXnQz.exe
  2⤵
  PID:9840
- C:\Windows\System\TgUbJad.exe
  C:\Windows\System\TgUbJad.exe
  2⤵
  PID:9860
- C:\Windows\System\cdYRFOt.exe
  C:\Windows\System\cdYRFOt.exe
  2⤵
  PID:9884
- C:\Windows\System\yxngGpD.exe
  C:\Windows\System\yxngGpD.exe
  2⤵
  PID:9900
- C:\Windows\System\dmpEeIA.exe
  C:\Windows\System\dmpEeIA.exe
  2⤵
  PID:9916
- C:\Windows\System\OSjERUi.exe
  C:\Windows\System\OSjERUi.exe
  2⤵
  PID:9936
- C:\Windows\System\VyzljGB.exe
  C:\Windows\System\VyzljGB.exe
  2⤵
  PID:9952
- C:\Windows\System\rplQQlE.exe
  C:\Windows\System\rplQQlE.exe
  2⤵
  PID:9968
- C:\Windows\System\xwORWXG.exe
  C:\Windows\System\xwORWXG.exe
  2⤵
  PID:9984
- C:\Windows\System\cewQxwC.exe
  C:\Windows\System\cewQxwC.exe
  2⤵
  PID:10000
- C:\Windows\System\uRvcLqD.exe
  C:\Windows\System\uRvcLqD.exe
  2⤵
  PID:10016
- C:\Windows\System\CjehbBT.exe
  C:\Windows\System\CjehbBT.exe
  2⤵
  PID:10040
- C:\Windows\System\LmiOhgW.exe
  C:\Windows\System\LmiOhgW.exe
  2⤵
  PID:10060
- C:\Windows\System\augDyxv.exe
  C:\Windows\System\augDyxv.exe
  2⤵
  PID:10076
- C:\Windows\System\amrXxlN.exe
  C:\Windows\System\amrXxlN.exe
  2⤵
  PID:10092
- C:\Windows\System\sTqPbsQ.exe
  C:\Windows\System\sTqPbsQ.exe
  2⤵
  PID:10120
- C:\Windows\System\XdWfPMR.exe
  C:\Windows\System\XdWfPMR.exe
  2⤵
  PID:10144
- C:\Windows\System\QTJdMyO.exe
  C:\Windows\System\QTJdMyO.exe
  2⤵
  PID:10164
- C:\Windows\System\goRugcm.exe
  C:\Windows\System\goRugcm.exe
  2⤵
  PID:10200
- C:\Windows\System\AgqWPTW.exe
  C:\Windows\System\AgqWPTW.exe
  2⤵
  PID:10216
- C:\Windows\System\AFUODUr.exe
  C:\Windows\System\AFUODUr.exe
  2⤵
  PID:8848
- C:\Windows\System\VehnLsL.exe
  C:\Windows\System\VehnLsL.exe
  2⤵
  PID:8492
- C:\Windows\System\NiGoVzm.exe
  C:\Windows\System\NiGoVzm.exe
  2⤵
  PID:8576
- C:\Windows\System\glvzxyx.exe
  C:\Windows\System\glvzxyx.exe
  2⤵
  PID:9292
- C:\Windows\System\pMMDvvT.exe
  C:\Windows\System\pMMDvvT.exe
  2⤵
  PID:9340
- C:\Windows\System\aSHPPWE.exe
  C:\Windows\System\aSHPPWE.exe
  2⤵
  PID:9352
- C:\Windows\System\BUimuoS.exe
  C:\Windows\System\BUimuoS.exe
  2⤵
  PID:9316
- C:\Windows\System\IETDQMl.exe
  C:\Windows\System\IETDQMl.exe
  2⤵
  PID:9368
- C:\Windows\System\VCHliUE.exe
  C:\Windows\System\VCHliUE.exe
  2⤵
  PID:9388
- C:\Windows\System\xsUblvU.exe
  C:\Windows\System\xsUblvU.exe
  2⤵
  PID:9440
- C:\Windows\System\yFCIeqD.exe
  C:\Windows\System\yFCIeqD.exe
  2⤵
  PID:9508
- C:\Windows\System\GdjkVnx.exe
  C:\Windows\System\GdjkVnx.exe
  2⤵
  PID:9536
- C:\Windows\System\DWFnmYz.exe
  C:\Windows\System\DWFnmYz.exe
  2⤵
  PID:9548
- C:\Windows\System\xSGoFYW.exe
  C:\Windows\System\xSGoFYW.exe
  2⤵
  PID:9584
- C:\Windows\System\hQXVzGs.exe
  C:\Windows\System\hQXVzGs.exe
  2⤵
  PID:9608
- C:\Windows\System\HueuqIv.exe
  C:\Windows\System\HueuqIv.exe
  2⤵
  PID:9644
- C:\Windows\System\jbzNYpM.exe
  C:\Windows\System\jbzNYpM.exe
  2⤵
  PID:9700
- C:\Windows\System\kwqAvYN.exe
  C:\Windows\System\kwqAvYN.exe
  2⤵
  PID:9724
- C:\Windows\System\MnGpAJJ.exe
  C:\Windows\System\MnGpAJJ.exe
  2⤵
  PID:9752
- C:\Windows\System\JcBpArC.exe
  C:\Windows\System\JcBpArC.exe
  2⤵
  PID:9788
- C:\Windows\System\hNGNPyC.exe
  C:\Windows\System\hNGNPyC.exe
  2⤵
  PID:9828
- C:\Windows\System\EJxYjmT.exe
  C:\Windows\System\EJxYjmT.exe
  2⤵
  PID:9868
- C:\Windows\System\IBSfzFD.exe
  C:\Windows\System\IBSfzFD.exe
  2⤵
  PID:9872
- C:\Windows\System\GCtsVkE.exe
  C:\Windows\System\GCtsVkE.exe
  2⤵
  PID:9980
- C:\Windows\System\yFTwtqH.exe
  C:\Windows\System\yFTwtqH.exe
  2⤵
  PID:10056
- C:\Windows\System\tPTPyqS.exe
  C:\Windows\System\tPTPyqS.exe
  2⤵
  PID:10116
- C:\Windows\System\FkNCoPL.exe
  C:\Windows\System\FkNCoPL.exe
  2⤵
  PID:9924

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Windows\system\BYwLaMq.exe

Filesize
2.7MB

MD5
02293b0b852b0ba20385ba19001b6dd0

SHA1
f9e3a679f10bcb49a014a3052ce618396a000f71

SHA256
96a18da6d9e47fca399f70e224edc1ae2edc0be6f3013ffa51576ae799a0c0e5

SHA512
5042bc563ec131b694bf5100efd46bf9fc7692d188ab821832a3527aeaf222bb658984284a88c4a14cae6b845443052e82c1c9f37d2d58d3da8f30ddd851697d

Download Submit
C:\Windows\system\EIIalCQ.exe

Filesize
2.7MB

MD5
a8144d2bdc92d4b741e7481065a9105a

SHA1
06a4f29b229c40a37fdbe7074af04514da282b10

SHA256
e6214d682598ce51459d58d9399c8ab283317f9b5d5c91144f91bc871cbb8f1e

SHA512
df67340500d3b81416852038523f5b9fe2c6bc882dfe31f8ea5fec81027c2a79a8ae913c9330e3748f114ee2fc44ad53df730adb4946a20e0e03d6615cf78094

Download Submit
C:\Windows\system\IVDIufO.exe

Filesize
2.7MB

MD5
014a1bb1581e87b43d5c64caee2554d5

SHA1
d3e8c66b356bf53ba34e4d80f1bddb40f8aef573

SHA256
3f4498fd736c5fbdbf228bb9db82e2a4b489cee1d5e0a2236b0113e2344ea434

SHA512
341fc2550b69e840c346f7d93c3f88b9b26b09d5ee4b9ef1048a953b949ee98bb7439a971926688d05ec97802be222c3de51400f3fd1d8806ec56933d166b244

Download Submit
C:\Windows\system\MAYyXQf.exe

Filesize
2.7MB

MD5
f84a7ec8afba68c3f0c8925361e35cd8

SHA1
2641a52dc726eca12e8cffb023ad2b7b4e269bb4

SHA256
4df5006f13a21b87ec4942a3605b53297aee5e3926315954f0cba15f45bd0ff4

SHA512
aa08a4a86b3a6ae11d3a809bf3a66c1d136c38790401a4cdbe53ea3a2d02481fb0c56dd3641cbe0ba061d4a26fc27bc7f943c9385ca2a67a8d233de40c2c4af0

Download Submit
C:\Windows\system\OMSbpvX.exe

Filesize
2.7MB

MD5
cdadf3dfde1a83279d610781f2c50f14

SHA1
54fc545d8b56e581a3373f3bfe0eb20d61f3e761

SHA256
01c80439e271367740c488fa713ffda8838bab65b2ea50125d55959144948dc6

SHA512
e71de2e05ce013998a554d1ee95f058de7d0f5caa5eb78fa3ea93b93c28eebc6fd983a81378a4988027c96a096186292dc17786259f11ffe5e4201cf4b2f57e6

Download Submit
C:\Windows\system\QQHHIie.exe

Filesize
2.7MB

MD5
ad7f96163298289447ac2fe5a6922d80

SHA1
c6f0bc86f0388623d154d9f7b57b8a80493aad1e

SHA256
95103b38b767ecc231be6058a5b411de01013b5da2280e8200c78f976fa5b632

SHA512
35306136dd4338a09d905085a5f661cdc92cb3ed35e3e8efb5a000ec3ec9ee7964bd335b7a228e02cfa79f76c07d15ec2c8d164e62e53a7566a00faf9d18fb32

Download Submit
C:\Windows\system\RMQCtzv.exe

Filesize
2.7MB

MD5
868ef76c188d6f113e09386eaadf0791

SHA1
011743d8bb094a01e9603c220d991b61b992004f

SHA256
3b61fdbea78f5289b2988e33b5393a2e127d4c13b43532639433b32f131c4ffb

SHA512
fd274cca12bde09c1058ec8c5d95f97e9d166f38f3d261d2f465a1793af475fcebdf1f137c797af3803ba857c16f44e83b544be5b0a3642475e59d3b606c0f12

Download Submit
C:\Windows\system\RRAxTSA.exe

Filesize
2.7MB

MD5
876c856678a8254d6571feb176a931ea

SHA1
a6767d3dd4d9dfbcd68dcc555b243687f20e32d8

SHA256
c2131d2af902ba9528add8c0d1e4594f38489615361ccf74f3c474d039ff67d8

SHA512
1b159e5e80b0d5ebafc6c520a16cc5d4058e632f6c59e92142d3b07141694e3a454c2974913a8c6788b872f2c585cabe3983f395ab0843bb3a65cedf036d391b

Download Submit
C:\Windows\system\VxhqSJV.exe

Filesize
2.7MB

MD5
0049562847c5b82f0f6ffedd78880929

SHA1
278016d8fa81f8d343e3be2123e8cd46545ea6e2

SHA256
c7990cd816d6f5808451c10460e1a508fefdc8aaddc921a2422f57f696823312

SHA512
fe0708c6bd87bb434a2c33485f10e40aba876b0a6c3484e0f8b06b1232381478be8e8a476919953dcb911391c10fb6bcd649350978bf6288d2c5a6d74ae5d92b

Download Submit
C:\Windows\system\Wtsbzql.exe

Filesize
2.7MB

MD5
edec09542969f2c6fd78864182bc8367

SHA1
b2db859500b22dbb320d555dbf0ef42d4a70fcfe

SHA256
7855ddcc0220ea884087ebe4d5c44fe805b9e72a36d06366e69fe13ef9ae318d

SHA512
e5c87e336a354cb22f347607bc8e00f2acf0a7981479c202bbc0bf3684555ac2854329bb2abb0347de2a52bb7e96a071191225d6c0dabe10a29fb6a2d8f46790

Download Submit
C:\Windows\system\XdTMzrb.exe

Filesize
2.7MB

MD5
2bb0fc9e05a3bed699dae140532cb553

SHA1
66eb8615af1cb8648bd46bcbde6aacd176701a92

SHA256
377c6d9177e9f964396bdc3d062a223664c3a67416e86bb07efca60b3607ddcf

SHA512
2a981149fbdc51073bb6cc6f443f8d3b633254ddf41e6bb1b07d95f9e9b8b4c6add2c3d0c822e9f3756c437e4c0ab9ef32043c46bcfab22769c7136e2e019131

Download Submit
C:\Windows\system\cUjNJUe.exe

Filesize
2.7MB

MD5
1adbbd3b27f887161f5e1973ed5d22df

SHA1
856232e9856b10e1f2a9afffda1f5f673c992dc7

SHA256
c58d574b812ab9b285958d4b177ffd435bb361109f83d183539c7e1e30ee58da

SHA512
0a4eb93e2d3fba2c6da5789d7bb9c868d61b712a6a724d56c0df73d46d0c8f38cd0771ce192be02eb348d8370201d2eee9dfc9452d9dd0543b7f6861169b77e5

Download Submit
C:\Windows\system\hyzJHzg.exe

Filesize
2.7MB

MD5
1eeb9c63da939eea36da987b27ba81d6

SHA1
5b8ae16f7d8dd53d679c62ecab1ca232f5eed5f7

SHA256
525a481d4d9c7b884413d8dbcb93e098dbf133343ce3f9114ae7467eb184647a

SHA512
5f16f699fd86bdf3ddf7b00a27db7215116c53063869b122b68be49b320139b7e2b50b89fc921d923cca9bb5a22cc8c8bfcffcbede6baa2de02723e733d9730e

Download Submit
C:\Windows\system\ntTwhkF.exe

Filesize
2.7MB

MD5
df245807379c9dfb070561e00c99fd4e

SHA1
9ae86c3084baa2e10091b47e0dcf7b79985b1e76

SHA256
9a944edd8af1915b2ecb442d43d2f65350448a3a8f0a5385fb3d6f4445214fbc

SHA512
52df88dc9b219d164c92a1ece36d32d244b78e3f6c68ac25588525b394ea2a60a63a66976840be905b9ce0f189ea90ab9304e3d31bd2762fe7660b9d9367d7d9

Download Submit
C:\Windows\system\oniDJqK.exe

Filesize
2.7MB

MD5
adb3ad3da4b89e1eef25675525ff3221

SHA1
550089d198f14a712c922343b18710d3ca687b6b

SHA256
e7af56c5c3e18d5e1e6e4936e658959d0f2ed047f98d757fa8cc09dc2dba75fb

SHA512
56f078bda14728ef670311757939ad1cfec6d6d414075a92e29da8e59ea1b2dc9814e5c5136e35cad1eeee1f536a99209f05e36d86cbe06865586f6a78390598

Download Submit
C:\Windows\system\oxHRvwu.exe

Filesize
2.7MB

MD5
f7dc25f2751d3e542f2e24cfe4083f78

SHA1
0613510a2fdb9e45dd04a168accad150ba5b4478

SHA256
38b9a108fb6f4f077faf59445a48fd47e7191a4b020a9a39ffe8286fca8a0e4b

SHA512
0822a708e595ad38a81ae5ed8a47e96ed36091999e2ce7f9379d58a631df3938b82fde3612805d7d02fbe2acc47319a42a5d8b6d441ef76c2d3ba42638faa4d5

Download Submit
C:\Windows\system\qIcZfLQ.exe

Filesize
2.7MB

MD5
6f90528c820976513da093deadda1032

SHA1
92179bed76ac07f3eeb319c0a47b05b6c0cd0e58

SHA256
13c99a1ae46720bbc3d57f7dbfdaaa12e67f5a42c451439562da02e0507b5923

SHA512
a9f42765a0a022eda84e1b96f84eb4203ebe5693611764134c23c448fb015d15227e9fb65429fa360af0a7fb17251e1472b94499d18763409f515924735f9247

Download Submit
C:\Windows\system\qdZRlXW.exe

Filesize
2.7MB

MD5
5fca3263ec87e0d504548f39dc894655

SHA1
ad28ea71876fdc00ab0a1d573efd9324d68d25a7

SHA256
c86f2517bc0cd48eb43e9628b5a7485810957ac758d34cd8ecd65c2ce74d899b

SHA512
732aadc56bfe03fdaf7b056a69c36133d19af52f9f55e21690721dc0afb70391fd61f76fbd74d99337b02750e8551ea162348e7b8ed1294a488811ad26cb9640

Download Submit
C:\Windows\system\rczhnRG.exe

Filesize
2.7MB

MD5
ea91a7b38c7c57393081fd6ecf1678e2

SHA1
b961b5207cbb107754293b233db486766cff9211

SHA256
065fc3db478b6d800bcfbab4316e207c263a749ea4ea0faabcfd3705c7e77c0d

SHA512
78cae920b57f60c0121f022a6d12a1323114830fb3eead5b84f5426ff458499f96a9f67effc11462616ba98d3d5602a688e44102cd1f16a0837c19c22a503fb0

Download Submit
C:\Windows\system\uXDeLLd.exe

Filesize
2.7MB

MD5
74e4538a6e46befc4ed367dbc5b97150

SHA1
dc12358edd2a4732fdc5267cb9f8ee7e97641104

SHA256
9afe36a3cb3cab9af81bb795a86370f0ade0393c2bd0db7d0dbc0906fcafab6e

SHA512
92b7785a1a16deae8ee3fd642c509d8c86d44706b5139adaae3b42565df108e53211df9c9478d03941db919c101e8f3a65e470454cd949b3df618c5fac663e54

Download Submit
C:\Windows\system\ulAEMoX.exe

Filesize
2.7MB

MD5
4edecce261c07fda28068e39c350c9eb

SHA1
a65afb15d9b6b2ac0fd4f305acc45ebfae064049

SHA256
c251cfb74aff050f414ca338980627375ad435b3500ddde23c501ee08c73338b

SHA512
4ec76e282a7cfcbfaf3359d2a9cc9ec9ed866a02aec9caf787862e6caaa55817e1437e72234563276511256642af4016ffd11240cc7476916deada9192f05648

Download Submit
C:\Windows\system\wgIBvrV.exe

Filesize
2.7MB

MD5
c5c4988958f932947dfcffc2de21c793

SHA1
26e534bb009735ee52c9dd73e3d0dc058410b420

SHA256
3a110ea22b5cc3d56e4d8551a03dc8078d018f4a4249224f9bc867d7a4b598bb

SHA512
66c5aeec7ad7b954bf32d4b294b2f57ceb5af7cfcb9413740fdafde6740acfa886663d160f5d4a3deb383829d8ad7d184cc61fcd8066ae72401330018c3b9244

Download Submit
\Windows\system\KxndWOV.exe

Filesize
2.7MB

MD5
eddd6571bb704848db84caf1510d1fb5

SHA1
4741f75ed0ffe4459e1a336eba5d2b4b826e5830

SHA256
e232635b614d955b3f3a7ef601c91896c41155d0cfff3e3ad78cb085e880c296

SHA512
5166c1395da9282a1d864716b511d069eced0b1687d2348b0f37e646cb5ab4b48f8b4435fa7b8a3c28cb7d53f5932d3f19dfd8909febcf1031e5b383dc514392

Download Submit
\Windows\system\LDBuXPX.exe

Filesize
2.7MB

MD5
203cfa245744e6129ee06db2f385d910

SHA1
08f035128fb53d877383e7dcce6606e814ea8400

SHA256
f8cb3164e351828d2a91e99dd297e26a7b07c9ec985618d81f2020658f4f2ca6

SHA512
0c24ddacadeb0a28708ed1608066c64937fe4a62fed463f3abddf850bdb52a0370f3a67966ca759d42b5079fe8831ca00ff40ed43ea845b091e9113107764251

Download Submit
\Windows\system\OxzKrpy.exe

Filesize
2.7MB

MD5
9ea53b098bc0ba47e6e7f702efcb18ea

SHA1
a682c36d86fe9ba9ea74fd3bda8e8080dd11c351

SHA256
32d2b331d386485c75dcb9576e15881c08e2a4a81056faa1e4568f041137a0c5

SHA512
1ce2ef8e0936e03e7220ce3ecbdd11dd2b864baa3761284cdb77210c3f78c325402cf3d815e11ebb8e266b45a719bd20357e1ffc2b82dacf9dae8dbd2e2b3743

Download Submit
\Windows\system\PNaouCK.exe

Filesize
2.7MB

MD5
5d9d86bee6154f95cf3ca9423923433f

SHA1
d03c7165df42bd2b8c4c32f5501fbf8c72565012

SHA256
5090f0d1e1f6858a9b9cb5d7fe64d902b6a4ec97125886791d1c33caae96664a

SHA512
a932d7876765ec2294cabc8efc378f0eb38af84435c5dea4726d8048e561bd0f1cc6302d1a523eed95a192492b89f9ef1c8ede3b46150f7eafe74ef63660fbbd

Download Submit
\Windows\system\dSGRpdm.exe

Filesize
2.7MB

MD5
4cf955caf34477a447b4f52814d7c17c

SHA1
63e83dc2ed20246247673951968aad67d3e532e6

SHA256
e47950cb027c69cea4d14a51de98382c3f1674dd828947389d366a7c79ef74d3

SHA512
e24ac309deb52231ad503dd957c64d1f838d02ea159afc7ff45153ead00dc74a5e903f2854bc15b3d985d7dd8c634725e6537ee69f70e3eadf3b3db004a1c0ed

Download Submit
\Windows\system\iIgTTwR.exe

Filesize
2.7MB

MD5
0f59d996ea7c5d3ca833d5c9929e9cc3

SHA1
695e1dec2e762272c68d8f7840ca149e869078ca

SHA256
b584bca8ea98fbec502e08354ef38e954c5f95e7dd0039f0e0fe4fa5074c54dc

SHA512
ac81d6b978b10222034291f0342e1d0c45e6b9624e868c8f3310f679bb4397429b7fa0162c09c258b6f0f59ec968d671e8d3a7c80d3b4111342fe63d85a57089

Download Submit
\Windows\system\kjdgjqV.exe

Filesize
2.7MB

MD5
4842a97408524f3ba2c6507fe82cea2e

SHA1
725552697f7b4d6dc1b168cf084d68976a7c5d46

SHA256
8910d3309dc55b434e4270eb6511e15ebcac4b4db0f6a2d33377cfbeca14efcb

SHA512
c4fe9d1b9794c734b44cc411e056dbe1ed4388e8b15dadcc2303ab034d40a56bfb917f372c90a11118bb9bb64068d5fd4ab02d7cace227583360ffaea4b1d0e6

Download Submit
\Windows\system\lIXtMec.exe

Filesize
2.7MB

MD5
128a6be9108e3fbe00701d43916647f4

SHA1
1be1e6d5b778a804843d884a530f5d107c2a6860

SHA256
c4a5f09157c5965c3e1c8ab7e6688f75654625b0fd7def2f0864da24a1b04c97

SHA512
b6adbe82b87e3d4be10a5fd7d4920ad80241077afbb53a51a93375408e981f5aa77a5979435289ee73f7029ff4a6bb2493ad838ce814288653fc332b5f76790e

Download Submit
\Windows\system\sVMCCoP.exe

Filesize
2.7MB

MD5
ff3113cd7affdd79af15fc5973bb9197

SHA1
16070407600f7e20f4b88f6911b1dd8cf4be0d1b

SHA256
28feb449a23669c3676237a8534d61e3a68902c3431f6941fbad34760f31896b

SHA512
b356f03651c1e13859e71183513dfb03f9afc4623901da69aebfa34cef2f44ae5ee0537c88ac8675bdf681a878f4d5086a135fdc37d58fd9b14dc4dd8ecafa12

Download Submit
\Windows\system\vkbuPyE.exe

Filesize
2.7MB

MD5
06c9da19c66a3be2fafea30cccde6013

SHA1
97ddc11501836b3394106e103b36be9ade840cfc

SHA256
8b442eea01c5dbed41b04e4879f3e7a8a5f29e954a9f93f8e50687499547616c

SHA512
92bdf67dfcfb78fb8da71a9afae21deb3b0e1ee7c0d25f70f897e5d6bb8a3af7cef7081d52061a8ecb557f62b7ab6bb1baab261901454093505c005a18ff4e65

Download Submit
memory/1792-9-0x000000013F6C0000-0x000000013FA14000-memory.dmp

Filesize
3.3MB

Download
memory/1792-3995-0x000000013F6C0000-0x000000013FA14000-memory.dmp

Filesize
3.3MB

Download
memory/1908-4007-0x000000013F6E0000-0x000000013FA34000-memory.dmp

Filesize
3.3MB

Download
memory/1908-119-0x000000013F6E0000-0x000000013FA34000-memory.dmp

Filesize
3.3MB

Download
memory/2416-22-0x000000013FD80000-0x00000001400D4000-memory.dmp

Filesize
3.3MB

Download
memory/2416-3997-0x000000013FD80000-0x00000001400D4000-memory.dmp

Filesize
3.3MB

Download
memory/2448-2818-0x000000013F250000-0x000000013F5A4000-memory.dmp

Filesize
3.3MB

Download
memory/2448-99-0x000000013F250000-0x000000013F5A4000-memory.dmp

Filesize
3.3MB

Download
memory/2448-4008-0x000000013F250000-0x000000013F5A4000-memory.dmp

Filesize
3.3MB

Download
memory/2512-4004-0x000000013FA20000-0x000000013FD74000-memory.dmp

Filesize
3.3MB

Download
memory/2512-2407-0x000000013FA20000-0x000000013FD74000-memory.dmp

Filesize
3.3MB

Download
memory/2512-78-0x000000013FA20000-0x000000013FD74000-memory.dmp

Filesize
3.3MB

Download
memory/2600-3998-0x000000013FF50000-0x00000001402A4000-memory.dmp

Filesize
3.3MB

Download
memory/2600-48-0x000000013FF50000-0x00000001402A4000-memory.dmp

Filesize
3.3MB

Download
memory/2624-73-0x000000013F140000-0x000000013F494000-memory.dmp

Filesize
3.3MB

Download
memory/2624-4002-0x000000013F140000-0x000000013F494000-memory.dmp

Filesize
3.3MB

Download
memory/2664-53-0x000000013F4B0000-0x000000013F804000-memory.dmp

Filesize
3.3MB

Download
memory/2664-3999-0x000000013F4B0000-0x000000013F804000-memory.dmp

Filesize
3.3MB

Download
memory/2704-4006-0x000000013F3D0000-0x000000013F724000-memory.dmp

Filesize
3.3MB

Download
memory/2704-86-0x000000013F3D0000-0x000000013F724000-memory.dmp

Filesize
3.3MB

Download
memory/2704-2408-0x000000013F3D0000-0x000000013F724000-memory.dmp

Filesize
3.3MB

Download
memory/2720-93-0x000000013F580000-0x000000013F8D4000-memory.dmp

Filesize
3.3MB

Download
memory/2720-4005-0x000000013F580000-0x000000013F8D4000-memory.dmp

Filesize
3.3MB

Download
memory/2744-4001-0x000000013F1A0000-0x000000013F4F4000-memory.dmp

Filesize
3.3MB

Download
memory/2744-62-0x000000013F1A0000-0x000000013F4F4000-memory.dmp

Filesize
3.3MB

Download
memory/2864-4000-0x000000013F6C0000-0x000000013FA14000-memory.dmp

Filesize
3.3MB

Download
memory/2864-67-0x000000013F6C0000-0x000000013FA14000-memory.dmp

Filesize
3.3MB

Download
memory/2868-81-0x000000013F990000-0x000000013FCE4000-memory.dmp

Filesize
3.3MB

Download
memory/2868-4003-0x000000013F990000-0x000000013FCE4000-memory.dmp

Filesize
3.3MB

Download
memory/2916-61-0x000000013F6C0000-0x000000013FA14000-memory.dmp

Filesize
3.3MB

Download
memory/2916-77-0x0000000002040000-0x0000000002394000-memory.dmp

Filesize
3.3MB

Download
memory/2916-1914-0x000000013F990000-0x000000013FCE4000-memory.dmp

Filesize
3.3MB

Download
memory/2916-19-0x000000013F190000-0x000000013F4E4000-memory.dmp

Filesize
3.3MB

Download
memory/2916-1-0x00000000001F0000-0x0000000000200000-memory.dmp

Filesize
64KB

Download
memory/2916-2484-0x000000013F580000-0x000000013F8D4000-memory.dmp

Filesize
3.3MB

Download
memory/2916-41-0x000000013F4B0000-0x000000013F804000-memory.dmp

Filesize
3.3MB

Download
memory/2916-3246-0x0000000002040000-0x0000000002394000-memory.dmp

Filesize
3.3MB

Download
memory/2916-58-0x000000013F990000-0x000000013FCE4000-memory.dmp

Filesize
3.3MB

Download
memory/2916-8-0x000000013F6C0000-0x000000013FA14000-memory.dmp

Filesize
3.3MB

Download
memory/2916-0-0x000000013FCF0000-0x0000000140044000-memory.dmp

Filesize
3.3MB

Download
memory/2916-1920-0x0000000002040000-0x0000000002394000-memory.dmp

Filesize
3.3MB

Download
memory/2916-80-0x000000013F1A0000-0x000000013F4F4000-memory.dmp

Filesize
3.3MB

Download
memory/2916-82-0x000000013F140000-0x000000013F494000-memory.dmp

Filesize
3.3MB

Download
memory/2916-83-0x000000013F250000-0x000000013F5A4000-memory.dmp

Filesize
3.3MB

Download
memory/2916-84-0x000000013F6E0000-0x000000013FA34000-memory.dmp

Filesize
3.3MB

Download
memory/2916-121-0x000000013FCF0000-0x0000000140044000-memory.dmp

Filesize
3.3MB

Download
memory/2916-90-0x000000013F580000-0x000000013F8D4000-memory.dmp

Filesize
3.3MB

Download
memory/2916-69-0x000000013F3D0000-0x000000013F724000-memory.dmp

Filesize
3.3MB

Download
memory/2916-25-0x0000000002040000-0x0000000002394000-memory.dmp

Filesize
3.3MB

Download
memory/3064-3996-0x000000013F190000-0x000000013F4E4000-memory.dmp

Filesize
3.3MB

Download
memory/3064-21-0x000000013F190000-0x000000013F4E4000-memory.dmp

Filesize
3.3MB

Download