xmrig | 0d3100d94e99fd9e9c1a98747ae43571f44037c3058fe99bbabdd811904b859d

Analysis

max time kernel
120s
max time network
122s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
12/05/2024, 20:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
Size

1.8MB
MD5

51931ebde0f1eb859843aafd09e161c0
SHA1

ebdc883199c90ca3cec76f4d259d9f604a4957c0
SHA256

0d3100d94e99fd9e9c1a98747ae43571f44037c3058fe99bbabdd811904b859d
SHA512

5d67e45e2e16c0603aac1d6f12f6f1134e27dd649e7a5e720786f472f6510d7aaed9c38a2575da480bf4885ddf2bcecada92ce881fd6dee27cffcfade1f84501
SSDEEP

49152:BezaTF8FcNkNdfE0pZ9ozt4wIQwNhXEAUkaDG40:BemTLkNdfE0pZrQO

Score

10^/10

xmrig miner upx

Malware Config

Signatures

xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
miner xmrig

XMRig Miner payload 64 IoCs

miner

resource	yara_rule
behavioral1/memory/1708-0-0x000000013F7A0000-0x000000013FAF4000-memory.dmp	xmrig
behavioral1/files/0x000c00000001342e-3.dat	xmrig
behavioral1/files/0x000700000001418c-18.dat	xmrig
behavioral1/files/0x0007000000014251-15.dat	xmrig
behavioral1/memory/2744-35-0x000000013F160000-0x000000013F4B4000-memory.dmp	xmrig
behavioral1/memory/1708-34-0x000000013F1B0000-0x000000013F504000-memory.dmp	xmrig
behavioral1/memory/2608-33-0x000000013FCB0000-0x0000000140004000-memory.dmp	xmrig
behavioral1/memory/2156-32-0x000000013FE20000-0x0000000140174000-memory.dmp	xmrig
behavioral1/memory/2040-31-0x000000013F1B0000-0x000000013F504000-memory.dmp	xmrig
behavioral1/files/0x0038000000013adc-8.dat	xmrig
behavioral1/memory/1144-29-0x000000013FED0000-0x0000000140224000-memory.dmp	xmrig
behavioral1/files/0x000700000001431b-25.dat	xmrig
behavioral1/files/0x000900000001432f-36.dat	xmrig
behavioral1/files/0x0006000000014bd7-54.dat	xmrig
behavioral1/memory/1708-60-0x0000000001E70000-0x00000000021C4000-memory.dmp	xmrig
behavioral1/files/0x0006000000014c2d-67.dat	xmrig
behavioral1/files/0x0006000000014f57-75.dat	xmrig
behavioral1/memory/2580-83-0x000000013F620000-0x000000013F974000-memory.dmp	xmrig
behavioral1/memory/1708-81-0x000000013F240000-0x000000013F594000-memory.dmp	xmrig
behavioral1/memory/2508-80-0x000000013F240000-0x000000013F594000-memory.dmp	xmrig
behavioral1/memory/2092-97-0x000000013FA90000-0x000000013FDE4000-memory.dmp	xmrig
behavioral1/files/0x0006000000015083-101.dat	xmrig
behavioral1/files/0x00060000000153ee-111.dat	xmrig
behavioral1/files/0x0006000000015b85-141.dat	xmrig
behavioral1/files/0x0006000000015d0a-186.dat	xmrig
behavioral1/memory/1708-431-0x000000013F7A0000-0x000000013FAF4000-memory.dmp	xmrig
behavioral1/files/0x0006000000015cf8-181.dat	xmrig
behavioral1/files/0x0006000000015cee-176.dat	xmrig
behavioral1/files/0x0006000000015ce3-171.dat	xmrig
behavioral1/files/0x0006000000015cd2-166.dat	xmrig
behavioral1/files/0x0006000000015cc5-161.dat	xmrig
behavioral1/files/0x0006000000015cb1-156.dat	xmrig
behavioral1/files/0x0006000000015ca8-151.dat	xmrig
behavioral1/files/0x0006000000015c9a-146.dat	xmrig
behavioral1/files/0x0006000000015b50-136.dat	xmrig
behavioral1/files/0x0006000000015ae3-131.dat	xmrig
behavioral1/files/0x0006000000015662-121.dat	xmrig
behavioral1/files/0x00060000000158d9-126.dat	xmrig
behavioral1/files/0x000600000001565a-116.dat	xmrig
behavioral1/files/0x00060000000150d9-106.dat	xmrig
behavioral1/memory/1448-89-0x000000013FBB0000-0x000000013FF04000-memory.dmp	xmrig
behavioral1/files/0x0035000000013f2c-93.dat	xmrig
behavioral1/files/0x000600000001507a-87.dat	xmrig
behavioral1/memory/2632-66-0x000000013F2E0000-0x000000013F634000-memory.dmp	xmrig
behavioral1/memory/2820-65-0x000000013F680000-0x000000013F9D4000-memory.dmp	xmrig
behavioral1/memory/2644-64-0x000000013FC20000-0x000000013FF74000-memory.dmp	xmrig
behavioral1/files/0x0006000000014b1c-57.dat	xmrig
behavioral1/files/0x0007000000014a60-58.dat	xmrig
behavioral1/memory/2728-53-0x000000013FB40000-0x000000013FE94000-memory.dmp	xmrig
behavioral1/memory/2592-45-0x000000013F5A0000-0x000000013F8F4000-memory.dmp	xmrig
behavioral1/files/0x0008000000014367-44.dat	xmrig
behavioral1/memory/2592-2377-0x000000013F5A0000-0x000000013F8F4000-memory.dmp	xmrig
behavioral1/memory/2728-2378-0x000000013FB40000-0x000000013FE94000-memory.dmp	xmrig
behavioral1/memory/2644-2600-0x000000013FC20000-0x000000013FF74000-memory.dmp	xmrig
behavioral1/memory/1448-2992-0x000000013FBB0000-0x000000013FF04000-memory.dmp	xmrig
behavioral1/memory/1144-3995-0x000000013FED0000-0x0000000140224000-memory.dmp	xmrig
behavioral1/memory/2156-3999-0x000000013FE20000-0x0000000140174000-memory.dmp	xmrig
behavioral1/memory/2040-3998-0x000000013F1B0000-0x000000013F504000-memory.dmp	xmrig
behavioral1/memory/2608-3997-0x000000013FCB0000-0x0000000140004000-memory.dmp	xmrig
behavioral1/memory/2744-3996-0x000000013F160000-0x000000013F4B4000-memory.dmp	xmrig
behavioral1/memory/2632-4004-0x000000013F2E0000-0x000000013F634000-memory.dmp	xmrig
behavioral1/memory/2508-4006-0x000000013F240000-0x000000013F594000-memory.dmp	xmrig
behavioral1/memory/2580-4005-0x000000013F620000-0x000000013F974000-memory.dmp	xmrig
behavioral1/memory/2644-4003-0x000000013FC20000-0x000000013FF74000-memory.dmp	xmrig

Executes dropped EXE 64 IoCs

pid	Process
1144	elgGGCg.exe
2744	XeuNOPk.exe
2040	dNKFEkw.exe
2156	VsuQGqS.exe
2608	wqlhDhC.exe
2592	NYcxykv.exe
2728	apQKKzB.exe
2820	fdvEakn.exe
2644	DPBxEHD.exe
2632	seruqmD.exe
2580	LyLnImG.exe
2508	mZgSHdD.exe
1448	fgbLPbH.exe
2092	MKJDxyJ.exe
2336	EdWDLqL.exe
2760	RcpYYvv.exe
2792	vqFIrYm.exe
1700	DgTapDb.exe
2748	ihabMth.exe
2936	zExePuN.exe
2996	biNpYyV.exe
2032	yhsnYwN.exe
1536	RnppxWo.exe
1784	ychPHLQ.exe
1732	klMpPMH.exe
2388	OwFhyQy.exe
2056	TjuilQu.exe
2652	aXldeBG.exe
2352	NZtIMTF.exe
600	fBipWEx.exe
404	QMVjXEy.exe
2136	GjvomVS.exe
1496	UfbWoDK.exe
2120	eLNUvqP.exe
2084	gIAYznB.exe
1792	EKdVaTR.exe
3040	jMmqzEA.exe
1148	XkGjEzM.exe
1752	fmQNkli.exe
2264	amJpoLc.exe
1836	hzxAPTm.exe
1600	XbbRSjc.exe
1328	aXuoLKx.exe
1896	uRIvvzd.exe
1972	LLyLsfx.exe
1032	BHKZHJA.exe
936	YHKYGQQ.exe
3028	EEmYXyC.exe
1648	muktiwB.exe
320	ZuHejfY.exe
1780	sMObOEp.exe
2928	zRiAwoO.exe
2420	uNKXbEl.exe
2192	RbPZxvU.exe
1528	DdxjAaP.exe
1680	xHqvmRc.exe
2364	GUMxaDi.exe
1616	cpNsQPc.exe
1620	GZcBDXM.exe
1948	sbsaYuR.exe
2664	NrNAERN.exe
2860	qKYBFhx.exe
2732	FLqNhqp.exe
2876	tdAmkCs.exe

Loads dropped DLL 64 IoCs

pid	Process
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe

UPX packed file 64 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral1/memory/1708-0-0x000000013F7A0000-0x000000013FAF4000-memory.dmp	upx
behavioral1/files/0x000c00000001342e-3.dat	upx
behavioral1/files/0x000700000001418c-18.dat	upx
behavioral1/files/0x0007000000014251-15.dat	upx
behavioral1/memory/2744-35-0x000000013F160000-0x000000013F4B4000-memory.dmp	upx
behavioral1/memory/2608-33-0x000000013FCB0000-0x0000000140004000-memory.dmp	upx
behavioral1/memory/2156-32-0x000000013FE20000-0x0000000140174000-memory.dmp	upx
behavioral1/memory/2040-31-0x000000013F1B0000-0x000000013F504000-memory.dmp	upx
behavioral1/files/0x0038000000013adc-8.dat	upx
behavioral1/memory/1144-29-0x000000013FED0000-0x0000000140224000-memory.dmp	upx
behavioral1/files/0x000700000001431b-25.dat	upx
behavioral1/files/0x000900000001432f-36.dat	upx
behavioral1/files/0x0006000000014bd7-54.dat	upx
behavioral1/files/0x0006000000014c2d-67.dat	upx
behavioral1/files/0x0006000000014f57-75.dat	upx
behavioral1/memory/2580-83-0x000000013F620000-0x000000013F974000-memory.dmp	upx
behavioral1/memory/2508-80-0x000000013F240000-0x000000013F594000-memory.dmp	upx
behavioral1/memory/2092-97-0x000000013FA90000-0x000000013FDE4000-memory.dmp	upx
behavioral1/files/0x0006000000015083-101.dat	upx
behavioral1/files/0x00060000000153ee-111.dat	upx
behavioral1/files/0x0006000000015b85-141.dat	upx
behavioral1/files/0x0006000000015d0a-186.dat	upx
behavioral1/memory/1708-431-0x000000013F7A0000-0x000000013FAF4000-memory.dmp	upx
behavioral1/files/0x0006000000015cf8-181.dat	upx
behavioral1/files/0x0006000000015cee-176.dat	upx
behavioral1/files/0x0006000000015ce3-171.dat	upx
behavioral1/files/0x0006000000015cd2-166.dat	upx
behavioral1/files/0x0006000000015cc5-161.dat	upx
behavioral1/files/0x0006000000015cb1-156.dat	upx
behavioral1/files/0x0006000000015ca8-151.dat	upx
behavioral1/files/0x0006000000015c9a-146.dat	upx
behavioral1/files/0x0006000000015b50-136.dat	upx
behavioral1/files/0x0006000000015ae3-131.dat	upx
behavioral1/files/0x0006000000015662-121.dat	upx
behavioral1/files/0x00060000000158d9-126.dat	upx
behavioral1/files/0x000600000001565a-116.dat	upx
behavioral1/files/0x00060000000150d9-106.dat	upx
behavioral1/memory/1448-89-0x000000013FBB0000-0x000000013FF04000-memory.dmp	upx
behavioral1/files/0x0035000000013f2c-93.dat	upx
behavioral1/files/0x000600000001507a-87.dat	upx
behavioral1/memory/2632-66-0x000000013F2E0000-0x000000013F634000-memory.dmp	upx
behavioral1/memory/2820-65-0x000000013F680000-0x000000013F9D4000-memory.dmp	upx
behavioral1/memory/2644-64-0x000000013FC20000-0x000000013FF74000-memory.dmp	upx
behavioral1/files/0x0006000000014b1c-57.dat	upx
behavioral1/files/0x0007000000014a60-58.dat	upx
behavioral1/memory/2728-53-0x000000013FB40000-0x000000013FE94000-memory.dmp	upx
behavioral1/memory/2592-45-0x000000013F5A0000-0x000000013F8F4000-memory.dmp	upx
behavioral1/files/0x0008000000014367-44.dat	upx
behavioral1/memory/2592-2377-0x000000013F5A0000-0x000000013F8F4000-memory.dmp	upx
behavioral1/memory/2728-2378-0x000000013FB40000-0x000000013FE94000-memory.dmp	upx
behavioral1/memory/2644-2600-0x000000013FC20000-0x000000013FF74000-memory.dmp	upx
behavioral1/memory/1448-2992-0x000000013FBB0000-0x000000013FF04000-memory.dmp	upx
behavioral1/memory/1144-3995-0x000000013FED0000-0x0000000140224000-memory.dmp	upx
behavioral1/memory/2156-3999-0x000000013FE20000-0x0000000140174000-memory.dmp	upx
behavioral1/memory/2040-3998-0x000000013F1B0000-0x000000013F504000-memory.dmp	upx
behavioral1/memory/2608-3997-0x000000013FCB0000-0x0000000140004000-memory.dmp	upx
behavioral1/memory/2744-3996-0x000000013F160000-0x000000013F4B4000-memory.dmp	upx
behavioral1/memory/2632-4004-0x000000013F2E0000-0x000000013F634000-memory.dmp	upx
behavioral1/memory/2508-4006-0x000000013F240000-0x000000013F594000-memory.dmp	upx
behavioral1/memory/2580-4005-0x000000013F620000-0x000000013F974000-memory.dmp	upx
behavioral1/memory/2644-4003-0x000000013FC20000-0x000000013FF74000-memory.dmp	upx
behavioral1/memory/2820-4002-0x000000013F680000-0x000000013F9D4000-memory.dmp	upx
behavioral1/memory/2728-4001-0x000000013FB40000-0x000000013FE94000-memory.dmp	upx
behavioral1/memory/2592-4000-0x000000013F5A0000-0x000000013F8F4000-memory.dmp	upx

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\System\uLEBdjf.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\RjAfiux.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\tdvVXpj.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\agxWyMu.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\YtUVvOU.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\GsxHSoz.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\kKeJeWn.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\ZCshgKV.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\pHChqhU.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\McfpZJR.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\MQbCegP.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\eCTEpnV.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\XUWlrEn.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\tuRlFpg.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\aLqZqAn.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\ZMwMFGg.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\kwZHQSy.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\gyufQlg.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\arzRsga.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\NyZhgYd.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\dQkzPHU.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\tpvsjuV.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\oLKpKee.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\UdSMghU.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\yWQWgWc.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\vYsjzcu.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\jVisXKX.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\NCzgyYq.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\abfvApd.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\ZZRqHgI.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\QVVYJRy.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\fynTVTs.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\WnYIvzF.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\TgkHxDI.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\hiQLyhJ.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\dTSvLxt.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\PkjuBPS.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\iLJqxFP.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\BubmRRX.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\OCAaJfD.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\EuHKXBh.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\aACKZjI.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\CqvFrqQ.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\HoNSlae.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\jYNiMFz.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\QxtRHpv.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\CVYxMOK.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\BxVkZaN.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\SSHqgZl.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\DVYYyZj.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\rZDWees.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\mgjJdCU.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\zbSbfkK.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\LNMbSfk.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\BlVYQyG.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\FEzpzgh.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\UqWLktw.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\xUQGQtZ.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\NZRoNIT.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\sZewsww.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\takuQuc.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\dgCuwwA.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\sOqMqQD.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
File created	C:\Windows\System\ywhbyAV.exe	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1708 wrote to memory of 1144	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	29
PID 1708 wrote to memory of 1144	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	29
PID 1708 wrote to memory of 1144	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	29
PID 1708 wrote to memory of 2040	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	30
PID 1708 wrote to memory of 2040	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	30
PID 1708 wrote to memory of 2040	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	30
PID 1708 wrote to memory of 2744	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	31
PID 1708 wrote to memory of 2744	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	31
PID 1708 wrote to memory of 2744	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	31
PID 1708 wrote to memory of 2156	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	32
PID 1708 wrote to memory of 2156	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	32
PID 1708 wrote to memory of 2156	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	32
PID 1708 wrote to memory of 2608	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	33
PID 1708 wrote to memory of 2608	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	33
PID 1708 wrote to memory of 2608	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	33
PID 1708 wrote to memory of 2592	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	34
PID 1708 wrote to memory of 2592	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	34
PID 1708 wrote to memory of 2592	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	34
PID 1708 wrote to memory of 2728	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	35
PID 1708 wrote to memory of 2728	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	35
PID 1708 wrote to memory of 2728	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	35
PID 1708 wrote to memory of 2644	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	36
PID 1708 wrote to memory of 2644	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	36
PID 1708 wrote to memory of 2644	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	36
PID 1708 wrote to memory of 2820	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	37
PID 1708 wrote to memory of 2820	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	37
PID 1708 wrote to memory of 2820	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	37
PID 1708 wrote to memory of 2632	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	38
PID 1708 wrote to memory of 2632	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	38
PID 1708 wrote to memory of 2632	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	38
PID 1708 wrote to memory of 2508	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	39
PID 1708 wrote to memory of 2508	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	39
PID 1708 wrote to memory of 2508	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	39
PID 1708 wrote to memory of 2580	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	40
PID 1708 wrote to memory of 2580	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	40
PID 1708 wrote to memory of 2580	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	40
PID 1708 wrote to memory of 1448	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	41
PID 1708 wrote to memory of 1448	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	41
PID 1708 wrote to memory of 1448	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	41
PID 1708 wrote to memory of 2092	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	42
PID 1708 wrote to memory of 2092	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	42
PID 1708 wrote to memory of 2092	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	42
PID 1708 wrote to memory of 2336	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	43
PID 1708 wrote to memory of 2336	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	43
PID 1708 wrote to memory of 2336	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	43
PID 1708 wrote to memory of 2760	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	44
PID 1708 wrote to memory of 2760	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	44
PID 1708 wrote to memory of 2760	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	44
PID 1708 wrote to memory of 2792	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	45
PID 1708 wrote to memory of 2792	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	45
PID 1708 wrote to memory of 2792	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	45
PID 1708 wrote to memory of 1700	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	46
PID 1708 wrote to memory of 1700	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	46
PID 1708 wrote to memory of 1700	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	46
PID 1708 wrote to memory of 2748	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	47
PID 1708 wrote to memory of 2748	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	47
PID 1708 wrote to memory of 2748	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	47
PID 1708 wrote to memory of 2936	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	48
PID 1708 wrote to memory of 2936	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	48
PID 1708 wrote to memory of 2936	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	48
PID 1708 wrote to memory of 2996	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	49
PID 1708 wrote to memory of 2996	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	49
PID 1708 wrote to memory of 2996	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	49
PID 1708 wrote to memory of 2032	1708	51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe	50

C:\Users\Admin\AppData\Local\Temp\51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\51931ebde0f1eb859843aafd09e161c0_NeikiAnalytics.exe"
1⤵
- Loads dropped DLL
- Drops file in Windows directory
- Suspicious use of WriteProcessMemory
PID:1708
- C:\Windows\System\elgGGCg.exe
  C:\Windows\System\elgGGCg.exe
  2⤵
  - Executes dropped EXE
  PID:1144
- C:\Windows\System\dNKFEkw.exe
  C:\Windows\System\dNKFEkw.exe
  2⤵
  - Executes dropped EXE
  PID:2040
- C:\Windows\System\XeuNOPk.exe
  C:\Windows\System\XeuNOPk.exe
  2⤵
  - Executes dropped EXE
  PID:2744
- C:\Windows\System\VsuQGqS.exe
  C:\Windows\System\VsuQGqS.exe
  2⤵
  - Executes dropped EXE
  PID:2156
- C:\Windows\System\wqlhDhC.exe
  C:\Windows\System\wqlhDhC.exe
  2⤵
  - Executes dropped EXE
  PID:2608
- C:\Windows\System\NYcxykv.exe
  C:\Windows\System\NYcxykv.exe
  2⤵
  - Executes dropped EXE
  PID:2592
- C:\Windows\System\apQKKzB.exe
  C:\Windows\System\apQKKzB.exe
  2⤵
  - Executes dropped EXE
  PID:2728
- C:\Windows\System\DPBxEHD.exe
  C:\Windows\System\DPBxEHD.exe
  2⤵
  - Executes dropped EXE
  PID:2644
- C:\Windows\System\fdvEakn.exe
  C:\Windows\System\fdvEakn.exe
  2⤵
  - Executes dropped EXE
  PID:2820
- C:\Windows\System\seruqmD.exe
  C:\Windows\System\seruqmD.exe
  2⤵
  - Executes dropped EXE
  PID:2632
- C:\Windows\System\mZgSHdD.exe
  C:\Windows\System\mZgSHdD.exe
  2⤵
  - Executes dropped EXE
  PID:2508
- C:\Windows\System\LyLnImG.exe
  C:\Windows\System\LyLnImG.exe
  2⤵
  - Executes dropped EXE
  PID:2580
- C:\Windows\System\fgbLPbH.exe
  C:\Windows\System\fgbLPbH.exe
  2⤵
  - Executes dropped EXE
  PID:1448
- C:\Windows\System\MKJDxyJ.exe
  C:\Windows\System\MKJDxyJ.exe
  2⤵
  - Executes dropped EXE
  PID:2092
- C:\Windows\System\EdWDLqL.exe
  C:\Windows\System\EdWDLqL.exe
  2⤵
  - Executes dropped EXE
  PID:2336
- C:\Windows\System\RcpYYvv.exe
  C:\Windows\System\RcpYYvv.exe
  2⤵
  - Executes dropped EXE
  PID:2760
- C:\Windows\System\vqFIrYm.exe
  C:\Windows\System\vqFIrYm.exe
  2⤵
  - Executes dropped EXE
  PID:2792
- C:\Windows\System\DgTapDb.exe
  C:\Windows\System\DgTapDb.exe
  2⤵
  - Executes dropped EXE
  PID:1700
- C:\Windows\System\ihabMth.exe
  C:\Windows\System\ihabMth.exe
  2⤵
  - Executes dropped EXE
  PID:2748
- C:\Windows\System\zExePuN.exe
  C:\Windows\System\zExePuN.exe
  2⤵
  - Executes dropped EXE
  PID:2936
- C:\Windows\System\biNpYyV.exe
  C:\Windows\System\biNpYyV.exe
  2⤵
  - Executes dropped EXE
  PID:2996
- C:\Windows\System\yhsnYwN.exe
  C:\Windows\System\yhsnYwN.exe
  2⤵
  - Executes dropped EXE
  PID:2032
- C:\Windows\System\RnppxWo.exe
  C:\Windows\System\RnppxWo.exe
  2⤵
  - Executes dropped EXE
  PID:1536
- C:\Windows\System\ychPHLQ.exe
  C:\Windows\System\ychPHLQ.exe
  2⤵
  - Executes dropped EXE
  PID:1784
- C:\Windows\System\klMpPMH.exe
  C:\Windows\System\klMpPMH.exe
  2⤵
  - Executes dropped EXE
  PID:1732
- C:\Windows\System\OwFhyQy.exe
  C:\Windows\System\OwFhyQy.exe
  2⤵
  - Executes dropped EXE
  PID:2388
- C:\Windows\System\TjuilQu.exe
  C:\Windows\System\TjuilQu.exe
  2⤵
  - Executes dropped EXE
  PID:2056
- C:\Windows\System\aXldeBG.exe
  C:\Windows\System\aXldeBG.exe
  2⤵
  - Executes dropped EXE
  PID:2652
- C:\Windows\System\NZtIMTF.exe
  C:\Windows\System\NZtIMTF.exe
  2⤵
  - Executes dropped EXE
  PID:2352
- C:\Windows\System\fBipWEx.exe
  C:\Windows\System\fBipWEx.exe
  2⤵
  - Executes dropped EXE
  PID:600
- C:\Windows\System\QMVjXEy.exe
  C:\Windows\System\QMVjXEy.exe
  2⤵
  - Executes dropped EXE
  PID:404
- C:\Windows\System\GjvomVS.exe
  C:\Windows\System\GjvomVS.exe
  2⤵
  - Executes dropped EXE
  PID:2136
- C:\Windows\System\UfbWoDK.exe
  C:\Windows\System\UfbWoDK.exe
  2⤵
  - Executes dropped EXE
  PID:1496
- C:\Windows\System\eLNUvqP.exe
  C:\Windows\System\eLNUvqP.exe
  2⤵
  - Executes dropped EXE
  PID:2120
- C:\Windows\System\gIAYznB.exe
  C:\Windows\System\gIAYznB.exe
  2⤵
  - Executes dropped EXE
  PID:2084
- C:\Windows\System\EKdVaTR.exe
  C:\Windows\System\EKdVaTR.exe
  2⤵
  - Executes dropped EXE
  PID:1792
- C:\Windows\System\jMmqzEA.exe
  C:\Windows\System\jMmqzEA.exe
  2⤵
  - Executes dropped EXE
  PID:3040
- C:\Windows\System\XkGjEzM.exe
  C:\Windows\System\XkGjEzM.exe
  2⤵
  - Executes dropped EXE
  PID:1148
- C:\Windows\System\fmQNkli.exe
  C:\Windows\System\fmQNkli.exe
  2⤵
  - Executes dropped EXE
  PID:1752
- C:\Windows\System\amJpoLc.exe
  C:\Windows\System\amJpoLc.exe
  2⤵
  - Executes dropped EXE
  PID:2264
- C:\Windows\System\hzxAPTm.exe
  C:\Windows\System\hzxAPTm.exe
  2⤵
  - Executes dropped EXE
  PID:1836
- C:\Windows\System\XbbRSjc.exe
  C:\Windows\System\XbbRSjc.exe
  2⤵
  - Executes dropped EXE
  PID:1600
- C:\Windows\System\aXuoLKx.exe
  C:\Windows\System\aXuoLKx.exe
  2⤵
  - Executes dropped EXE
  PID:1328
- C:\Windows\System\uRIvvzd.exe
  C:\Windows\System\uRIvvzd.exe
  2⤵
  - Executes dropped EXE
  PID:1896
- C:\Windows\System\LLyLsfx.exe
  C:\Windows\System\LLyLsfx.exe
  2⤵
  - Executes dropped EXE
  PID:1972
- C:\Windows\System\BHKZHJA.exe
  C:\Windows\System\BHKZHJA.exe
  2⤵
  - Executes dropped EXE
  PID:1032
- C:\Windows\System\YHKYGQQ.exe
  C:\Windows\System\YHKYGQQ.exe
  2⤵
  - Executes dropped EXE
  PID:936
- C:\Windows\System\EEmYXyC.exe
  C:\Windows\System\EEmYXyC.exe
  2⤵
  - Executes dropped EXE
  PID:3028
- C:\Windows\System\muktiwB.exe
  C:\Windows\System\muktiwB.exe
  2⤵
  - Executes dropped EXE
  PID:1648
- C:\Windows\System\ZuHejfY.exe
  C:\Windows\System\ZuHejfY.exe
  2⤵
  - Executes dropped EXE
  PID:320
- C:\Windows\System\sMObOEp.exe
  C:\Windows\System\sMObOEp.exe
  2⤵
  - Executes dropped EXE
  PID:1780
- C:\Windows\System\zRiAwoO.exe
  C:\Windows\System\zRiAwoO.exe
  2⤵
  - Executes dropped EXE
  PID:2928
- C:\Windows\System\uNKXbEl.exe
  C:\Windows\System\uNKXbEl.exe
  2⤵
  - Executes dropped EXE
  PID:2420
- C:\Windows\System\RbPZxvU.exe
  C:\Windows\System\RbPZxvU.exe
  2⤵
  - Executes dropped EXE
  PID:2192
- C:\Windows\System\DdxjAaP.exe
  C:\Windows\System\DdxjAaP.exe
  2⤵
  - Executes dropped EXE
  PID:1528
- C:\Windows\System\xHqvmRc.exe
  C:\Windows\System\xHqvmRc.exe
  2⤵
  - Executes dropped EXE
  PID:1680
- C:\Windows\System\GUMxaDi.exe
  C:\Windows\System\GUMxaDi.exe
  2⤵
  - Executes dropped EXE
  PID:2364
- C:\Windows\System\cpNsQPc.exe
  C:\Windows\System\cpNsQPc.exe
  2⤵
  - Executes dropped EXE
  PID:1616
- C:\Windows\System\GZcBDXM.exe
  C:\Windows\System\GZcBDXM.exe
  2⤵
  - Executes dropped EXE
  PID:1620
- C:\Windows\System\sbsaYuR.exe
  C:\Windows\System\sbsaYuR.exe
  2⤵
  - Executes dropped EXE
  PID:1948
- C:\Windows\System\NrNAERN.exe
  C:\Windows\System\NrNAERN.exe
  2⤵
  - Executes dropped EXE
  PID:2664
- C:\Windows\System\qKYBFhx.exe
  C:\Windows\System\qKYBFhx.exe
  2⤵
  - Executes dropped EXE
  PID:2860
- C:\Windows\System\FLqNhqp.exe
  C:\Windows\System\FLqNhqp.exe
  2⤵
  - Executes dropped EXE
  PID:2732
- C:\Windows\System\tdAmkCs.exe
  C:\Windows\System\tdAmkCs.exe
  2⤵
  - Executes dropped EXE
  PID:2876
- C:\Windows\System\ItHgwbP.exe
  C:\Windows\System\ItHgwbP.exe
  2⤵
  PID:2828
- C:\Windows\System\UTUNyYn.exe
  C:\Windows\System\UTUNyYn.exe
  2⤵
  PID:2532
- C:\Windows\System\intYlPQ.exe
  C:\Windows\System\intYlPQ.exe
  2⤵
  PID:2476
- C:\Windows\System\ogGcLMI.exe
  C:\Windows\System\ogGcLMI.exe
  2⤵
  PID:2676
- C:\Windows\System\iVpOKDT.exe
  C:\Windows\System\iVpOKDT.exe
  2⤵
  PID:2116
- C:\Windows\System\AdhxmPe.exe
  C:\Windows\System\AdhxmPe.exe
  2⤵
  PID:2416
- C:\Windows\System\OGklHXT.exe
  C:\Windows\System\OGklHXT.exe
  2⤵
  PID:2448
- C:\Windows\System\RDGQyKF.exe
  C:\Windows\System\RDGQyKF.exe
  2⤵
  PID:2712
- C:\Windows\System\PtsqhGq.exe
  C:\Windows\System\PtsqhGq.exe
  2⤵
  PID:1592
- C:\Windows\System\JKgSoGc.exe
  C:\Windows\System\JKgSoGc.exe
  2⤵
  PID:2832
- C:\Windows\System\mNCnmav.exe
  C:\Windows\System\mNCnmav.exe
  2⤵
  PID:1356
- C:\Windows\System\bnlPRbG.exe
  C:\Windows\System\bnlPRbG.exe
  2⤵
  PID:2232
- C:\Windows\System\lJBgIoQ.exe
  C:\Windows\System\lJBgIoQ.exe
  2⤵
  PID:1872
- C:\Windows\System\jYNiMFz.exe
  C:\Windows\System\jYNiMFz.exe
  2⤵
  PID:2128
- C:\Windows\System\Yviknhv.exe
  C:\Windows\System\Yviknhv.exe
  2⤵
  PID:2324
- C:\Windows\System\ldHujqk.exe
  C:\Windows\System\ldHujqk.exe
  2⤵
  PID:452
- C:\Windows\System\xIuFfiF.exe
  C:\Windows\System\xIuFfiF.exe
  2⤵
  PID:1008
- C:\Windows\System\BTlpXRV.exe
  C:\Windows\System\BTlpXRV.exe
  2⤵
  PID:1868
- C:\Windows\System\RNfmGuR.exe
  C:\Windows\System\RNfmGuR.exe
  2⤵
  PID:1112
- C:\Windows\System\sjpFQgJ.exe
  C:\Windows\System\sjpFQgJ.exe
  2⤵
  PID:2432
- C:\Windows\System\jNsPfkA.exe
  C:\Windows\System\jNsPfkA.exe
  2⤵
  PID:796
- C:\Windows\System\pOQBBEU.exe
  C:\Windows\System\pOQBBEU.exe
  2⤵
  PID:2280
- C:\Windows\System\OrvjFXf.exe
  C:\Windows\System\OrvjFXf.exe
  2⤵
  PID:1636
- C:\Windows\System\CeWRygW.exe
  C:\Windows\System\CeWRygW.exe
  2⤵
  PID:1052
- C:\Windows\System\FqNRNMj.exe
  C:\Windows\System\FqNRNMj.exe
  2⤵
  PID:1332
- C:\Windows\System\ONwdJSX.exe
  C:\Windows\System\ONwdJSX.exe
  2⤵
  PID:2072
- C:\Windows\System\CgGSmQi.exe
  C:\Windows\System\CgGSmQi.exe
  2⤵
  PID:896
- C:\Windows\System\rptprAF.exe
  C:\Windows\System\rptprAF.exe
  2⤵
  PID:1888
- C:\Windows\System\JHHkGyB.exe
  C:\Windows\System\JHHkGyB.exe
  2⤵
  PID:2200
- C:\Windows\System\XedyBqo.exe
  C:\Windows\System\XedyBqo.exe
  2⤵
  PID:2212
- C:\Windows\System\EzoThAf.exe
  C:\Windows\System\EzoThAf.exe
  2⤵
  PID:820
- C:\Windows\System\fNcUmjm.exe
  C:\Windows\System\fNcUmjm.exe
  2⤵
  PID:2716
- C:\Windows\System\ATAGRPo.exe
  C:\Windows\System\ATAGRPo.exe
  2⤵
  PID:2228
- C:\Windows\System\oeyfInW.exe
  C:\Windows\System\oeyfInW.exe
  2⤵
  PID:2012
- C:\Windows\System\atNyqEQ.exe
  C:\Windows\System\atNyqEQ.exe
  2⤵
  PID:2884
- C:\Windows\System\AyXHSZi.exe
  C:\Windows\System\AyXHSZi.exe
  2⤵
  PID:2720
- C:\Windows\System\mtmPkNT.exe
  C:\Windows\System\mtmPkNT.exe
  2⤵
  PID:1056
- C:\Windows\System\XIiVWGG.exe
  C:\Windows\System\XIiVWGG.exe
  2⤵
  PID:2456
- C:\Windows\System\vBQxKnV.exe
  C:\Windows\System\vBQxKnV.exe
  2⤵
  PID:3020
- C:\Windows\System\CvRzSDr.exe
  C:\Windows\System\CvRzSDr.exe
  2⤵
  PID:2004
- C:\Windows\System\IQCuqXS.exe
  C:\Windows\System\IQCuqXS.exe
  2⤵
  PID:2784
- C:\Windows\System\NpeWKWK.exe
  C:\Windows\System\NpeWKWK.exe
  2⤵
  PID:3004
- C:\Windows\System\qdZWQnX.exe
  C:\Windows\System\qdZWQnX.exe
  2⤵
  PID:2344
- C:\Windows\System\mzNUVOX.exe
  C:\Windows\System\mzNUVOX.exe
  2⤵
  PID:1552
- C:\Windows\System\UsbDpqa.exe
  C:\Windows\System\UsbDpqa.exe
  2⤵
  PID:2220
- C:\Windows\System\NbuMrbn.exe
  C:\Windows\System\NbuMrbn.exe
  2⤵
  PID:2444
- C:\Windows\System\hpNcMTP.exe
  C:\Windows\System\hpNcMTP.exe
  2⤵
  PID:560
- C:\Windows\System\RMFLwHJ.exe
  C:\Windows\System\RMFLwHJ.exe
  2⤵
  PID:924
- C:\Windows\System\xrPDQWj.exe
  C:\Windows\System\xrPDQWj.exe
  2⤵
  PID:1152
- C:\Windows\System\NSIbtay.exe
  C:\Windows\System\NSIbtay.exe
  2⤵
  PID:972
- C:\Windows\System\iYexwad.exe
  C:\Windows\System\iYexwad.exe
  2⤵
  PID:1360
- C:\Windows\System\VbztYpd.exe
  C:\Windows\System\VbztYpd.exe
  2⤵
  PID:1040
- C:\Windows\System\OyGanxS.exe
  C:\Windows\System\OyGanxS.exe
  2⤵
  PID:976
- C:\Windows\System\yLldZHW.exe
  C:\Windows\System\yLldZHW.exe
  2⤵
  PID:2164
- C:\Windows\System\clYOZqL.exe
  C:\Windows\System\clYOZqL.exe
  2⤵
  PID:2412
- C:\Windows\System\UhqgFXl.exe
  C:\Windows\System\UhqgFXl.exe
  2⤵
  PID:1248
- C:\Windows\System\iLJqxFP.exe
  C:\Windows\System\iLJqxFP.exe
  2⤵
  PID:2576
- C:\Windows\System\pAKpttS.exe
  C:\Windows\System\pAKpttS.exe
  2⤵
  PID:1176
- C:\Windows\System\dRwCubm.exe
  C:\Windows\System\dRwCubm.exe
  2⤵
  PID:2112
- C:\Windows\System\ZTpdVrw.exe
  C:\Windows\System\ZTpdVrw.exe
  2⤵
  PID:2796
- C:\Windows\System\AhHCuZx.exe
  C:\Windows\System\AhHCuZx.exe
  2⤵
  PID:2736
- C:\Windows\System\moGPJJa.exe
  C:\Windows\System\moGPJJa.exe
  2⤵
  PID:1520
- C:\Windows\System\OCCOOOQ.exe
  C:\Windows\System\OCCOOOQ.exe
  2⤵
  PID:1296
- C:\Windows\System\ehfLVwV.exe
  C:\Windows\System\ehfLVwV.exe
  2⤵
  PID:1796
- C:\Windows\System\eRSRnUQ.exe
  C:\Windows\System\eRSRnUQ.exe
  2⤵
  PID:2808
- C:\Windows\System\RVQPOvG.exe
  C:\Windows\System\RVQPOvG.exe
  2⤵
  PID:1740
- C:\Windows\System\agdlHGX.exe
  C:\Windows\System\agdlHGX.exe
  2⤵
  PID:1844
- C:\Windows\System\jDJLimb.exe
  C:\Windows\System\jDJLimb.exe
  2⤵
  PID:1256
- C:\Windows\System\iVSgIWI.exe
  C:\Windows\System\iVSgIWI.exe
  2⤵
  PID:1900
- C:\Windows\System\yULpLOH.exe
  C:\Windows\System\yULpLOH.exe
  2⤵
  PID:816
- C:\Windows\System\uLEBdjf.exe
  C:\Windows\System\uLEBdjf.exe
  2⤵
  PID:1628
- C:\Windows\System\bZlZTzQ.exe
  C:\Windows\System\bZlZTzQ.exe
  2⤵
  PID:272
- C:\Windows\System\qzKjpFz.exe
  C:\Windows\System\qzKjpFz.exe
  2⤵
  PID:912
- C:\Windows\System\HawYJQA.exe
  C:\Windows\System\HawYJQA.exe
  2⤵
  PID:1656
- C:\Windows\System\bBSBQev.exe
  C:\Windows\System\bBSBQev.exe
  2⤵
  PID:2696
- C:\Windows\System\fKqIMlB.exe
  C:\Windows\System\fKqIMlB.exe
  2⤵
  PID:1660
- C:\Windows\System\UnNPlAR.exe
  C:\Windows\System\UnNPlAR.exe
  2⤵
  PID:888
- C:\Windows\System\meVUstL.exe
  C:\Windows\System\meVUstL.exe
  2⤵
  PID:1124
- C:\Windows\System\vNmGkUd.exe
  C:\Windows\System\vNmGkUd.exe
  2⤵
  PID:1516
- C:\Windows\System\GowfCeF.exe
  C:\Windows\System\GowfCeF.exe
  2⤵
  PID:2260
- C:\Windows\System\SrrghMb.exe
  C:\Windows\System\SrrghMb.exe
  2⤵
  PID:2948
- C:\Windows\System\NTdBlyn.exe
  C:\Windows\System\NTdBlyn.exe
  2⤵
  PID:2972
- C:\Windows\System\mqajUAV.exe
  C:\Windows\System\mqajUAV.exe
  2⤵
  PID:2616
- C:\Windows\System\kcQInBr.exe
  C:\Windows\System\kcQInBr.exe
  2⤵
  PID:2640
- C:\Windows\System\QJpjhQb.exe
  C:\Windows\System\QJpjhQb.exe
  2⤵
  PID:2604
- C:\Windows\System\bKUTssa.exe
  C:\Windows\System\bKUTssa.exe
  2⤵
  PID:2348
- C:\Windows\System\yJeyDSo.exe
  C:\Windows\System\yJeyDSo.exe
  2⤵
  PID:1300
- C:\Windows\System\rlGwozz.exe
  C:\Windows\System\rlGwozz.exe
  2⤵
  PID:1560
- C:\Windows\System\YGZWRNC.exe
  C:\Windows\System\YGZWRNC.exe
  2⤵
  PID:1228
- C:\Windows\System\jrOyorT.exe
  C:\Windows\System\jrOyorT.exe
  2⤵
  PID:2304
- C:\Windows\System\aPnAKLW.exe
  C:\Windows\System\aPnAKLW.exe
  2⤵
  PID:2248
- C:\Windows\System\fiekxgl.exe
  C:\Windows\System\fiekxgl.exe
  2⤵
  PID:2776
- C:\Windows\System\SZkwkTF.exe
  C:\Windows\System\SZkwkTF.exe
  2⤵
  PID:2268
- C:\Windows\System\vhgvJkG.exe
  C:\Windows\System\vhgvJkG.exe
  2⤵
  PID:2196
- C:\Windows\System\XRWWMBp.exe
  C:\Windows\System\XRWWMBp.exe
  2⤵
  PID:2552
- C:\Windows\System\SYAeUFZ.exe
  C:\Windows\System\SYAeUFZ.exe
  2⤵
  PID:2564
- C:\Windows\System\mGtuyZA.exe
  C:\Windows\System\mGtuyZA.exe
  2⤵
  PID:640
- C:\Windows\System\MdFURMx.exe
  C:\Windows\System\MdFURMx.exe
  2⤵
  PID:2316
- C:\Windows\System\FLphMlb.exe
  C:\Windows\System\FLphMlb.exe
  2⤵
  PID:2660
- C:\Windows\System\MUgQTUw.exe
  C:\Windows\System\MUgQTUw.exe
  2⤵
  PID:588
- C:\Windows\System\qvNebAq.exe
  C:\Windows\System\qvNebAq.exe
  2⤵
  PID:1772
- C:\Windows\System\HbGuZee.exe
  C:\Windows\System\HbGuZee.exe
  2⤵
  PID:880
- C:\Windows\System\SDYcEmi.exe
  C:\Windows\System\SDYcEmi.exe
  2⤵
  PID:1408
- C:\Windows\System\vBHXjmp.exe
  C:\Windows\System\vBHXjmp.exe
  2⤵
  PID:1964
- C:\Windows\System\TjwnPow.exe
  C:\Windows\System\TjwnPow.exe
  2⤵
  PID:1128
- C:\Windows\System\LrHdscZ.exe
  C:\Windows\System\LrHdscZ.exe
  2⤵
  PID:2068
- C:\Windows\System\zcSxzyF.exe
  C:\Windows\System\zcSxzyF.exe
  2⤵
  PID:1548
- C:\Windows\System\xUbgIqv.exe
  C:\Windows\System\xUbgIqv.exe
  2⤵
  PID:1968
- C:\Windows\System\FOmcBLL.exe
  C:\Windows\System\FOmcBLL.exe
  2⤵
  PID:1416
- C:\Windows\System\LxqmYlI.exe
  C:\Windows\System\LxqmYlI.exe
  2⤵
  PID:2340
- C:\Windows\System\KCzPgDc.exe
  C:\Windows\System\KCzPgDc.exe
  2⤵
  PID:2900
- C:\Windows\System\CxHExvt.exe
  C:\Windows\System\CxHExvt.exe
  2⤵
  PID:2520
- C:\Windows\System\bSOkoFk.exe
  C:\Windows\System\bSOkoFk.exe
  2⤵
  PID:2904
- C:\Windows\System\LiMfGII.exe
  C:\Windows\System\LiMfGII.exe
  2⤵
  PID:2824
- C:\Windows\System\ZxUZRaF.exe
  C:\Windows\System\ZxUZRaF.exe
  2⤵
  PID:2176
- C:\Windows\System\jTNiFYa.exe
  C:\Windows\System\jTNiFYa.exe
  2⤵
  PID:2852
- C:\Windows\System\ktwWXlz.exe
  C:\Windows\System\ktwWXlz.exe
  2⤵
  PID:1172
- C:\Windows\System\ZLjczsP.exe
  C:\Windows\System\ZLjczsP.exe
  2⤵
  PID:2856
- C:\Windows\System\QJqQnDq.exe
  C:\Windows\System\QJqQnDq.exe
  2⤵
  PID:536
- C:\Windows\System\XYRxqAP.exe
  C:\Windows\System\XYRxqAP.exe
  2⤵
  PID:2572
- C:\Windows\System\ZcKuZoj.exe
  C:\Windows\System\ZcKuZoj.exe
  2⤵
  PID:2480
- C:\Windows\System\KhcEWpB.exe
  C:\Windows\System\KhcEWpB.exe
  2⤵
  PID:1980
- C:\Windows\System\maTMHlQ.exe
  C:\Windows\System\maTMHlQ.exe
  2⤵
  PID:3084
- C:\Windows\System\ZRxYIJy.exe
  C:\Windows\System\ZRxYIJy.exe
  2⤵
  PID:3104
- C:\Windows\System\sIiiIYJ.exe
  C:\Windows\System\sIiiIYJ.exe
  2⤵
  PID:3124
- C:\Windows\System\ZwpQZJI.exe
  C:\Windows\System\ZwpQZJI.exe
  2⤵
  PID:3140
- C:\Windows\System\CvvbIze.exe
  C:\Windows\System\CvvbIze.exe
  2⤵
  PID:3160
- C:\Windows\System\NGEtCBe.exe
  C:\Windows\System\NGEtCBe.exe
  2⤵
  PID:3176
- C:\Windows\System\KChbDCz.exe
  C:\Windows\System\KChbDCz.exe
  2⤵
  PID:3196
- C:\Windows\System\UwazuNF.exe
  C:\Windows\System\UwazuNF.exe
  2⤵
  PID:3228
- C:\Windows\System\ASErBUW.exe
  C:\Windows\System\ASErBUW.exe
  2⤵
  PID:3248
- C:\Windows\System\UoJNhCx.exe
  C:\Windows\System\UoJNhCx.exe
  2⤵
  PID:3264
- C:\Windows\System\TVSoJRN.exe
  C:\Windows\System\TVSoJRN.exe
  2⤵
  PID:3280
- C:\Windows\System\bmtIkSu.exe
  C:\Windows\System\bmtIkSu.exe
  2⤵
  PID:3296
- C:\Windows\System\wukgsEN.exe
  C:\Windows\System\wukgsEN.exe
  2⤵
  PID:3316
- C:\Windows\System\fniwAIq.exe
  C:\Windows\System\fniwAIq.exe
  2⤵
  PID:3340
- C:\Windows\System\HckZikC.exe
  C:\Windows\System\HckZikC.exe
  2⤵
  PID:3368
- C:\Windows\System\KqSItVs.exe
  C:\Windows\System\KqSItVs.exe
  2⤵
  PID:3396
- C:\Windows\System\tuRlFpg.exe
  C:\Windows\System\tuRlFpg.exe
  2⤵
  PID:3416
- C:\Windows\System\lkMMcXS.exe
  C:\Windows\System\lkMMcXS.exe
  2⤵
  PID:3436
- C:\Windows\System\cVrXRmS.exe
  C:\Windows\System\cVrXRmS.exe
  2⤵
  PID:3456
- C:\Windows\System\YVxOaKV.exe
  C:\Windows\System\YVxOaKV.exe
  2⤵
  PID:3476
- C:\Windows\System\ddjKqMp.exe
  C:\Windows\System\ddjKqMp.exe
  2⤵
  PID:3500
- C:\Windows\System\wXOMICL.exe
  C:\Windows\System\wXOMICL.exe
  2⤵
  PID:3516
- C:\Windows\System\Smgwfzq.exe
  C:\Windows\System\Smgwfzq.exe
  2⤵
  PID:3532
- C:\Windows\System\BXMQatZ.exe
  C:\Windows\System\BXMQatZ.exe
  2⤵
  PID:3548
- C:\Windows\System\gzsewqG.exe
  C:\Windows\System\gzsewqG.exe
  2⤵
  PID:3568
- C:\Windows\System\nsEbegr.exe
  C:\Windows\System\nsEbegr.exe
  2⤵
  PID:3620
- C:\Windows\System\GZQoafj.exe
  C:\Windows\System\GZQoafj.exe
  2⤵
  PID:3636
- C:\Windows\System\IJUMcWF.exe
  C:\Windows\System\IJUMcWF.exe
  2⤵
  PID:3656
- C:\Windows\System\ltxUdVI.exe
  C:\Windows\System\ltxUdVI.exe
  2⤵
  PID:3672
- C:\Windows\System\NUTlpJd.exe
  C:\Windows\System\NUTlpJd.exe
  2⤵
  PID:3688
- C:\Windows\System\LRWWxWu.exe
  C:\Windows\System\LRWWxWu.exe
  2⤵
  PID:3712
- C:\Windows\System\Gahxerg.exe
  C:\Windows\System\Gahxerg.exe
  2⤵
  PID:3728
- C:\Windows\System\XazLRpa.exe
  C:\Windows\System\XazLRpa.exe
  2⤵
  PID:3752
- C:\Windows\System\SFDjAEg.exe
  C:\Windows\System\SFDjAEg.exe
  2⤵
  PID:3768
- C:\Windows\System\JZGXtnJ.exe
  C:\Windows\System\JZGXtnJ.exe
  2⤵
  PID:3788
- C:\Windows\System\dCHciWJ.exe
  C:\Windows\System\dCHciWJ.exe
  2⤵
  PID:3804
- C:\Windows\System\JCdVxOq.exe
  C:\Windows\System\JCdVxOq.exe
  2⤵
  PID:3820
- C:\Windows\System\pHChqhU.exe
  C:\Windows\System\pHChqhU.exe
  2⤵
  PID:3836
- C:\Windows\System\ELGtBHm.exe
  C:\Windows\System\ELGtBHm.exe
  2⤵
  PID:3856
- C:\Windows\System\tkqnwSA.exe
  C:\Windows\System\tkqnwSA.exe
  2⤵
  PID:3872
- C:\Windows\System\ZhPflYD.exe
  C:\Windows\System\ZhPflYD.exe
  2⤵
  PID:3896
- C:\Windows\System\PgiIZUB.exe
  C:\Windows\System\PgiIZUB.exe
  2⤵
  PID:3916
- C:\Windows\System\HKJuimG.exe
  C:\Windows\System\HKJuimG.exe
  2⤵
  PID:3932
- C:\Windows\System\qsSzdno.exe
  C:\Windows\System\qsSzdno.exe
  2⤵
  PID:3948
- C:\Windows\System\kbzTIRt.exe
  C:\Windows\System\kbzTIRt.exe
  2⤵
  PID:3964
- C:\Windows\System\ezTIvoQ.exe
  C:\Windows\System\ezTIvoQ.exe
  2⤵
  PID:3980
- C:\Windows\System\UdSMghU.exe
  C:\Windows\System\UdSMghU.exe
  2⤵
  PID:3996
- C:\Windows\System\LumGawD.exe
  C:\Windows\System\LumGawD.exe
  2⤵
  PID:4012
- C:\Windows\System\aLqZqAn.exe
  C:\Windows\System\aLqZqAn.exe
  2⤵
  PID:4028
- C:\Windows\System\rLJLMbN.exe
  C:\Windows\System\rLJLMbN.exe
  2⤵
  PID:4044
- C:\Windows\System\AEfPVbo.exe
  C:\Windows\System\AEfPVbo.exe
  2⤵
  PID:4060
- C:\Windows\System\sOqMqQD.exe
  C:\Windows\System\sOqMqQD.exe
  2⤵
  PID:4076
- C:\Windows\System\KtShAoD.exe
  C:\Windows\System\KtShAoD.exe
  2⤵
  PID:4092
- C:\Windows\System\NyivEKw.exe
  C:\Windows\System\NyivEKw.exe
  2⤵
  PID:1640
- C:\Windows\System\ZkRmlAW.exe
  C:\Windows\System\ZkRmlAW.exe
  2⤵
  PID:3080
- C:\Windows\System\OSxULUC.exe
  C:\Windows\System\OSxULUC.exe
  2⤵
  PID:3116
- C:\Windows\System\uKoWFkm.exe
  C:\Windows\System\uKoWFkm.exe
  2⤵
  PID:3152
- C:\Windows\System\MHeWTKF.exe
  C:\Windows\System\MHeWTKF.exe
  2⤵
  PID:3136
- C:\Windows\System\ePIwKzF.exe
  C:\Windows\System\ePIwKzF.exe
  2⤵
  PID:3448
- C:\Windows\System\okdfJeR.exe
  C:\Windows\System\okdfJeR.exe
  2⤵
  PID:3484
- C:\Windows\System\zyNSqAL.exe
  C:\Windows\System\zyNSqAL.exe
  2⤵
  PID:3528
- C:\Windows\System\wMypDrR.exe
  C:\Windows\System\wMypDrR.exe
  2⤵
  PID:3332
- C:\Windows\System\jcrGinI.exe
  C:\Windows\System\jcrGinI.exe
  2⤵
  PID:1800
- C:\Windows\System\VONsVYk.exe
  C:\Windows\System\VONsVYk.exe
  2⤵
  PID:3540
- C:\Windows\System\jDEUcqH.exe
  C:\Windows\System\jDEUcqH.exe
  2⤵
  PID:3576
- C:\Windows\System\UKyHbMS.exe
  C:\Windows\System\UKyHbMS.exe
  2⤵
  PID:3384
- C:\Windows\System\VcAnclp.exe
  C:\Windows\System\VcAnclp.exe
  2⤵
  PID:3428
- C:\Windows\System\HDYpvaZ.exe
  C:\Windows\System\HDYpvaZ.exe
  2⤵
  PID:3600
- C:\Windows\System\ufITjhx.exe
  C:\Windows\System\ufITjhx.exe
  2⤵
  PID:3512
- C:\Windows\System\RffJBYM.exe
  C:\Windows\System\RffJBYM.exe
  2⤵
  PID:3588
- C:\Windows\System\Fjootsc.exe
  C:\Windows\System\Fjootsc.exe
  2⤵
  PID:3644
- C:\Windows\System\DIWBuNx.exe
  C:\Windows\System\DIWBuNx.exe
  2⤵
  PID:3704
- C:\Windows\System\bEdfKke.exe
  C:\Windows\System\bEdfKke.exe
  2⤵
  PID:3776
- C:\Windows\System\NQwAdWY.exe
  C:\Windows\System\NQwAdWY.exe
  2⤵
  PID:3652
- C:\Windows\System\wCjNiKD.exe
  C:\Windows\System\wCjNiKD.exe
  2⤵
  PID:3812
- C:\Windows\System\MqovTXT.exe
  C:\Windows\System\MqovTXT.exe
  2⤵
  PID:1060
- C:\Windows\System\abfvApd.exe
  C:\Windows\System\abfvApd.exe
  2⤵
  PID:3796
- C:\Windows\System\wyhIXzJ.exe
  C:\Windows\System\wyhIXzJ.exe
  2⤵
  PID:3864
- C:\Windows\System\AsaZhIL.exe
  C:\Windows\System\AsaZhIL.exe
  2⤵
  PID:3892
- C:\Windows\System\KfaGoBp.exe
  C:\Windows\System\KfaGoBp.exe
  2⤵
  PID:3956
- C:\Windows\System\MnBGmXU.exe
  C:\Windows\System\MnBGmXU.exe
  2⤵
  PID:4020
- C:\Windows\System\DEuTNCC.exe
  C:\Windows\System\DEuTNCC.exe
  2⤵
  PID:4088
- C:\Windows\System\JgbNYQT.exe
  C:\Windows\System\JgbNYQT.exe
  2⤵
  PID:2464
- C:\Windows\System\VUxPJnJ.exe
  C:\Windows\System\VUxPJnJ.exe
  2⤵
  PID:3444
- C:\Windows\System\fXIvKhr.exe
  C:\Windows\System\fXIvKhr.exe
  2⤵
  PID:3492
- C:\Windows\System\YiLABYw.exe
  C:\Windows\System\YiLABYw.exe
  2⤵
  PID:3308
- C:\Windows\System\JnxbTHA.exe
  C:\Windows\System\JnxbTHA.exe
  2⤵
  PID:3496
- C:\Windows\System\XYYYOGA.exe
  C:\Windows\System\XYYYOGA.exe
  2⤵
  PID:3360
- C:\Windows\System\PIHGfiG.exe
  C:\Windows\System\PIHGfiG.exe
  2⤵
  PID:4036
- C:\Windows\System\VLIRTfV.exe
  C:\Windows\System\VLIRTfV.exe
  2⤵
  PID:3392
- C:\Windows\System\VKpeKBa.exe
  C:\Windows\System\VKpeKBa.exe
  2⤵
  PID:3452
- C:\Windows\System\gaRxuAX.exe
  C:\Windows\System\gaRxuAX.exe
  2⤵
  PID:3700
- C:\Windows\System\QUMFVkK.exe
  C:\Windows\System\QUMFVkK.exe
  2⤵
  PID:3828
- C:\Windows\System\YwnvZGD.exe
  C:\Windows\System\YwnvZGD.exe
  2⤵
  PID:3764
- C:\Windows\System\durpeUF.exe
  C:\Windows\System\durpeUF.exe
  2⤵
  PID:3908
- C:\Windows\System\lRLGblo.exe
  C:\Windows\System\lRLGblo.exe
  2⤵
  PID:3188
- C:\Windows\System\SVpwfRK.exe
  C:\Windows\System\SVpwfRK.exe
  2⤵
  PID:3784
- C:\Windows\System\pLIlohI.exe
  C:\Windows\System\pLIlohI.exe
  2⤵
  PID:3544
- C:\Windows\System\oZTLxap.exe
  C:\Windows\System\oZTLxap.exe
  2⤵
  PID:3356
- C:\Windows\System\beqFsSX.exe
  C:\Windows\System\beqFsSX.exe
  2⤵
  PID:3388
- C:\Windows\System\yZTzykt.exe
  C:\Windows\System\yZTzykt.exe
  2⤵
  PID:2724
- C:\Windows\System\ebzKPXU.exe
  C:\Windows\System\ebzKPXU.exe
  2⤵
  PID:3868
- C:\Windows\System\JTbIhyO.exe
  C:\Windows\System\JTbIhyO.exe
  2⤵
  PID:3988
- C:\Windows\System\yENnfso.exe
  C:\Windows\System\yENnfso.exe
  2⤵
  PID:3720
- C:\Windows\System\aAWNaeW.exe
  C:\Windows\System\aAWNaeW.exe
  2⤵
  PID:3168
- C:\Windows\System\xQkoEoT.exe
  C:\Windows\System\xQkoEoT.exe
  2⤵
  PID:3664
- C:\Windows\System\CpQoQuV.exe
  C:\Windows\System\CpQoQuV.exe
  2⤵
  PID:3276
- C:\Windows\System\EsiMPwp.exe
  C:\Windows\System\EsiMPwp.exe
  2⤵
  PID:3944
- C:\Windows\System\BubmRRX.exe
  C:\Windows\System\BubmRRX.exe
  2⤵
  PID:3076
- C:\Windows\System\NWhPOoL.exe
  C:\Windows\System\NWhPOoL.exe
  2⤵
  PID:3408
- C:\Windows\System\pucQrje.exe
  C:\Windows\System\pucQrje.exe
  2⤵
  PID:3596
- C:\Windows\System\vSbwzLq.exe
  C:\Windows\System\vSbwzLq.exe
  2⤵
  PID:3632
- C:\Windows\System\SmrzYBF.exe
  C:\Windows\System\SmrzYBF.exe
  2⤵
  PID:3580
- C:\Windows\System\NZTnOUN.exe
  C:\Windows\System\NZTnOUN.exe
  2⤵
  PID:3100
- C:\Windows\System\QPiUsFh.exe
  C:\Windows\System\QPiUsFh.exe
  2⤵
  PID:3324
- C:\Windows\System\JeqZOPA.exe
  C:\Windows\System\JeqZOPA.exe
  2⤵
  PID:336
- C:\Windows\System\YjhjqpM.exe
  C:\Windows\System\YjhjqpM.exe
  2⤵
  PID:3348
- C:\Windows\System\dQkzPHU.exe
  C:\Windows\System\dQkzPHU.exe
  2⤵
  PID:3740
- C:\Windows\System\GsMGUcX.exe
  C:\Windows\System\GsMGUcX.exe
  2⤵
  PID:4136
- C:\Windows\System\GIFzODV.exe
  C:\Windows\System\GIFzODV.exe
  2⤵
  PID:4152
- C:\Windows\System\fwfCwOS.exe
  C:\Windows\System\fwfCwOS.exe
  2⤵
  PID:4172
- C:\Windows\System\wQMPyOy.exe
  C:\Windows\System\wQMPyOy.exe
  2⤵
  PID:4192
- C:\Windows\System\eTDPLYy.exe
  C:\Windows\System\eTDPLYy.exe
  2⤵
  PID:4208
- C:\Windows\System\RRjBRgK.exe
  C:\Windows\System\RRjBRgK.exe
  2⤵
  PID:4224
- C:\Windows\System\RjAfiux.exe
  C:\Windows\System\RjAfiux.exe
  2⤵
  PID:4240
- C:\Windows\System\JoIePxC.exe
  C:\Windows\System\JoIePxC.exe
  2⤵
  PID:4256
- C:\Windows\System\gbshkoc.exe
  C:\Windows\System\gbshkoc.exe
  2⤵
  PID:4276
- C:\Windows\System\FvTdUGG.exe
  C:\Windows\System\FvTdUGG.exe
  2⤵
  PID:4296
- C:\Windows\System\mxXuQNp.exe
  C:\Windows\System\mxXuQNp.exe
  2⤵
  PID:4312
- C:\Windows\System\WpvVMfv.exe
  C:\Windows\System\WpvVMfv.exe
  2⤵
  PID:4328
- C:\Windows\System\TQkerlt.exe
  C:\Windows\System\TQkerlt.exe
  2⤵
  PID:4348
- C:\Windows\System\hITttEA.exe
  C:\Windows\System\hITttEA.exe
  2⤵
  PID:4368
- C:\Windows\System\UGEbbjn.exe
  C:\Windows\System\UGEbbjn.exe
  2⤵
  PID:4384
- C:\Windows\System\KppvMaJ.exe
  C:\Windows\System\KppvMaJ.exe
  2⤵
  PID:4408
- C:\Windows\System\UGkNHzs.exe
  C:\Windows\System\UGkNHzs.exe
  2⤵
  PID:4432
- C:\Windows\System\PRUkcrQ.exe
  C:\Windows\System\PRUkcrQ.exe
  2⤵
  PID:4452
- C:\Windows\System\aksdmDx.exe
  C:\Windows\System\aksdmDx.exe
  2⤵
  PID:4484
- C:\Windows\System\EbUybqW.exe
  C:\Windows\System\EbUybqW.exe
  2⤵
  PID:4500
- C:\Windows\System\HszwKig.exe
  C:\Windows\System\HszwKig.exe
  2⤵
  PID:4516
- C:\Windows\System\npOCHMq.exe
  C:\Windows\System\npOCHMq.exe
  2⤵
  PID:4532
- C:\Windows\System\zjsNSLj.exe
  C:\Windows\System\zjsNSLj.exe
  2⤵
  PID:4548
- C:\Windows\System\epCNOkE.exe
  C:\Windows\System\epCNOkE.exe
  2⤵
  PID:4568
- C:\Windows\System\FOUGEoq.exe
  C:\Windows\System\FOUGEoq.exe
  2⤵
  PID:4592
- C:\Windows\System\bRopTnG.exe
  C:\Windows\System\bRopTnG.exe
  2⤵
  PID:4612
- C:\Windows\System\YdApJTc.exe
  C:\Windows\System\YdApJTc.exe
  2⤵
  PID:4628
- C:\Windows\System\QbAODVX.exe
  C:\Windows\System\QbAODVX.exe
  2⤵
  PID:4648
- C:\Windows\System\EDxkTzd.exe
  C:\Windows\System\EDxkTzd.exe
  2⤵
  PID:4664
- C:\Windows\System\NxJRRJc.exe
  C:\Windows\System\NxJRRJc.exe
  2⤵
  PID:4684
- C:\Windows\System\LxUPCfn.exe
  C:\Windows\System\LxUPCfn.exe
  2⤵
  PID:4708
- C:\Windows\System\gLeJekK.exe
  C:\Windows\System\gLeJekK.exe
  2⤵
  PID:4728
- C:\Windows\System\njSBILo.exe
  C:\Windows\System\njSBILo.exe
  2⤵
  PID:4748
- C:\Windows\System\dyTNlLG.exe
  C:\Windows\System\dyTNlLG.exe
  2⤵
  PID:4768
- C:\Windows\System\PvwMOEX.exe
  C:\Windows\System\PvwMOEX.exe
  2⤵
  PID:4784
- C:\Windows\System\fMgzxvB.exe
  C:\Windows\System\fMgzxvB.exe
  2⤵
  PID:4800
- C:\Windows\System\BAhXZpm.exe
  C:\Windows\System\BAhXZpm.exe
  2⤵
  PID:4852
- C:\Windows\System\rFdZcOj.exe
  C:\Windows\System\rFdZcOj.exe
  2⤵
  PID:4876
- C:\Windows\System\RqnXGEa.exe
  C:\Windows\System\RqnXGEa.exe
  2⤵
  PID:4896
- C:\Windows\System\wlpTFpA.exe
  C:\Windows\System\wlpTFpA.exe
  2⤵
  PID:4912
- C:\Windows\System\eWANlLm.exe
  C:\Windows\System\eWANlLm.exe
  2⤵
  PID:4932
- C:\Windows\System\KlylfeR.exe
  C:\Windows\System\KlylfeR.exe
  2⤵
  PID:4952
- C:\Windows\System\JlFOlXr.exe
  C:\Windows\System\JlFOlXr.exe
  2⤵
  PID:4972
- C:\Windows\System\OIRrCXj.exe
  C:\Windows\System\OIRrCXj.exe
  2⤵
  PID:4996
- C:\Windows\System\xlCdITJ.exe
  C:\Windows\System\xlCdITJ.exe
  2⤵
  PID:5012
- C:\Windows\System\QxtRHpv.exe
  C:\Windows\System\QxtRHpv.exe
  2⤵
  PID:5028
- C:\Windows\System\qHGFhWx.exe
  C:\Windows\System\qHGFhWx.exe
  2⤵
  PID:5048
- C:\Windows\System\jDNIfRT.exe
  C:\Windows\System\jDNIfRT.exe
  2⤵
  PID:5076
- C:\Windows\System\ldFiqFZ.exe
  C:\Windows\System\ldFiqFZ.exe
  2⤵
  PID:5092
- C:\Windows\System\NpKNZUX.exe
  C:\Windows\System\NpKNZUX.exe
  2⤵
  PID:5108
- C:\Windows\System\UHkWhOq.exe
  C:\Windows\System\UHkWhOq.exe
  2⤵
  PID:3584
- C:\Windows\System\mJGgMZk.exe
  C:\Windows\System\mJGgMZk.exe
  2⤵
  PID:4100
- C:\Windows\System\lBNUiRB.exe
  C:\Windows\System\lBNUiRB.exe
  2⤵
  PID:3112
- C:\Windows\System\ROTodBL.exe
  C:\Windows\System\ROTodBL.exe
  2⤵
  PID:3904
- C:\Windows\System\CboEHVu.exe
  C:\Windows\System\CboEHVu.exe
  2⤵
  PID:3832
- C:\Windows\System\qCNnYLt.exe
  C:\Windows\System\qCNnYLt.exe
  2⤵
  PID:2492
- C:\Windows\System\MuixjyP.exe
  C:\Windows\System\MuixjyP.exe
  2⤵
  PID:3336
- C:\Windows\System\NeqwbBB.exe
  C:\Windows\System\NeqwbBB.exe
  2⤵
  PID:4008
- C:\Windows\System\KrbzVkY.exe
  C:\Windows\System\KrbzVkY.exe
  2⤵
  PID:4164
- C:\Windows\System\JRtWAOT.exe
  C:\Windows\System\JRtWAOT.exe
  2⤵
  PID:4232
- C:\Windows\System\JfQKJuK.exe
  C:\Windows\System\JfQKJuK.exe
  2⤵
  PID:4336
- C:\Windows\System\BtOWKnY.exe
  C:\Windows\System\BtOWKnY.exe
  2⤵
  PID:4264
- C:\Windows\System\mgjJdCU.exe
  C:\Windows\System\mgjJdCU.exe
  2⤵
  PID:4376
- C:\Windows\System\SSEpJrf.exe
  C:\Windows\System\SSEpJrf.exe
  2⤵
  PID:4420
- C:\Windows\System\NrMfXUa.exe
  C:\Windows\System\NrMfXUa.exe
  2⤵
  PID:4396
- C:\Windows\System\fuKjllI.exe
  C:\Windows\System\fuKjllI.exe
  2⤵
  PID:4356
- C:\Windows\System\qLTmSqL.exe
  C:\Windows\System\qLTmSqL.exe
  2⤵
  PID:4220
- C:\Windows\System\DFCKPuO.exe
  C:\Windows\System\DFCKPuO.exe
  2⤵
  PID:4468
- C:\Windows\System\zTjJskw.exe
  C:\Windows\System\zTjJskw.exe
  2⤵
  PID:4656
- C:\Windows\System\iYKIGbB.exe
  C:\Windows\System\iYKIGbB.exe
  2⤵
  PID:4696
- C:\Windows\System\OCLIwIq.exe
  C:\Windows\System\OCLIwIq.exe
  2⤵
  PID:4744
- C:\Windows\System\MBdNaFU.exe
  C:\Windows\System\MBdNaFU.exe
  2⤵
  PID:4556
- C:\Windows\System\VchIHFK.exe
  C:\Windows\System\VchIHFK.exe
  2⤵
  PID:4600
- C:\Windows\System\qCQEWix.exe
  C:\Windows\System\qCQEWix.exe
  2⤵
  PID:4776
- C:\Windows\System\enYZuTD.exe
  C:\Windows\System\enYZuTD.exe
  2⤵
  PID:4820
- C:\Windows\System\PINrqbX.exe
  C:\Windows\System\PINrqbX.exe
  2⤵
  PID:4448
- C:\Windows\System\CFGTeAG.exe
  C:\Windows\System\CFGTeAG.exe
  2⤵
  PID:4848
- C:\Windows\System\pYOFRmB.exe
  C:\Windows\System\pYOFRmB.exe
  2⤵
  PID:4680
- C:\Windows\System\ibVvQaP.exe
  C:\Windows\System\ibVvQaP.exe
  2⤵
  PID:4756
- C:\Windows\System\BEoOxDz.exe
  C:\Windows\System\BEoOxDz.exe
  2⤵
  PID:4792
- C:\Windows\System\xYzBnnF.exe
  C:\Windows\System\xYzBnnF.exe
  2⤵
  PID:4904
- C:\Windows\System\dSIklZU.exe
  C:\Windows\System\dSIklZU.exe
  2⤵
  PID:5004
- C:\Windows\System\PHlINFp.exe
  C:\Windows\System\PHlINFp.exe
  2⤵
  PID:4864
- C:\Windows\System\vUELOrW.exe
  C:\Windows\System\vUELOrW.exe
  2⤵
  PID:5044
- C:\Windows\System\kKBpYMa.exe
  C:\Windows\System\kKBpYMa.exe
  2⤵
  PID:3696
- C:\Windows\System\mfQwFCM.exe
  C:\Windows\System\mfQwFCM.exe
  2⤵
  PID:3244
- C:\Windows\System\vWMfRaY.exe
  C:\Windows\System\vWMfRaY.exe
  2⤵
  PID:4144
- C:\Windows\System\pNOUwML.exe
  C:\Windows\System\pNOUwML.exe
  2⤵
  PID:4272
- C:\Windows\System\wCCOVdw.exe
  C:\Windows\System\wCCOVdw.exe
  2⤵
  PID:4940
- C:\Windows\System\qzcdgMH.exe
  C:\Windows\System\qzcdgMH.exe
  2⤵
  PID:4992
- C:\Windows\System\RwMmAVd.exe
  C:\Windows\System\RwMmAVd.exe
  2⤵
  PID:4440
- C:\Windows\System\YRDlaZC.exe
  C:\Windows\System\YRDlaZC.exe
  2⤵
  PID:4620
- C:\Windows\System\fzedYuW.exe
  C:\Windows\System\fzedYuW.exe
  2⤵
  PID:4416
- C:\Windows\System\YRxBuHI.exe
  C:\Windows\System\YRxBuHI.exe
  2⤵
  PID:5056
- C:\Windows\System\LIlqTdC.exe
  C:\Windows\System\LIlqTdC.exe
  2⤵
  PID:3412
- C:\Windows\System\eLLcJAQ.exe
  C:\Windows\System\eLLcJAQ.exe
  2⤵
  PID:4320
- C:\Windows\System\JBUnaMq.exe
  C:\Windows\System\JBUnaMq.exe
  2⤵
  PID:4068
- C:\Windows\System\NYIUDCJ.exe
  C:\Windows\System\NYIUDCJ.exe
  2⤵
  PID:4288
- C:\Windows\System\UWcgstT.exe
  C:\Windows\System\UWcgstT.exe
  2⤵
  PID:4460
- C:\Windows\System\LIEUULo.exe
  C:\Windows\System\LIEUULo.exe
  2⤵
  PID:4564
- C:\Windows\System\yqeFEIN.exe
  C:\Windows\System\yqeFEIN.exe
  2⤵
  PID:4816
- C:\Windows\System\CkdRDBh.exe
  C:\Windows\System\CkdRDBh.exe
  2⤵
  PID:584
- C:\Windows\System\KzqUURY.exe
  C:\Windows\System\KzqUURY.exe
  2⤵
  PID:4828
- C:\Windows\System\qylhnLC.exe
  C:\Windows\System\qylhnLC.exe
  2⤵
  PID:4644
- C:\Windows\System\astIZOh.exe
  C:\Windows\System\astIZOh.exe
  2⤵
  PID:4888
- C:\Windows\System\PuklrRa.exe
  C:\Windows\System\PuklrRa.exe
  2⤵
  PID:4944
- C:\Windows\System\iyjKJZn.exe
  C:\Windows\System\iyjKJZn.exe
  2⤵
  PID:3616
- C:\Windows\System\DgexMhM.exe
  C:\Windows\System\DgexMhM.exe
  2⤵
  PID:5100
- C:\Windows\System\iqPFCjm.exe
  C:\Windows\System\iqPFCjm.exe
  2⤵
  PID:4988
- C:\Windows\System\gWYtbGp.exe
  C:\Windows\System\gWYtbGp.exe
  2⤵
  PID:4364
- C:\Windows\System\dLpONyw.exe
  C:\Windows\System\dLpONyw.exe
  2⤵
  PID:4340
- C:\Windows\System\mwuxelj.exe
  C:\Windows\System\mwuxelj.exe
  2⤵
  PID:4968
- C:\Windows\System\kOGMMRZ.exe
  C:\Windows\System\kOGMMRZ.exe
  2⤵
  PID:3508
- C:\Windows\System\hCdZGaP.exe
  C:\Windows\System\hCdZGaP.exe
  2⤵
  PID:4132
- C:\Windows\System\EwtMYxi.exe
  C:\Windows\System\EwtMYxi.exe
  2⤵
  PID:3724
- C:\Windows\System\HqwDteH.exe
  C:\Windows\System\HqwDteH.exe
  2⤵
  PID:4188
- C:\Windows\System\KmguOWE.exe
  C:\Windows\System\KmguOWE.exe
  2⤵
  PID:4808
- C:\Windows\System\xTrspMc.exe
  C:\Windows\System\xTrspMc.exe
  2⤵
  PID:4608
- C:\Windows\System\lfUGWKM.exe
  C:\Windows\System\lfUGWKM.exe
  2⤵
  PID:4404
- C:\Windows\System\YLkZdQA.exe
  C:\Windows\System\YLkZdQA.exe
  2⤵
  PID:4964
- C:\Windows\System\HMEssJt.exe
  C:\Windows\System\HMEssJt.exe
  2⤵
  PID:5024
- C:\Windows\System\cSTFWZQ.exe
  C:\Windows\System\cSTFWZQ.exe
  2⤵
  PID:4736
- C:\Windows\System\ksoVpuW.exe
  C:\Windows\System\ksoVpuW.exe
  2⤵
  PID:4528
- C:\Windows\System\QkckwYM.exe
  C:\Windows\System\QkckwYM.exe
  2⤵
  PID:4544
- C:\Windows\System\rnLeCeg.exe
  C:\Windows\System\rnLeCeg.exe
  2⤵
  PID:4588
- C:\Windows\System\rmmbwAt.exe
  C:\Windows\System\rmmbwAt.exe
  2⤵
  PID:5036
- C:\Windows\System\gXenNlp.exe
  C:\Windows\System\gXenNlp.exe
  2⤵
  PID:4324
- C:\Windows\System\MuSNaSX.exe
  C:\Windows\System\MuSNaSX.exe
  2⤵
  PID:4380
- C:\Windows\System\oFnvzlH.exe
  C:\Windows\System\oFnvzlH.exe
  2⤵
  PID:4252
- C:\Windows\System\SwiVXBi.exe
  C:\Windows\System\SwiVXBi.exe
  2⤵
  PID:3848
- C:\Windows\System\CemprIk.exe
  C:\Windows\System\CemprIk.exe
  2⤵
  PID:4928
- C:\Windows\System\JwouJDP.exe
  C:\Windows\System\JwouJDP.exe
  2⤵
  PID:4120
- C:\Windows\System\NzGPQyy.exe
  C:\Windows\System\NzGPQyy.exe
  2⤵
  PID:5136
- C:\Windows\System\CVYxMOK.exe
  C:\Windows\System\CVYxMOK.exe
  2⤵
  PID:5152
- C:\Windows\System\SIfNaDV.exe
  C:\Windows\System\SIfNaDV.exe
  2⤵
  PID:5172
- C:\Windows\System\gnQmApf.exe
  C:\Windows\System\gnQmApf.exe
  2⤵
  PID:5200
- C:\Windows\System\okiXvCO.exe
  C:\Windows\System\okiXvCO.exe
  2⤵
  PID:5224
- C:\Windows\System\thvBjBc.exe
  C:\Windows\System\thvBjBc.exe
  2⤵
  PID:5244
- C:\Windows\System\XGPeYgS.exe
  C:\Windows\System\XGPeYgS.exe
  2⤵
  PID:5260
- C:\Windows\System\DMmJFcZ.exe
  C:\Windows\System\DMmJFcZ.exe
  2⤵
  PID:5276
- C:\Windows\System\iKiFwJe.exe
  C:\Windows\System\iKiFwJe.exe
  2⤵
  PID:5292
- C:\Windows\System\pzSICNc.exe
  C:\Windows\System\pzSICNc.exe
  2⤵
  PID:5316
- C:\Windows\System\DDmnKFp.exe
  C:\Windows\System\DDmnKFp.exe
  2⤵
  PID:5356
- C:\Windows\System\svmrWGR.exe
  C:\Windows\System\svmrWGR.exe
  2⤵
  PID:5396
- C:\Windows\System\ecfBbnB.exe
  C:\Windows\System\ecfBbnB.exe
  2⤵
  PID:5416
- C:\Windows\System\bHGDipY.exe
  C:\Windows\System\bHGDipY.exe
  2⤵
  PID:5436
- C:\Windows\System\FAoxvph.exe
  C:\Windows\System\FAoxvph.exe
  2⤵
  PID:5452
- C:\Windows\System\tUYwCJY.exe
  C:\Windows\System\tUYwCJY.exe
  2⤵
  PID:5472
- C:\Windows\System\lUFPilg.exe
  C:\Windows\System\lUFPilg.exe
  2⤵
  PID:5492
- C:\Windows\System\nbnNndn.exe
  C:\Windows\System\nbnNndn.exe
  2⤵
  PID:5508
- C:\Windows\System\WPkJIVO.exe
  C:\Windows\System\WPkJIVO.exe
  2⤵
  PID:5524
- C:\Windows\System\tGjlhny.exe
  C:\Windows\System\tGjlhny.exe
  2⤵
  PID:5540
- C:\Windows\System\uCwNaXs.exe
  C:\Windows\System\uCwNaXs.exe
  2⤵
  PID:5556
- C:\Windows\System\tfjfhnw.exe
  C:\Windows\System\tfjfhnw.exe
  2⤵
  PID:5576
- C:\Windows\System\fPLQiXJ.exe
  C:\Windows\System\fPLQiXJ.exe
  2⤵
  PID:5592
- C:\Windows\System\LmVcOOM.exe
  C:\Windows\System\LmVcOOM.exe
  2⤵
  PID:5612
- C:\Windows\System\UAsokLA.exe
  C:\Windows\System\UAsokLA.exe
  2⤵
  PID:5636
- C:\Windows\System\arRGEyb.exe
  C:\Windows\System\arRGEyb.exe
  2⤵
  PID:5660
- C:\Windows\System\NrzOSnK.exe
  C:\Windows\System\NrzOSnK.exe
  2⤵
  PID:5680
- C:\Windows\System\EFaYYhC.exe
  C:\Windows\System\EFaYYhC.exe
  2⤵
  PID:5700
- C:\Windows\System\taxVZZa.exe
  C:\Windows\System\taxVZZa.exe
  2⤵
  PID:5716
- C:\Windows\System\SbyJovY.exe
  C:\Windows\System\SbyJovY.exe
  2⤵
  PID:5732
- C:\Windows\System\uxWtZdk.exe
  C:\Windows\System\uxWtZdk.exe
  2⤵
  PID:5752
- C:\Windows\System\DiomUcg.exe
  C:\Windows\System\DiomUcg.exe
  2⤵
  PID:5768
- C:\Windows\System\pFuoWWJ.exe
  C:\Windows\System\pFuoWWJ.exe
  2⤵
  PID:5796
- C:\Windows\System\LtSJgxV.exe
  C:\Windows\System\LtSJgxV.exe
  2⤵
  PID:5816
- C:\Windows\System\uGZwLHI.exe
  C:\Windows\System\uGZwLHI.exe
  2⤵
  PID:5832
- C:\Windows\System\McvYVPN.exe
  C:\Windows\System\McvYVPN.exe
  2⤵
  PID:5852
- C:\Windows\System\plzOmOe.exe
  C:\Windows\System\plzOmOe.exe
  2⤵
  PID:5892
- C:\Windows\System\ifQCxoj.exe
  C:\Windows\System\ifQCxoj.exe
  2⤵
  PID:5912
- C:\Windows\System\TjDcQdU.exe
  C:\Windows\System\TjDcQdU.exe
  2⤵
  PID:5932
- C:\Windows\System\LSEyAAz.exe
  C:\Windows\System\LSEyAAz.exe
  2⤵
  PID:5948
- C:\Windows\System\domCrOb.exe
  C:\Windows\System\domCrOb.exe
  2⤵
  PID:5964
- C:\Windows\System\vnfIRTl.exe
  C:\Windows\System\vnfIRTl.exe
  2⤵
  PID:5980
- C:\Windows\System\QuMQVNl.exe
  C:\Windows\System\QuMQVNl.exe
  2⤵
  PID:5996
- C:\Windows\System\OCAaJfD.exe
  C:\Windows\System\OCAaJfD.exe
  2⤵
  PID:6012
- C:\Windows\System\yWQWgWc.exe
  C:\Windows\System\yWQWgWc.exe
  2⤵
  PID:6028
- C:\Windows\System\eYnqGnj.exe
  C:\Windows\System\eYnqGnj.exe
  2⤵
  PID:6044
- C:\Windows\System\cAzPRSC.exe
  C:\Windows\System\cAzPRSC.exe
  2⤵
  PID:6060
- C:\Windows\System\ClKSgoM.exe
  C:\Windows\System\ClKSgoM.exe
  2⤵
  PID:6076
- C:\Windows\System\UPtBBjg.exe
  C:\Windows\System\UPtBBjg.exe
  2⤵
  PID:6104
- C:\Windows\System\onAsiPq.exe
  C:\Windows\System\onAsiPq.exe
  2⤵
  PID:6124
- C:\Windows\System\MKkrbwn.exe
  C:\Windows\System\MKkrbwn.exe
  2⤵
  PID:5128
- C:\Windows\System\mcEtGss.exe
  C:\Windows\System\mcEtGss.exe
  2⤵
  PID:5208
- C:\Windows\System\lpiMqBy.exe
  C:\Windows\System\lpiMqBy.exe
  2⤵
  PID:5252
- C:\Windows\System\YEHMsMD.exe
  C:\Windows\System\YEHMsMD.exe
  2⤵
  PID:4844
- C:\Windows\System\rZIoJPF.exe
  C:\Windows\System\rZIoJPF.exe
  2⤵
  PID:4508
- C:\Windows\System\LiOXZna.exe
  C:\Windows\System\LiOXZna.exe
  2⤵
  PID:3992
- C:\Windows\System\ywhbyAV.exe
  C:\Windows\System\ywhbyAV.exe
  2⤵
  PID:5148
- C:\Windows\System\dtnbfZh.exe
  C:\Windows\System\dtnbfZh.exe
  2⤵
  PID:5236
- C:\Windows\System\cBqASct.exe
  C:\Windows\System\cBqASct.exe
  2⤵
  PID:5300
- C:\Windows\System\XBSCOrX.exe
  C:\Windows\System\XBSCOrX.exe
  2⤵
  PID:5336
- C:\Windows\System\LtLSVHy.exe
  C:\Windows\System\LtLSVHy.exe
  2⤵
  PID:5408
- C:\Windows\System\pTYQXMp.exe
  C:\Windows\System\pTYQXMp.exe
  2⤵
  PID:5448
- C:\Windows\System\bqztUZx.exe
  C:\Windows\System\bqztUZx.exe
  2⤵
  PID:5488
- C:\Windows\System\OOOETwf.exe
  C:\Windows\System\OOOETwf.exe
  2⤵
  PID:5552
- C:\Windows\System\MBOMYfM.exe
  C:\Windows\System\MBOMYfM.exe
  2⤵
  PID:5372
- C:\Windows\System\lyzHHGZ.exe
  C:\Windows\System\lyzHHGZ.exe
  2⤵
  PID:5392
- C:\Windows\System\doKZafG.exe
  C:\Windows\System\doKZafG.exe
  2⤵
  PID:5460
- C:\Windows\System\BxVkZaN.exe
  C:\Windows\System\BxVkZaN.exe
  2⤵
  PID:5672
- C:\Windows\System\bazFFsI.exe
  C:\Windows\System\bazFFsI.exe
  2⤵
  PID:5744
- C:\Windows\System\ccIgHyn.exe
  C:\Windows\System\ccIgHyn.exe
  2⤵
  PID:5504
- C:\Windows\System\qaUAxrB.exe
  C:\Windows\System\qaUAxrB.exe
  2⤵
  PID:5572
- C:\Windows\System\iATuJJR.exe
  C:\Windows\System\iATuJJR.exe
  2⤵
  PID:5644
- C:\Windows\System\cQkFFtT.exe
  C:\Windows\System\cQkFFtT.exe
  2⤵
  PID:5656
- C:\Windows\System\fRxfkAx.exe
  C:\Windows\System\fRxfkAx.exe
  2⤵
  PID:5724
- C:\Windows\System\XhkGWmt.exe
  C:\Windows\System\XhkGWmt.exe
  2⤵
  PID:5824
- C:\Windows\System\tXpWqUX.exe
  C:\Windows\System\tXpWqUX.exe
  2⤵
  PID:5868
- C:\Windows\System\uTSUBUK.exe
  C:\Windows\System\uTSUBUK.exe
  2⤵
  PID:5888
- C:\Windows\System\HizHhLg.exe
  C:\Windows\System\HizHhLg.exe
  2⤵
  PID:5956
- C:\Windows\System\txVvoIp.exe
  C:\Windows\System\txVvoIp.exe
  2⤵
  PID:6020
- C:\Windows\System\KWNNPcQ.exe
  C:\Windows\System\KWNNPcQ.exe
  2⤵
  PID:6092
- C:\Windows\System\vYsjzcu.exe
  C:\Windows\System\vYsjzcu.exe
  2⤵
  PID:6140
- C:\Windows\System\gCWHywR.exe
  C:\Windows\System\gCWHywR.exe
  2⤵
  PID:5848
- C:\Windows\System\IvkWNpX.exe
  C:\Windows\System\IvkWNpX.exe
  2⤵
  PID:5220
- C:\Windows\System\TbLAVxV.exe
  C:\Windows\System\TbLAVxV.exe
  2⤵
  PID:6112
- C:\Windows\System\McfpZJR.exe
  C:\Windows\System\McfpZJR.exe
  2⤵
  PID:6036
- C:\Windows\System\GGfPBid.exe
  C:\Windows\System\GGfPBid.exe
  2⤵
  PID:5160
- C:\Windows\System\zPMEeza.exe
  C:\Windows\System\zPMEeza.exe
  2⤵
  PID:5288
- C:\Windows\System\FpLeYPI.exe
  C:\Windows\System\FpLeYPI.exe
  2⤵
  PID:5976
- C:\Windows\System\pxpkEiZ.exe
  C:\Windows\System\pxpkEiZ.exe
  2⤵
  PID:4924
- C:\Windows\System\QUeyXlD.exe
  C:\Windows\System\QUeyXlD.exe
  2⤵
  PID:5088
- C:\Windows\System\LwUFeqR.exe
  C:\Windows\System\LwUFeqR.exe
  2⤵
  PID:5268
- C:\Windows\System\knzKpak.exe
  C:\Windows\System\knzKpak.exe
  2⤵
  PID:5332
- C:\Windows\System\pyvvJXc.exe
  C:\Windows\System\pyvvJXc.exe
  2⤵
  PID:4860
- C:\Windows\System\gKsHlHD.exe
  C:\Windows\System\gKsHlHD.exe
  2⤵
  PID:5188
- C:\Windows\System\aVSUBwh.exe
  C:\Windows\System\aVSUBwh.exe
  2⤵
  PID:5368
- C:\Windows\System\CfsiCKj.exe
  C:\Windows\System\CfsiCKj.exe
  2⤵
  PID:5588
- C:\Windows\System\RVHCKyd.exe
  C:\Windows\System\RVHCKyd.exe
  2⤵
  PID:5620
- C:\Windows\System\cQXsqaX.exe
  C:\Windows\System\cQXsqaX.exe
  2⤵
  PID:5464
- C:\Windows\System\FflwTFC.exe
  C:\Windows\System\FflwTFC.exe
  2⤵
  PID:5652
- C:\Windows\System\wOPRuST.exe
  C:\Windows\System\wOPRuST.exe
  2⤵
  PID:5784
- C:\Windows\System\blUYoSN.exe
  C:\Windows\System\blUYoSN.exe
  2⤵
  PID:5988
- C:\Windows\System\qxSmfgs.exe
  C:\Windows\System\qxSmfgs.exe
  2⤵
  PID:5424
- C:\Windows\System\aVynHjV.exe
  C:\Windows\System\aVynHjV.exe
  2⤵
  PID:5908
- C:\Windows\System\yGZXgXk.exe
  C:\Windows\System\yGZXgXk.exe
  2⤵
  PID:5812
- C:\Windows\System\JbTgwnn.exe
  C:\Windows\System\JbTgwnn.exe
  2⤵
  PID:6004
- C:\Windows\System\ZBTrHlj.exe
  C:\Windows\System\ZBTrHlj.exe
  2⤵
  PID:6156
- C:\Windows\System\pEUUjax.exe
  C:\Windows\System\pEUUjax.exe
  2⤵
  PID:6172
- C:\Windows\System\nYhmuMj.exe
  C:\Windows\System\nYhmuMj.exe
  2⤵
  PID:6188
- C:\Windows\System\wMGAYfx.exe
  C:\Windows\System\wMGAYfx.exe
  2⤵
  PID:6204
- C:\Windows\System\pzmtxbD.exe
  C:\Windows\System\pzmtxbD.exe
  2⤵
  PID:6228
- C:\Windows\System\SqPIieu.exe
  C:\Windows\System\SqPIieu.exe
  2⤵
  PID:6312
- C:\Windows\System\FvoFTDr.exe
  C:\Windows\System\FvoFTDr.exe
  2⤵
  PID:6340
- C:\Windows\System\PAIJkRY.exe
  C:\Windows\System\PAIJkRY.exe
  2⤵
  PID:6360
- C:\Windows\System\zhJPQuz.exe
  C:\Windows\System\zhJPQuz.exe
  2⤵
  PID:6388
- C:\Windows\System\KPtMkuN.exe
  C:\Windows\System\KPtMkuN.exe
  2⤵
  PID:6416
- C:\Windows\System\WlPmlXX.exe
  C:\Windows\System\WlPmlXX.exe
  2⤵
  PID:6432
- C:\Windows\System\SIRHOqx.exe
  C:\Windows\System\SIRHOqx.exe
  2⤵
  PID:6448
- C:\Windows\System\xKgduVS.exe
  C:\Windows\System\xKgduVS.exe
  2⤵
  PID:6464
- C:\Windows\System\XHiMHWA.exe
  C:\Windows\System\XHiMHWA.exe
  2⤵
  PID:6484
- C:\Windows\System\lWhszSz.exe
  C:\Windows\System\lWhszSz.exe
  2⤵
  PID:6500
- C:\Windows\System\SqZyOpr.exe
  C:\Windows\System\SqZyOpr.exe
  2⤵
  PID:6520
- C:\Windows\System\OoXnPvj.exe
  C:\Windows\System\OoXnPvj.exe
  2⤵
  PID:6540
- C:\Windows\System\vNJNhLC.exe
  C:\Windows\System\vNJNhLC.exe
  2⤵
  PID:6564
- C:\Windows\System\IaIcVrb.exe
  C:\Windows\System\IaIcVrb.exe
  2⤵
  PID:6580
- C:\Windows\System\UEWiYWU.exe
  C:\Windows\System\UEWiYWU.exe
  2⤵
  PID:6596
- C:\Windows\System\KnMJXtU.exe
  C:\Windows\System\KnMJXtU.exe
  2⤵
  PID:6624
- C:\Windows\System\VHaCTpO.exe
  C:\Windows\System\VHaCTpO.exe
  2⤵
  PID:6644
- C:\Windows\System\uitHPqZ.exe
  C:\Windows\System\uitHPqZ.exe
  2⤵
  PID:6660
- C:\Windows\System\ULpaKre.exe
  C:\Windows\System\ULpaKre.exe
  2⤵
  PID:6692
- C:\Windows\System\DducXDD.exe
  C:\Windows\System\DducXDD.exe
  2⤵
  PID:6712
- C:\Windows\System\MjSpCAS.exe
  C:\Windows\System\MjSpCAS.exe
  2⤵
  PID:6728
- C:\Windows\System\UsJzybH.exe
  C:\Windows\System\UsJzybH.exe
  2⤵
  PID:6756
- C:\Windows\System\dzxbffB.exe
  C:\Windows\System\dzxbffB.exe
  2⤵
  PID:6776
- C:\Windows\System\MgzQmGP.exe
  C:\Windows\System\MgzQmGP.exe
  2⤵
  PID:6796
- C:\Windows\System\hKAROJM.exe
  C:\Windows\System\hKAROJM.exe
  2⤵
  PID:6816
- C:\Windows\System\ZaFLWDc.exe
  C:\Windows\System\ZaFLWDc.exe
  2⤵
  PID:6836
- C:\Windows\System\WLIzUgU.exe
  C:\Windows\System\WLIzUgU.exe
  2⤵
  PID:6856
- C:\Windows\System\ZZRqHgI.exe
  C:\Windows\System\ZZRqHgI.exe
  2⤵
  PID:6876
- C:\Windows\System\GixoKSs.exe
  C:\Windows\System\GixoKSs.exe
  2⤵
  PID:6896
- C:\Windows\System\ywjiBot.exe
  C:\Windows\System\ywjiBot.exe
  2⤵
  PID:6916
- C:\Windows\System\hMKcwuK.exe
  C:\Windows\System\hMKcwuK.exe
  2⤵
  PID:6932
- C:\Windows\System\sZewsww.exe
  C:\Windows\System\sZewsww.exe
  2⤵
  PID:6952
- C:\Windows\System\lLJPotd.exe
  C:\Windows\System\lLJPotd.exe
  2⤵
  PID:6968
- C:\Windows\System\undyxDS.exe
  C:\Windows\System\undyxDS.exe
  2⤵
  PID:6984
- C:\Windows\System\XgMIneE.exe
  C:\Windows\System\XgMIneE.exe
  2⤵
  PID:7000
- C:\Windows\System\IAFELMd.exe
  C:\Windows\System\IAFELMd.exe
  2⤵
  PID:7016
- C:\Windows\System\BixfPWy.exe
  C:\Windows\System\BixfPWy.exe
  2⤵
  PID:7032
- C:\Windows\System\xJxsYdp.exe
  C:\Windows\System\xJxsYdp.exe
  2⤵
  PID:7048
- C:\Windows\System\IBRDFIN.exe
  C:\Windows\System\IBRDFIN.exe
  2⤵
  PID:7068
- C:\Windows\System\HWyRfmm.exe
  C:\Windows\System\HWyRfmm.exe
  2⤵
  PID:7096
- C:\Windows\System\kLrNCVT.exe
  C:\Windows\System\kLrNCVT.exe
  2⤵
  PID:7116
- C:\Windows\System\iKOnWBl.exe
  C:\Windows\System\iKOnWBl.exe
  2⤵
  PID:7132
- C:\Windows\System\ALkuTEf.exe
  C:\Windows\System\ALkuTEf.exe
  2⤵
  PID:4180
- C:\Windows\System\VIiykuK.exe
  C:\Windows\System\VIiykuK.exe
  2⤵
  PID:5116
- C:\Windows\System\UsVfrqC.exe
  C:\Windows\System\UsVfrqC.exe
  2⤵
  PID:5872
- C:\Windows\System\RKKlSxW.exe
  C:\Windows\System\RKKlSxW.exe
  2⤵
  PID:6132
- C:\Windows\System\LQdciit.exe
  C:\Windows\System\LQdciit.exe
  2⤵
  PID:5668
- C:\Windows\System\TeTXMCK.exe
  C:\Windows\System\TeTXMCK.exe
  2⤵
  PID:5532
- C:\Windows\System\OucQUln.exe
  C:\Windows\System\OucQUln.exe
  2⤵
  PID:6084
- C:\Windows\System\YPMzUwg.exe
  C:\Windows\System\YPMzUwg.exe
  2⤵
  PID:6200
- C:\Windows\System\hFPleJB.exe
  C:\Windows\System\hFPleJB.exe
  2⤵
  PID:6256
- C:\Windows\System\QSYLMDo.exe
  C:\Windows\System\QSYLMDo.exe
  2⤵
  PID:1992
- C:\Windows\System\fUYEQYq.exe
  C:\Windows\System\fUYEQYq.exe
  2⤵
  PID:5972
- C:\Windows\System\RFGPyMt.exe
  C:\Windows\System\RFGPyMt.exe
  2⤵
  PID:4540
- C:\Windows\System\JHKGPzz.exe
  C:\Windows\System\JHKGPzz.exe
  2⤵
  PID:5348
- C:\Windows\System\zbSbfkK.exe
  C:\Windows\System\zbSbfkK.exe
  2⤵
  PID:6292
- C:\Windows\System\ucikJsG.exe
  C:\Windows\System\ucikJsG.exe
  2⤵
  PID:5904
- C:\Windows\System\MSjoGbM.exe
  C:\Windows\System\MSjoGbM.exe
  2⤵
  PID:5840
- C:\Windows\System\HyLlnnM.exe
  C:\Windows\System\HyLlnnM.exe
  2⤵
  PID:5180
- C:\Windows\System\XSTJvnE.exe
  C:\Windows\System\XSTJvnE.exe
  2⤵
  PID:6052
- C:\Windows\System\WgjRPTO.exe
  C:\Windows\System\WgjRPTO.exe
  2⤵
  PID:5284
- C:\Windows\System\eDgLDEz.exe
  C:\Windows\System\eDgLDEz.exe
  2⤵
  PID:6184
- C:\Windows\System\EFnNSdX.exe
  C:\Windows\System\EFnNSdX.exe
  2⤵
  PID:6352
- C:\Windows\System\QukJzuX.exe
  C:\Windows\System\QukJzuX.exe
  2⤵
  PID:6336
- C:\Windows\System\Nsqfedu.exe
  C:\Windows\System\Nsqfedu.exe
  2⤵
  PID:6376
- C:\Windows\System\uzPjgfR.exe
  C:\Windows\System\uzPjgfR.exe
  2⤵
  PID:6408
- C:\Windows\System\bvqXpjg.exe
  C:\Windows\System\bvqXpjg.exe
  2⤵
  PID:6476
- C:\Windows\System\YCmODiS.exe
  C:\Windows\System\YCmODiS.exe
  2⤵
  PID:6516
- C:\Windows\System\qrdBKRh.exe
  C:\Windows\System\qrdBKRh.exe
  2⤵
  PID:6548
- C:\Windows\System\DXgVwhK.exe
  C:\Windows\System\DXgVwhK.exe
  2⤵
  PID:6532
- C:\Windows\System\GqnSKzG.exe
  C:\Windows\System\GqnSKzG.exe
  2⤵
  PID:6576
- C:\Windows\System\ggsrOtJ.exe
  C:\Windows\System\ggsrOtJ.exe
  2⤵
  PID:6632
- C:\Windows\System\QCODJsb.exe
  C:\Windows\System\QCODJsb.exe
  2⤵
  PID:6652
- C:\Windows\System\mJvWerC.exe
  C:\Windows\System\mJvWerC.exe
  2⤵
  PID:6672
- C:\Windows\System\sQzTINd.exe
  C:\Windows\System\sQzTINd.exe
  2⤵
  PID:6688
- C:\Windows\System\TpAanKz.exe
  C:\Windows\System\TpAanKz.exe
  2⤵
  PID:6656
- C:\Windows\System\ycwpAkq.exe
  C:\Windows\System\ycwpAkq.exe
  2⤵
  PID:6748
- C:\Windows\System\NnJFYFT.exe
  C:\Windows\System\NnJFYFT.exe
  2⤵
  PID:6792
- C:\Windows\System\UlitUxL.exe
  C:\Windows\System\UlitUxL.exe
  2⤵
  PID:6812
- C:\Windows\System\wsfcLuL.exe
  C:\Windows\System\wsfcLuL.exe
  2⤵
  PID:6848
- C:\Windows\System\MQbCegP.exe
  C:\Windows\System\MQbCegP.exe
  2⤵
  PID:6884
- C:\Windows\System\eRLlAwJ.exe
  C:\Windows\System\eRLlAwJ.exe
  2⤵
  PID:6908
- C:\Windows\System\FFOOLVk.exe
  C:\Windows\System\FFOOLVk.exe
  2⤵
  PID:6960
- C:\Windows\System\ZittNcW.exe
  C:\Windows\System\ZittNcW.exe
  2⤵
  PID:7028
- C:\Windows\System\xRtxkpL.exe
  C:\Windows\System\xRtxkpL.exe
  2⤵
  PID:7104
- C:\Windows\System\bDWppWt.exe
  C:\Windows\System\bDWppWt.exe
  2⤵
  PID:6980
- C:\Windows\System\SXHpTGX.exe
  C:\Windows\System\SXHpTGX.exe
  2⤵
  PID:7092
- C:\Windows\System\elASENm.exe
  C:\Windows\System\elASENm.exe
  2⤵
  PID:5712
- C:\Windows\System\CbJKVZH.exe
  C:\Windows\System\CbJKVZH.exe
  2⤵
  PID:5860
- C:\Windows\System\zGfTFZU.exe
  C:\Windows\System\zGfTFZU.exe
  2⤵
  PID:6252
- C:\Windows\System\SSHqgZl.exe
  C:\Windows\System\SSHqgZl.exe
  2⤵
  PID:6240
- C:\Windows\System\KnQBTRC.exe
  C:\Windows\System\KnQBTRC.exe
  2⤵
  PID:6288
- C:\Windows\System\UOWjMoE.exe
  C:\Windows\System\UOWjMoE.exe
  2⤵
  PID:5760
- C:\Windows\System\tFTALPj.exe
  C:\Windows\System\tFTALPj.exe
  2⤵
  PID:6168
- C:\Windows\System\zxySYEY.exe
  C:\Windows\System\zxySYEY.exe
  2⤵
  PID:5484
- C:\Windows\System\iEKLSww.exe
  C:\Windows\System\iEKLSww.exe
  2⤵
  PID:5604
- C:\Windows\System\KZKxwyl.exe
  C:\Windows\System\KZKxwyl.exe
  2⤵
  PID:5232
- C:\Windows\System\RvZiIDL.exe
  C:\Windows\System\RvZiIDL.exe
  2⤵
  PID:5432
- C:\Windows\System\TRWHenG.exe
  C:\Windows\System\TRWHenG.exe
  2⤵
  PID:6120
- C:\Windows\System\vsMAEhP.exe
  C:\Windows\System\vsMAEhP.exe
  2⤵
  PID:6396
- C:\Windows\System\xjSzOrv.exe
  C:\Windows\System\xjSzOrv.exe
  2⤵
  PID:6384
- C:\Windows\System\BQpyiDQ.exe
  C:\Windows\System\BQpyiDQ.exe
  2⤵
  PID:6428
- C:\Windows\System\gcUOOTD.exe
  C:\Windows\System\gcUOOTD.exe
  2⤵
  PID:6604
- C:\Windows\System\WvroxaY.exe
  C:\Windows\System\WvroxaY.exe
  2⤵
  PID:6460
- C:\Windows\System\ZMwMFGg.exe
  C:\Windows\System\ZMwMFGg.exe
  2⤵
  PID:6684
- C:\Windows\System\zzlMWMF.exe
  C:\Windows\System\zzlMWMF.exe
  2⤵
  PID:6668
- C:\Windows\System\EdNiVFV.exe
  C:\Windows\System\EdNiVFV.exe
  2⤵
  PID:6512
- C:\Windows\System\YePJdTz.exe
  C:\Windows\System\YePJdTz.exe
  2⤵
  PID:6764
- C:\Windows\System\ceuxZnB.exe
  C:\Windows\System\ceuxZnB.exe
  2⤵
  PID:7060
- C:\Windows\System\LNMbSfk.exe
  C:\Windows\System\LNMbSfk.exe
  2⤵
  PID:7148
- C:\Windows\System\hBfAkJz.exe
  C:\Windows\System\hBfAkJz.exe
  2⤵
  PID:7164
- C:\Windows\System\PvgJrod.exe
  C:\Windows\System\PvgJrod.exe
  2⤵
  PID:5308
- C:\Windows\System\cIkKCdk.exe
  C:\Windows\System\cIkKCdk.exe
  2⤵
  PID:6844
- C:\Windows\System\phxHUrD.exe
  C:\Windows\System\phxHUrD.exe
  2⤵
  PID:7024
- C:\Windows\System\fSpFpSR.exe
  C:\Windows\System\fSpFpSR.exe
  2⤵
  PID:7080
- C:\Windows\System\nLdpYoO.exe
  C:\Windows\System\nLdpYoO.exe
  2⤵
  PID:5548
- C:\Windows\System\ArQvejd.exe
  C:\Windows\System\ArQvejd.exe
  2⤵
  PID:6300
- C:\Windows\System\LhyvRQc.exe
  C:\Windows\System\LhyvRQc.exe
  2⤵
  PID:4724
- C:\Windows\System\RQHzzNW.exe
  C:\Windows\System\RQHzzNW.exe
  2⤵
  PID:6056
- C:\Windows\System\RyZxDGP.exe
  C:\Windows\System\RyZxDGP.exe
  2⤵
  PID:5324
- C:\Windows\System\PrhjCEr.exe
  C:\Windows\System\PrhjCEr.exe
  2⤵
  PID:5920
- C:\Windows\System\ZbJcpwR.exe
  C:\Windows\System\ZbJcpwR.exe
  2⤵
  PID:6456
- C:\Windows\System\ZFUnCyl.exe
  C:\Windows\System\ZFUnCyl.exe
  2⤵
  PID:5520
- C:\Windows\System\HueMQSy.exe
  C:\Windows\System\HueMQSy.exe
  2⤵
  PID:6736
- C:\Windows\System\uPqdLBq.exe
  C:\Windows\System\uPqdLBq.exe
  2⤵
  PID:6864
- C:\Windows\System\tKZtKHs.exe
  C:\Windows\System\tKZtKHs.exe
  2⤵
  PID:6496
- C:\Windows\System\sIVdYXF.exe
  C:\Windows\System\sIVdYXF.exe
  2⤵
  PID:6444
- C:\Windows\System\pGELZDn.exe
  C:\Windows\System\pGELZDn.exe
  2⤵
  PID:6528
- C:\Windows\System\lSrAFnK.exe
  C:\Windows\System\lSrAFnK.exe
  2⤵
  PID:7044
- C:\Windows\System\vWVpiPE.exe
  C:\Windows\System\vWVpiPE.exe
  2⤵
  PID:6940
- C:\Windows\System\YSpHifZ.exe
  C:\Windows\System\YSpHifZ.exe
  2⤵
  PID:6996
- C:\Windows\System\tJvkrHX.exe
  C:\Windows\System\tJvkrHX.exe
  2⤵
  PID:6280
- C:\Windows\System\SaOVGEv.exe
  C:\Windows\System\SaOVGEv.exe
  2⤵
  PID:6068
- C:\Windows\System\GSXKCJu.exe
  C:\Windows\System\GSXKCJu.exe
  2⤵
  PID:5568
- C:\Windows\System\qyeIAZV.exe
  C:\Windows\System\qyeIAZV.exe
  2⤵
  PID:5500
- C:\Windows\System\zsqPCwl.exe
  C:\Windows\System\zsqPCwl.exe
  2⤵
  PID:6424
- C:\Windows\System\nOojhgO.exe
  C:\Windows\System\nOojhgO.exe
  2⤵
  PID:6808
- C:\Windows\System\xDaXOsH.exe
  C:\Windows\System\xDaXOsH.exe
  2⤵
  PID:7012
- C:\Windows\System\uvDNxvj.exe
  C:\Windows\System\uvDNxvj.exe
  2⤵
  PID:6924
- C:\Windows\System\ywhxmdV.exe
  C:\Windows\System\ywhxmdV.exe
  2⤵
  PID:6872
- C:\Windows\System\bakpJAk.exe
  C:\Windows\System\bakpJAk.exe
  2⤵
  PID:6772
- C:\Windows\System\odfzJOg.exe
  C:\Windows\System\odfzJOg.exe
  2⤵
  PID:6136
- C:\Windows\System\vqmPhMB.exe
  C:\Windows\System\vqmPhMB.exe
  2⤵
  PID:5924
- C:\Windows\System\GtnBRYC.exe
  C:\Windows\System\GtnBRYC.exe
  2⤵
  PID:5940
- C:\Windows\System\cGuXAhE.exe
  C:\Windows\System\cGuXAhE.exe
  2⤵
  PID:5628
- C:\Windows\System\cPinWTz.exe
  C:\Windows\System\cPinWTz.exe
  2⤵
  PID:7192
- C:\Windows\System\kwZHQSy.exe
  C:\Windows\System\kwZHQSy.exe
  2⤵
  PID:7208
- C:\Windows\System\NGUpDec.exe
  C:\Windows\System\NGUpDec.exe
  2⤵
  PID:7228
- C:\Windows\System\qRtMLCn.exe
  C:\Windows\System\qRtMLCn.exe
  2⤵
  PID:7248
- C:\Windows\System\MnmAAvo.exe
  C:\Windows\System\MnmAAvo.exe
  2⤵
  PID:7272
- C:\Windows\System\KpsikWg.exe
  C:\Windows\System\KpsikWg.exe
  2⤵
  PID:7292
- C:\Windows\System\tCodtat.exe
  C:\Windows\System\tCodtat.exe
  2⤵
  PID:7316
- C:\Windows\System\nZpmnZq.exe
  C:\Windows\System\nZpmnZq.exe
  2⤵
  PID:7332
- C:\Windows\System\LdJjwcj.exe
  C:\Windows\System\LdJjwcj.exe
  2⤵
  PID:7348
- C:\Windows\System\Dejrmxq.exe
  C:\Windows\System\Dejrmxq.exe
  2⤵
  PID:7364
- C:\Windows\System\WsoXZOx.exe
  C:\Windows\System\WsoXZOx.exe
  2⤵
  PID:7432
- C:\Windows\System\akgUriT.exe
  C:\Windows\System\akgUriT.exe
  2⤵
  PID:7448
- C:\Windows\System\BPNbAxx.exe
  C:\Windows\System\BPNbAxx.exe
  2⤵
  PID:7468
- C:\Windows\System\MbyJmXU.exe
  C:\Windows\System\MbyJmXU.exe
  2⤵
  PID:7488
- C:\Windows\System\ZEpADag.exe
  C:\Windows\System\ZEpADag.exe
  2⤵
  PID:7508
- C:\Windows\System\NkygeoS.exe
  C:\Windows\System\NkygeoS.exe
  2⤵
  PID:7524
- C:\Windows\System\gtKRVnF.exe
  C:\Windows\System\gtKRVnF.exe
  2⤵
  PID:7540
- C:\Windows\System\luPEZjY.exe
  C:\Windows\System\luPEZjY.exe
  2⤵
  PID:7560
- C:\Windows\System\KPLBTun.exe
  C:\Windows\System\KPLBTun.exe
  2⤵
  PID:7576
- C:\Windows\System\xTqDyRS.exe
  C:\Windows\System\xTqDyRS.exe
  2⤵
  PID:7592
- C:\Windows\System\GLbBoJo.exe
  C:\Windows\System\GLbBoJo.exe
  2⤵
  PID:7616
- C:\Windows\System\jCnMYrX.exe
  C:\Windows\System\jCnMYrX.exe
  2⤵
  PID:7636
- C:\Windows\System\KNWZjQJ.exe
  C:\Windows\System\KNWZjQJ.exe
  2⤵
  PID:7668
- C:\Windows\System\MKrxwad.exe
  C:\Windows\System\MKrxwad.exe
  2⤵
  PID:7688
- C:\Windows\System\elQtDzv.exe
  C:\Windows\System\elQtDzv.exe
  2⤵
  PID:7704
- C:\Windows\System\JkgPaRX.exe
  C:\Windows\System\JkgPaRX.exe
  2⤵
  PID:7720
- C:\Windows\System\bjUAUAe.exe
  C:\Windows\System\bjUAUAe.exe
  2⤵
  PID:7736
- C:\Windows\System\XnMXUUa.exe
  C:\Windows\System\XnMXUUa.exe
  2⤵
  PID:7752
- C:\Windows\System\qtHJpPK.exe
  C:\Windows\System\qtHJpPK.exe
  2⤵
  PID:7768
- C:\Windows\System\KgBdMBc.exe
  C:\Windows\System\KgBdMBc.exe
  2⤵
  PID:7788
- C:\Windows\System\RErYZIY.exe
  C:\Windows\System\RErYZIY.exe
  2⤵
  PID:7824
- C:\Windows\System\zyiuATx.exe
  C:\Windows\System\zyiuATx.exe
  2⤵
  PID:7840
- C:\Windows\System\Zeeywec.exe
  C:\Windows\System\Zeeywec.exe
  2⤵
  PID:7856
- C:\Windows\System\qHxrrSy.exe
  C:\Windows\System\qHxrrSy.exe
  2⤵
  PID:7872
- C:\Windows\System\pLWABDv.exe
  C:\Windows\System\pLWABDv.exe
  2⤵
  PID:7896
- C:\Windows\System\kMAGmzt.exe
  C:\Windows\System\kMAGmzt.exe
  2⤵
  PID:7916
- C:\Windows\System\KNhBPna.exe
  C:\Windows\System\KNhBPna.exe
  2⤵
  PID:7936
- C:\Windows\System\RIRUdDo.exe
  C:\Windows\System\RIRUdDo.exe
  2⤵
  PID:7956
- C:\Windows\System\AuZZWaF.exe
  C:\Windows\System\AuZZWaF.exe
  2⤵
  PID:7980
- C:\Windows\System\Cjivunw.exe
  C:\Windows\System\Cjivunw.exe
  2⤵
  PID:8000
- C:\Windows\System\pkjoRhN.exe
  C:\Windows\System\pkjoRhN.exe
  2⤵
  PID:8016
- C:\Windows\System\kKgCwXq.exe
  C:\Windows\System\kKgCwXq.exe
  2⤵
  PID:8032
- C:\Windows\System\HVOWuGL.exe
  C:\Windows\System\HVOWuGL.exe
  2⤵
  PID:8052
- C:\Windows\System\ZpuBobP.exe
  C:\Windows\System\ZpuBobP.exe
  2⤵
  PID:8068
- C:\Windows\System\dzExRoU.exe
  C:\Windows\System\dzExRoU.exe
  2⤵
  PID:8084
- C:\Windows\System\feHBEeg.exe
  C:\Windows\System\feHBEeg.exe
  2⤵
  PID:8104
- C:\Windows\System\CjqvdjL.exe
  C:\Windows\System\CjqvdjL.exe
  2⤵
  PID:8128
- C:\Windows\System\OVhazvz.exe
  C:\Windows\System\OVhazvz.exe
  2⤵
  PID:8144
- C:\Windows\System\PogfxvS.exe
  C:\Windows\System\PogfxvS.exe
  2⤵
  PID:8160
- C:\Windows\System\mxHFiGd.exe
  C:\Windows\System\mxHFiGd.exe
  2⤵
  PID:8180
- C:\Windows\System\tfsiBhK.exe
  C:\Windows\System\tfsiBhK.exe
  2⤵
  PID:5776
- C:\Windows\System\pvXFXEH.exe
  C:\Windows\System\pvXFXEH.exe
  2⤵
  PID:6220
- C:\Windows\System\xWwIHje.exe
  C:\Windows\System\xWwIHje.exe
  2⤵
  PID:7244
- C:\Windows\System\YKZyarq.exe
  C:\Windows\System\YKZyarq.exe
  2⤵
  PID:6268
- C:\Windows\System\gfOFcxc.exe
  C:\Windows\System\gfOFcxc.exe
  2⤵
  PID:7324
- C:\Windows\System\WuFsZrV.exe
  C:\Windows\System\WuFsZrV.exe
  2⤵
  PID:7360
- C:\Windows\System\RblIvtS.exe
  C:\Windows\System\RblIvtS.exe
  2⤵
  PID:5608
- C:\Windows\System\CWRJekV.exe
  C:\Windows\System\CWRJekV.exe
  2⤵
  PID:6592
- C:\Windows\System\UmxEBQt.exe
  C:\Windows\System\UmxEBQt.exe
  2⤵
  PID:7224
- C:\Windows\System\ESfUyqR.exe
  C:\Windows\System\ESfUyqR.exe
  2⤵
  PID:7304
- C:\Windows\System\XPkPqmg.exe
  C:\Windows\System\XPkPqmg.exe
  2⤵
  PID:7384
- C:\Windows\System\uYOhHZQ.exe
  C:\Windows\System\uYOhHZQ.exe
  2⤵
  PID:7180
- C:\Windows\System\SWNzKWG.exe
  C:\Windows\System\SWNzKWG.exe
  2⤵
  PID:7308
- C:\Windows\System\RIwpJUC.exe
  C:\Windows\System\RIwpJUC.exe
  2⤵
  PID:7424
- C:\Windows\System\KrMkBzj.exe
  C:\Windows\System\KrMkBzj.exe
  2⤵
  PID:7480
- C:\Windows\System\LQeesRM.exe
  C:\Windows\System\LQeesRM.exe
  2⤵
  PID:7464
- C:\Windows\System\tdvVXpj.exe
  C:\Windows\System\tdvVXpj.exe
  2⤵
  PID:7556
- C:\Windows\System\usFPLBA.exe
  C:\Windows\System\usFPLBA.exe
  2⤵
  PID:7532
- C:\Windows\System\lYDUSMH.exe
  C:\Windows\System\lYDUSMH.exe
  2⤵
  PID:7572
- C:\Windows\System\VyWjSzy.exe
  C:\Windows\System\VyWjSzy.exe
  2⤵
  PID:7568
- C:\Windows\System\YQpuiKx.exe
  C:\Windows\System\YQpuiKx.exe
  2⤵
  PID:7784
- C:\Windows\System\iDrXNyJ.exe
  C:\Windows\System\iDrXNyJ.exe
  2⤵
  PID:7812
- C:\Windows\System\bPjbBYj.exe
  C:\Windows\System\bPjbBYj.exe
  2⤵
  PID:7816
- C:\Windows\System\NjOtbrP.exe
  C:\Windows\System\NjOtbrP.exe
  2⤵
  PID:7908
- C:\Windows\System\CEgsvUz.exe
  C:\Windows\System\CEgsvUz.exe
  2⤵
  PID:7952
- C:\Windows\System\aFZOPgH.exe
  C:\Windows\System\aFZOPgH.exe
  2⤵
  PID:7992
- C:\Windows\System\GlBoNaY.exe
  C:\Windows\System\GlBoNaY.exe
  2⤵
  PID:8064
- C:\Windows\System\klubMWz.exe
  C:\Windows\System\klubMWz.exe
  2⤵
  PID:8140
- C:\Windows\System\NZOfrTQ.exe
  C:\Windows\System\NZOfrTQ.exe
  2⤵
  PID:7160
- C:\Windows\System\IDwRsuG.exe
  C:\Windows\System\IDwRsuG.exe
  2⤵
  PID:5808
- C:\Windows\System\NGXFGMK.exe
  C:\Windows\System\NGXFGMK.exe
  2⤵
  PID:7964
- C:\Windows\System\UcGGSBX.exe
  C:\Windows\System\UcGGSBX.exe
  2⤵
  PID:7328
- C:\Windows\System\fQWBvId.exe
  C:\Windows\System\fQWBvId.exe
  2⤵
  PID:7408
- C:\Windows\System\cevXAXr.exe
  C:\Windows\System\cevXAXr.exe
  2⤵
  PID:7460
- C:\Windows\System\QnnKQov.exe
  C:\Windows\System\QnnKQov.exe
  2⤵
  PID:7504
- C:\Windows\System\piaKPIt.exe
  C:\Windows\System\piaKPIt.exe
  2⤵
  PID:8120
- C:\Windows\System\bznDvQj.exe
  C:\Windows\System\bznDvQj.exe
  2⤵
  PID:8008
- C:\Windows\System\QVVYJRy.exe
  C:\Windows\System\QVVYJRy.exe
  2⤵
  PID:8076
- C:\Windows\System\Nvnedaz.exe
  C:\Windows\System\Nvnedaz.exe
  2⤵
  PID:6680
- C:\Windows\System\EQRtSHR.exe
  C:\Windows\System\EQRtSHR.exe
  2⤵
  PID:7240
- C:\Windows\System\BvNKcWs.exe
  C:\Windows\System\BvNKcWs.exe
  2⤵
  PID:7188
- C:\Windows\System\pbCxUuF.exe
  C:\Windows\System\pbCxUuF.exe
  2⤵
  PID:7260
- C:\Windows\System\TKBifex.exe
  C:\Windows\System\TKBifex.exe
  2⤵
  PID:7444
- C:\Windows\System\CaLZdSn.exe
  C:\Windows\System\CaLZdSn.exe
  2⤵
  PID:7628
- C:\Windows\System\DelFlKw.exe
  C:\Windows\System\DelFlKw.exe
  2⤵
  PID:7712
- C:\Windows\System\zhnPAQz.exe
  C:\Windows\System\zhnPAQz.exe
  2⤵
  PID:7660
- C:\Windows\System\cayVqmb.exe
  C:\Windows\System\cayVqmb.exe
  2⤵
  PID:7760
- C:\Windows\System\ymUrhNS.exe
  C:\Windows\System\ymUrhNS.exe
  2⤵
  PID:7804
- C:\Windows\System\WNrJodR.exe
  C:\Windows\System\WNrJodR.exe
  2⤵
  PID:7904
- C:\Windows\System\EAspnLg.exe
  C:\Windows\System\EAspnLg.exe
  2⤵
  PID:8096
- C:\Windows\System\mSlxUlF.exe
  C:\Windows\System\mSlxUlF.exe
  2⤵
  PID:7288
- C:\Windows\System\IKDlLGw.exe
  C:\Windows\System\IKDlLGw.exe
  2⤵
  PID:7932
- C:\Windows\System\FeATsuy.exe
  C:\Windows\System\FeATsuy.exe
  2⤵
  PID:7944
- C:\Windows\System\psFdFcR.exe
  C:\Windows\System\psFdFcR.exe
  2⤵
  PID:8168
- C:\Windows\System\hHNzufe.exe
  C:\Windows\System\hHNzufe.exe
  2⤵
  PID:7588
- C:\Windows\System\lGWbhjz.exe
  C:\Windows\System\lGWbhjz.exe
  2⤵
  PID:7156
- C:\Windows\System\eeKPxWR.exe
  C:\Windows\System\eeKPxWR.exe
  2⤵
  PID:6308
- C:\Windows\System\jVisXKX.exe
  C:\Windows\System\jVisXKX.exe
  2⤵
  PID:7392
- C:\Windows\System\rLhHrfY.exe
  C:\Windows\System\rLhHrfY.exe
  2⤵
  PID:8156
- C:\Windows\System\FHipVuV.exe
  C:\Windows\System\FHipVuV.exe
  2⤵
  PID:2044
- C:\Windows\System\RsOkFxM.exe
  C:\Windows\System\RsOkFxM.exe
  2⤵
  PID:7880
- C:\Windows\System\sxSKJJz.exe
  C:\Windows\System\sxSKJJz.exe
  2⤵
  PID:7356
- C:\Windows\System\CUPMpRa.exe
  C:\Windows\System\CUPMpRa.exe
  2⤵
  PID:7604
- C:\Windows\System\eCTEpnV.exe
  C:\Windows\System\eCTEpnV.exe
  2⤵
  PID:7868
- C:\Windows\System\AUVwzTv.exe
  C:\Windows\System\AUVwzTv.exe
  2⤵
  PID:7676
- C:\Windows\System\IfYZBJN.exe
  C:\Windows\System\IfYZBJN.exe
  2⤵
  PID:8100
- C:\Windows\System\WSPkbsd.exe
  C:\Windows\System\WSPkbsd.exe
  2⤵
  PID:7340
- C:\Windows\System\mQobyeN.exe
  C:\Windows\System\mQobyeN.exe
  2⤵
  PID:7456
- C:\Windows\System\poIYexg.exe
  C:\Windows\System\poIYexg.exe
  2⤵
  PID:8048
- C:\Windows\System\PqnfItA.exe
  C:\Windows\System\PqnfItA.exe
  2⤵
  PID:7924
- C:\Windows\System\vaYIaLH.exe
  C:\Windows\System\vaYIaLH.exe
  2⤵
  PID:8152
- C:\Windows\System\XidPuvj.exe
  C:\Windows\System\XidPuvj.exe
  2⤵
  PID:7700
- C:\Windows\System\GvHnxtr.exe
  C:\Windows\System\GvHnxtr.exe
  2⤵
  PID:7836
- C:\Windows\System\wVnYdYH.exe
  C:\Windows\System\wVnYdYH.exe
  2⤵
  PID:7852
- C:\Windows\System\ACDwqkt.exe
  C:\Windows\System\ACDwqkt.exe
  2⤵
  PID:7420
- C:\Windows\System\cqrPKpK.exe
  C:\Windows\System\cqrPKpK.exe
  2⤵
  PID:8124
- C:\Windows\System\HRyCLix.exe
  C:\Windows\System\HRyCLix.exe
  2⤵
  PID:7764
- C:\Windows\System\onnVJXI.exe
  C:\Windows\System\onnVJXI.exe
  2⤵
  PID:7380
- C:\Windows\System\XWHdugF.exe
  C:\Windows\System\XWHdugF.exe
  2⤵
  PID:7124
- C:\Windows\System\sECOHPf.exe
  C:\Windows\System\sECOHPf.exe
  2⤵
  PID:8040
- C:\Windows\System\LSyFAUl.exe
  C:\Windows\System\LSyFAUl.exe
  2⤵
  PID:7376
- C:\Windows\System\RJFNwXg.exe
  C:\Windows\System\RJFNwXg.exe
  2⤵
  PID:7184
- C:\Windows\System\gxrayzO.exe
  C:\Windows\System\gxrayzO.exe
  2⤵
  PID:2140
- C:\Windows\System\QRkLhcT.exe
  C:\Windows\System\QRkLhcT.exe
  2⤵
  PID:7624
- C:\Windows\System\RnNRlhR.exe
  C:\Windows\System\RnNRlhR.exe
  2⤵
  PID:8204
- C:\Windows\System\WOnFmLo.exe
  C:\Windows\System\WOnFmLo.exe
  2⤵
  PID:8220
- C:\Windows\System\agxWyMu.exe
  C:\Windows\System\agxWyMu.exe
  2⤵
  PID:8244
- C:\Windows\System\MMjxUMg.exe
  C:\Windows\System\MMjxUMg.exe
  2⤵
  PID:8276
- C:\Windows\System\ITISbzP.exe
  C:\Windows\System\ITISbzP.exe
  2⤵
  PID:8296
- C:\Windows\System\ONPvULq.exe
  C:\Windows\System\ONPvULq.exe
  2⤵
  PID:8312
- C:\Windows\System\YYDfEVO.exe
  C:\Windows\System\YYDfEVO.exe
  2⤵
  PID:8332
- C:\Windows\System\UJuRnyX.exe
  C:\Windows\System\UJuRnyX.exe
  2⤵
  PID:8348
- C:\Windows\System\anJrDTp.exe
  C:\Windows\System\anJrDTp.exe
  2⤵
  PID:8364
- C:\Windows\System\hbYcliD.exe
  C:\Windows\System\hbYcliD.exe
  2⤵
  PID:8380
- C:\Windows\System\KOMcJBl.exe
  C:\Windows\System\KOMcJBl.exe
  2⤵
  PID:8420
- C:\Windows\System\EuHKXBh.exe
  C:\Windows\System\EuHKXBh.exe
  2⤵
  PID:8436
- C:\Windows\System\vYBgEet.exe
  C:\Windows\System\vYBgEet.exe
  2⤵
  PID:8460
- C:\Windows\System\ZbsOuSK.exe
  C:\Windows\System\ZbsOuSK.exe
  2⤵
  PID:8476
- C:\Windows\System\rzxpobT.exe
  C:\Windows\System\rzxpobT.exe
  2⤵
  PID:8496
- C:\Windows\System\uNRnEOe.exe
  C:\Windows\System\uNRnEOe.exe
  2⤵
  PID:8516
- C:\Windows\System\WKqnCwt.exe
  C:\Windows\System\WKqnCwt.exe
  2⤵
  PID:8532
- C:\Windows\System\SUMUyqw.exe
  C:\Windows\System\SUMUyqw.exe
  2⤵
  PID:8548
- C:\Windows\System\DvSiUrq.exe
  C:\Windows\System\DvSiUrq.exe
  2⤵
  PID:8564
- C:\Windows\System\XRxaFgY.exe
  C:\Windows\System\XRxaFgY.exe
  2⤵
  PID:8588
- C:\Windows\System\uZelNhj.exe
  C:\Windows\System\uZelNhj.exe
  2⤵
  PID:8608
- C:\Windows\System\PRgOFkq.exe
  C:\Windows\System\PRgOFkq.exe
  2⤵
  PID:8628
- C:\Windows\System\kDpQRMn.exe
  C:\Windows\System\kDpQRMn.exe
  2⤵
  PID:8644
- C:\Windows\System\SjJgWfD.exe
  C:\Windows\System\SjJgWfD.exe
  2⤵
  PID:8668
- C:\Windows\System\DJdvKgz.exe
  C:\Windows\System\DJdvKgz.exe
  2⤵
  PID:8704
- C:\Windows\System\soBOAAs.exe
  C:\Windows\System\soBOAAs.exe
  2⤵
  PID:8720
- C:\Windows\System\PUPERnU.exe
  C:\Windows\System\PUPERnU.exe
  2⤵
  PID:8736
- C:\Windows\System\ckEgJyr.exe
  C:\Windows\System\ckEgJyr.exe
  2⤵
  PID:8752
- C:\Windows\System\aKwfPdG.exe
  C:\Windows\System\aKwfPdG.exe
  2⤵
  PID:8768
- C:\Windows\System\OPMHwRt.exe
  C:\Windows\System\OPMHwRt.exe
  2⤵
  PID:8792
- C:\Windows\System\zUkyhVY.exe
  C:\Windows\System\zUkyhVY.exe
  2⤵
  PID:8808
- C:\Windows\System\NrNlbdK.exe
  C:\Windows\System\NrNlbdK.exe
  2⤵
  PID:8824
- C:\Windows\System\KTMDVco.exe
  C:\Windows\System\KTMDVco.exe
  2⤵
  PID:8844
- C:\Windows\System\pFasfrm.exe
  C:\Windows\System\pFasfrm.exe
  2⤵
  PID:8868
- C:\Windows\System\HpXqtOe.exe
  C:\Windows\System\HpXqtOe.exe
  2⤵
  PID:8884
- C:\Windows\System\aEimJht.exe
  C:\Windows\System\aEimJht.exe
  2⤵
  PID:8900
- C:\Windows\System\wSKsxvW.exe
  C:\Windows\System\wSKsxvW.exe
  2⤵
  PID:8948
- C:\Windows\System\MsibfZp.exe
  C:\Windows\System\MsibfZp.exe
  2⤵
  PID:8968
- C:\Windows\System\WhkPUpp.exe
  C:\Windows\System\WhkPUpp.exe
  2⤵
  PID:8984
- C:\Windows\System\evslDPM.exe
  C:\Windows\System\evslDPM.exe
  2⤵
  PID:9000
- C:\Windows\System\VqALASo.exe
  C:\Windows\System\VqALASo.exe
  2⤵
  PID:9024
- C:\Windows\System\vKJbRCQ.exe
  C:\Windows\System\vKJbRCQ.exe
  2⤵
  PID:9040
- C:\Windows\System\ZHexuCz.exe
  C:\Windows\System\ZHexuCz.exe
  2⤵
  PID:9056
- C:\Windows\System\GiZJPnG.exe
  C:\Windows\System\GiZJPnG.exe
  2⤵
  PID:9080
- C:\Windows\System\eEqNfSX.exe
  C:\Windows\System\eEqNfSX.exe
  2⤵
  PID:9096
- C:\Windows\System\BlVYQyG.exe
  C:\Windows\System\BlVYQyG.exe
  2⤵
  PID:9124
- C:\Windows\System\vmFRyop.exe
  C:\Windows\System\vmFRyop.exe
  2⤵
  PID:9144
- C:\Windows\System\CgbJnuX.exe
  C:\Windows\System\CgbJnuX.exe
  2⤵
  PID:9164
- C:\Windows\System\cxsFHQI.exe
  C:\Windows\System\cxsFHQI.exe
  2⤵
  PID:9184
- C:\Windows\System\pcQkKSY.exe
  C:\Windows\System\pcQkKSY.exe
  2⤵
  PID:7656
- C:\Windows\System\YjvgeOH.exe
  C:\Windows\System\YjvgeOH.exe
  2⤵
  PID:7268
- C:\Windows\System\JTMCoVW.exe
  C:\Windows\System\JTMCoVW.exe
  2⤵
  PID:8216
- C:\Windows\System\TTMxHCz.exe
  C:\Windows\System\TTMxHCz.exe
  2⤵
  PID:8268
- C:\Windows\System\PfDrljj.exe
  C:\Windows\System\PfDrljj.exe
  2⤵
  PID:8196
- C:\Windows\System\uFfvMhV.exe
  C:\Windows\System\uFfvMhV.exe
  2⤵
  PID:8304
- C:\Windows\System\pmHkeHS.exe
  C:\Windows\System\pmHkeHS.exe
  2⤵
  PID:8372
- C:\Windows\System\iHBAaol.exe
  C:\Windows\System\iHBAaol.exe
  2⤵
  PID:8392
- C:\Windows\System\njhjArd.exe
  C:\Windows\System\njhjArd.exe
  2⤵
  PID:7796
- C:\Windows\System\jQOGHtB.exe
  C:\Windows\System\jQOGHtB.exe
  2⤵
  PID:8468
- C:\Windows\System\SZrZcMe.exe
  C:\Windows\System\SZrZcMe.exe
  2⤵
  PID:8508
- C:\Windows\System\VySEukV.exe
  C:\Windows\System\VySEukV.exe
  2⤵
  PID:8572
- C:\Windows\System\zSVHvfe.exe
  C:\Windows\System\zSVHvfe.exe
  2⤵
  PID:8624
- C:\Windows\System\ITVCKAI.exe
  C:\Windows\System\ITVCKAI.exe
  2⤵
  PID:8488
- C:\Windows\System\tvGfBKq.exe
  C:\Windows\System\tvGfBKq.exe
  2⤵
  PID:8636
- C:\Windows\System\weeRMiJ.exe
  C:\Windows\System\weeRMiJ.exe
  2⤵
  PID:8556
- C:\Windows\System\bhZNCmY.exe
  C:\Windows\System\bhZNCmY.exe
  2⤵
  PID:8676
- C:\Windows\System\YXbddlP.exe
  C:\Windows\System\YXbddlP.exe
  2⤵
  PID:8744
- C:\Windows\System\kGKrvoV.exe
  C:\Windows\System\kGKrvoV.exe
  2⤵
  PID:8852
- C:\Windows\System\dIUjcSV.exe
  C:\Windows\System\dIUjcSV.exe
  2⤵
  PID:8860
- C:\Windows\System\hzRYanf.exe
  C:\Windows\System\hzRYanf.exe
  2⤵
  PID:8760
- C:\Windows\System\PkgzTat.exe
  C:\Windows\System\PkgzTat.exe
  2⤵
  PID:8840
- C:\Windows\System\GUTKMfh.exe
  C:\Windows\System\GUTKMfh.exe
  2⤵
  PID:1264
- C:\Windows\System\pljAhBO.exe
  C:\Windows\System\pljAhBO.exe
  2⤵
  PID:8936
- C:\Windows\System\vkyolYH.exe
  C:\Windows\System\vkyolYH.exe
  2⤵
  PID:8960
- C:\Windows\System\ScJykYS.exe
  C:\Windows\System\ScJykYS.exe
  2⤵
  PID:8976
- C:\Windows\System\dWKUTZw.exe
  C:\Windows\System\dWKUTZw.exe
  2⤵
  PID:8980
- C:\Windows\System\bXtXKJw.exe
  C:\Windows\System\bXtXKJw.exe
  2⤵
  PID:9036
- C:\Windows\System\WfedKGw.exe
  C:\Windows\System\WfedKGw.exe
  2⤵
  PID:9116
- C:\Windows\System\XUWlrEn.exe
  C:\Windows\System\XUWlrEn.exe
  2⤵
  PID:9160
- C:\Windows\System\WHsgxUc.exe
  C:\Windows\System\WHsgxUc.exe
  2⤵
  PID:9136
- C:\Windows\System\dFLRthf.exe
  C:\Windows\System\dFLRthf.exe
  2⤵
  PID:9192
- C:\Windows\System\grOpVlp.exe
  C:\Windows\System\grOpVlp.exe
  2⤵
  PID:9204
- C:\Windows\System\oOZOQEm.exe
  C:\Windows\System\oOZOQEm.exe
  2⤵
  PID:7396
- C:\Windows\System\weGkHDO.exe
  C:\Windows\System\weGkHDO.exe
  2⤵
  PID:8260
- C:\Windows\System\bBfGTwc.exe
  C:\Windows\System\bBfGTwc.exe
  2⤵
  PID:8232
- C:\Windows\System\DmBOIbu.exe
  C:\Windows\System\DmBOIbu.exe
  2⤵
  PID:8324
- C:\Windows\System\LlDIlEK.exe
  C:\Windows\System\LlDIlEK.exe
  2⤵
  PID:8416
- C:\Windows\System\wesTtBW.exe
  C:\Windows\System\wesTtBW.exe
  2⤵
  PID:8576
- C:\Windows\System\kgabJwn.exe
  C:\Windows\System\kgabJwn.exe
  2⤵
  PID:8456
- C:\Windows\System\ecGfqOy.exe
  C:\Windows\System\ecGfqOy.exe
  2⤵
  PID:8660
- C:\Windows\System\MNUjNMI.exe
  C:\Windows\System\MNUjNMI.exe
  2⤵
  PID:8596
- C:\Windows\System\mEDvxCb.exe
  C:\Windows\System\mEDvxCb.exe
  2⤵
  PID:8776
- C:\Windows\System\RFeIDVB.exe
  C:\Windows\System\RFeIDVB.exe
  2⤵
  PID:8788
- C:\Windows\System\YtUVvOU.exe
  C:\Windows\System\YtUVvOU.exe
  2⤵
  PID:8896
- C:\Windows\System\eStQUgf.exe
  C:\Windows\System\eStQUgf.exe
  2⤵
  PID:8700
- C:\Windows\System\aKwtcmK.exe
  C:\Windows\System\aKwtcmK.exe
  2⤵
  PID:8804
- C:\Windows\System\JNDgCIS.exe
  C:\Windows\System\JNDgCIS.exe
  2⤵
  PID:9020
- C:\Windows\System\TLJZlCY.exe
  C:\Windows\System\TLJZlCY.exe
  2⤵
  PID:9032
- C:\Windows\System\plJVwRM.exe
  C:\Windows\System\plJVwRM.exe
  2⤵
  PID:9104
- C:\Windows\System\tWkDYWm.exe
  C:\Windows\System\tWkDYWm.exe
  2⤵
  PID:9132
- C:\Windows\System\FEzpzgh.exe
  C:\Windows\System\FEzpzgh.exe
  2⤵
  PID:7664
- C:\Windows\System\UyWKXep.exe
  C:\Windows\System\UyWKXep.exe
  2⤵
  PID:8264
- C:\Windows\System\tPKAEmu.exe
  C:\Windows\System\tPKAEmu.exe
  2⤵
  PID:8388
- C:\Windows\System\qVOkGgS.exe
  C:\Windows\System\qVOkGgS.exe
  2⤵
  PID:8448
- C:\Windows\System\ycRXCaB.exe
  C:\Windows\System\ycRXCaB.exe
  2⤵
  PID:8620
- C:\Windows\System\Afzysih.exe
  C:\Windows\System\Afzysih.exe
  2⤵
  PID:8560
- C:\Windows\System\WYlRUVT.exe
  C:\Windows\System\WYlRUVT.exe
  2⤵
  PID:8856
- C:\Windows\System\Ywlntyv.exe
  C:\Windows\System\Ywlntyv.exe
  2⤵
  PID:8692
- C:\Windows\System\vxMGfpc.exe
  C:\Windows\System\vxMGfpc.exe
  2⤵
  PID:8880
- C:\Windows\System\SreOUsc.exe
  C:\Windows\System\SreOUsc.exe
  2⤵
  PID:9064
- C:\Windows\System\OEkMRLl.exe
  C:\Windows\System\OEkMRLl.exe
  2⤵
  PID:1584
- C:\Windows\System\CnCVFSq.exe
  C:\Windows\System\CnCVFSq.exe
  2⤵
  PID:9092
- C:\Windows\System\EHvDDdA.exe
  C:\Windows\System\EHvDDdA.exe
  2⤵
  PID:8308
- C:\Windows\System\vGujrJH.exe
  C:\Windows\System\vGujrJH.exe
  2⤵
  PID:8200
- C:\Windows\System\pXrMiFQ.exe
  C:\Windows\System\pXrMiFQ.exe
  2⤵
  PID:8484
- C:\Windows\System\cUoDiOM.exe
  C:\Windows\System\cUoDiOM.exe
  2⤵
  PID:8680
- C:\Windows\System\SxRKhwW.exe
  C:\Windows\System\SxRKhwW.exe
  2⤵
  PID:8716
- C:\Windows\System\NDjBSqC.exe
  C:\Windows\System\NDjBSqC.exe
  2⤵
  PID:8836
- C:\Windows\System\hRyvONW.exe
  C:\Windows\System\hRyvONW.exe
  2⤵
  PID:9156
- C:\Windows\System\MFXdIdU.exe
  C:\Windows\System\MFXdIdU.exe
  2⤵
  PID:8444
- C:\Windows\System\lTSHFWl.exe
  C:\Windows\System\lTSHFWl.exe
  2⤵
  PID:8432
- C:\Windows\System\MnomSrf.exe
  C:\Windows\System\MnomSrf.exe
  2⤵
  PID:8784
- C:\Windows\System\SkZOeaI.exe
  C:\Windows\System\SkZOeaI.exe
  2⤵
  PID:9152
- C:\Windows\System\lPrIOzw.exe
  C:\Windows\System\lPrIOzw.exe
  2⤵
  PID:8396
- C:\Windows\System\yhhXJFL.exe
  C:\Windows\System\yhhXJFL.exe
  2⤵
  PID:8604
- C:\Windows\System\gQhNGfG.exe
  C:\Windows\System\gQhNGfG.exe
  2⤵
  PID:8728
- C:\Windows\System\ZNJImAk.exe
  C:\Windows\System\ZNJImAk.exe
  2⤵
  PID:8524
- C:\Windows\System\GsxHSoz.exe
  C:\Windows\System\GsxHSoz.exe
  2⤵
  PID:9196
- C:\Windows\System\fueXeOR.exe
  C:\Windows\System\fueXeOR.exe
  2⤵
  PID:9012
- C:\Windows\System\FlNDwnb.exe
  C:\Windows\System\FlNDwnb.exe
  2⤵
  PID:9236
- C:\Windows\System\mRNnNSa.exe
  C:\Windows\System\mRNnNSa.exe
  2⤵
  PID:9252
- C:\Windows\System\icfGiOb.exe
  C:\Windows\System\icfGiOb.exe
  2⤵
  PID:9272
- C:\Windows\System\SLFXeaV.exe
  C:\Windows\System\SLFXeaV.exe
  2⤵
  PID:9292
- C:\Windows\System\TMnEKQi.exe
  C:\Windows\System\TMnEKQi.exe
  2⤵
  PID:9308
- C:\Windows\System\oxmtFuk.exe
  C:\Windows\System\oxmtFuk.exe
  2⤵
  PID:9324
- C:\Windows\System\opPrOsS.exe
  C:\Windows\System\opPrOsS.exe
  2⤵
  PID:9344
- C:\Windows\System\sTeUfCq.exe
  C:\Windows\System\sTeUfCq.exe
  2⤵
  PID:9368
- C:\Windows\System\GiOKwNI.exe
  C:\Windows\System\GiOKwNI.exe
  2⤵
  PID:9388
- C:\Windows\System\hRiRViR.exe
  C:\Windows\System\hRiRViR.exe
  2⤵
  PID:9404
- C:\Windows\System\LRrTiSn.exe
  C:\Windows\System\LRrTiSn.exe
  2⤵
  PID:9444
- C:\Windows\System\GYIymxg.exe
  C:\Windows\System\GYIymxg.exe
  2⤵
  PID:9460
- C:\Windows\System\OlnQveX.exe
  C:\Windows\System\OlnQveX.exe
  2⤵
  PID:9480
- C:\Windows\System\UGgTYsT.exe
  C:\Windows\System\UGgTYsT.exe
  2⤵
  PID:9500
- C:\Windows\System\mUnRECJ.exe
  C:\Windows\System\mUnRECJ.exe
  2⤵
  PID:9520
- C:\Windows\System\tpvsjuV.exe
  C:\Windows\System\tpvsjuV.exe
  2⤵
  PID:9536
- C:\Windows\System\bftkcsf.exe
  C:\Windows\System\bftkcsf.exe
  2⤵
  PID:9560
- C:\Windows\System\IroJpuN.exe
  C:\Windows\System\IroJpuN.exe
  2⤵
  PID:9580
- C:\Windows\System\BvyYRZd.exe
  C:\Windows\System\BvyYRZd.exe
  2⤵
  PID:9596
- C:\Windows\System\OZhMSkY.exe
  C:\Windows\System\OZhMSkY.exe
  2⤵
  PID:9616
- C:\Windows\System\XJMbvjv.exe
  C:\Windows\System\XJMbvjv.exe
  2⤵
  PID:9640
- C:\Windows\System\WPfBZzp.exe
  C:\Windows\System\WPfBZzp.exe
  2⤵
  PID:9656
- C:\Windows\System\aACKZjI.exe
  C:\Windows\System\aACKZjI.exe
  2⤵
  PID:9676
- C:\Windows\System\VwaJvin.exe
  C:\Windows\System\VwaJvin.exe
  2⤵
  PID:9700
- C:\Windows\System\VMshkXI.exe
  C:\Windows\System\VMshkXI.exe
  2⤵
  PID:9724
- C:\Windows\System\dsFVuyB.exe
  C:\Windows\System\dsFVuyB.exe
  2⤵
  PID:9740
- C:\Windows\System\CEXsXtY.exe
  C:\Windows\System\CEXsXtY.exe
  2⤵
  PID:9756
- C:\Windows\System\ATcEZCK.exe
  C:\Windows\System\ATcEZCK.exe
  2⤵
  PID:9780
- C:\Windows\System\VBZbDdR.exe
  C:\Windows\System\VBZbDdR.exe
  2⤵
  PID:9804
- C:\Windows\System\BJcNbRS.exe
  C:\Windows\System\BJcNbRS.exe
  2⤵
  PID:9824
- C:\Windows\System\vgqlaSo.exe
  C:\Windows\System\vgqlaSo.exe
  2⤵
  PID:9840
- C:\Windows\System\dLQuVvQ.exe
  C:\Windows\System\dLQuVvQ.exe
  2⤵
  PID:9856
- C:\Windows\System\KhOcpTi.exe
  C:\Windows\System\KhOcpTi.exe
  2⤵
  PID:9880
- C:\Windows\System\uQbXZJw.exe
  C:\Windows\System\uQbXZJw.exe
  2⤵
  PID:9900
- C:\Windows\System\ZNgxKiY.exe
  C:\Windows\System\ZNgxKiY.exe
  2⤵
  PID:9920
- C:\Windows\System\BFHZNfa.exe
  C:\Windows\System\BFHZNfa.exe
  2⤵
  PID:9940
- C:\Windows\System\AOeAlCf.exe
  C:\Windows\System\AOeAlCf.exe
  2⤵
  PID:9956
- C:\Windows\System\qRZnYaX.exe
  C:\Windows\System\qRZnYaX.exe
  2⤵
  PID:9980
- C:\Windows\System\VRdLLlu.exe
  C:\Windows\System\VRdLLlu.exe
  2⤵
  PID:10000
- C:\Windows\System\kvTKnAm.exe
  C:\Windows\System\kvTKnAm.exe
  2⤵
  PID:10024
- C:\Windows\System\apmTLJa.exe
  C:\Windows\System\apmTLJa.exe
  2⤵
  PID:10040
- C:\Windows\System\eAclIsp.exe
  C:\Windows\System\eAclIsp.exe
  2⤵
  PID:10064
- C:\Windows\System\fynTVTs.exe
  C:\Windows\System\fynTVTs.exe
  2⤵
  PID:10084
- C:\Windows\System\DmqrRNA.exe
  C:\Windows\System\DmqrRNA.exe
  2⤵
  PID:10100
- C:\Windows\System\ZectJPJ.exe
  C:\Windows\System\ZectJPJ.exe
  2⤵
  PID:10116
- C:\Windows\System\GmKtSkZ.exe
  C:\Windows\System\GmKtSkZ.exe
  2⤵
  PID:10140
- C:\Windows\System\BhOSwfE.exe
  C:\Windows\System\BhOSwfE.exe
  2⤵
  PID:10164
- C:\Windows\System\JRnvzxI.exe
  C:\Windows\System\JRnvzxI.exe
  2⤵
  PID:10184
- C:\Windows\System\fcHHbyL.exe
  C:\Windows\System\fcHHbyL.exe
  2⤵
  PID:10208
- C:\Windows\System\gyufQlg.exe
  C:\Windows\System\gyufQlg.exe
  2⤵
  PID:10224
- C:\Windows\System\QybePpv.exe
  C:\Windows\System\QybePpv.exe
  2⤵
  PID:8932
- C:\Windows\System\FFeDtSn.exe
  C:\Windows\System\FFeDtSn.exe
  2⤵
  PID:9248
- C:\Windows\System\idrnsei.exe
  C:\Windows\System\idrnsei.exe
  2⤵
  PID:9280
- C:\Windows\System\OGoNrnj.exe
  C:\Windows\System\OGoNrnj.exe
  2⤵
  PID:9332
- C:\Windows\System\sewWSgk.exe
  C:\Windows\System\sewWSgk.exe
  2⤵
  PID:9376
- C:\Windows\System\lPlTLtc.exe
  C:\Windows\System\lPlTLtc.exe
  2⤵
  PID:9356
- C:\Windows\System\CQuTIZh.exe
  C:\Windows\System\CQuTIZh.exe
  2⤵
  PID:9424
- C:\Windows\System\UWUmChw.exe
  C:\Windows\System\UWUmChw.exe
  2⤵
  PID:9436
- C:\Windows\System\VZQqKhn.exe
  C:\Windows\System\VZQqKhn.exe
  2⤵
  PID:9476
- C:\Windows\System\CaVpNeH.exe
  C:\Windows\System\CaVpNeH.exe
  2⤵
  PID:9492
- C:\Windows\System\BqyWvks.exe
  C:\Windows\System\BqyWvks.exe
  2⤵
  PID:9544
- C:\Windows\System\bcDXsXr.exe
  C:\Windows\System\bcDXsXr.exe
  2⤵
  PID:9552
- C:\Windows\System\dnXupzD.exe
  C:\Windows\System\dnXupzD.exe
  2⤵
  PID:9608
- C:\Windows\System\XXYOTQB.exe
  C:\Windows\System\XXYOTQB.exe
  2⤵
  PID:9636
- C:\Windows\System\sKgnnUX.exe
  C:\Windows\System\sKgnnUX.exe
  2⤵
  PID:9688
- C:\Windows\System\OxMVaEn.exe
  C:\Windows\System\OxMVaEn.exe
  2⤵
  PID:9696
- C:\Windows\System\QAmLYHN.exe
  C:\Windows\System\QAmLYHN.exe
  2⤵
  PID:9736
- C:\Windows\System\uOBzhCX.exe
  C:\Windows\System\uOBzhCX.exe
  2⤵
  PID:9768
- C:\Windows\System\ELpoWBr.exe
  C:\Windows\System\ELpoWBr.exe
  2⤵
  PID:9796

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Windows\system\DPBxEHD.exe

Filesize
1.8MB

MD5
24557520ca0eebfb912d7205177d6767

SHA1
3481325a8d4317773bc35b178366c048b6eafbd0

SHA256
aa38e7aac7eb7c2d7158a5378a02a5c8f18cf0826d93cc9a315ec354761b1b70

SHA512
1bbdddb2cb9ba622a920adc6d3f89fc49c456581321cb3b7eb848e3a9ddbf130fbd79001ac2d7178a7d8cdf759548ab96315c8f268ad414f53d53f1b660b3b5e

Download Submit
C:\Windows\system\DgTapDb.exe

Filesize
1.8MB

MD5
5ba4c99c8d894da243a38c72022042cf

SHA1
d47b28edaa2d7279f60fd37f8d440537f62c169a

SHA256
4cece4a4c16de357dc37a18cb09768298e792f7aa7c72a269eb844bcab98292c

SHA512
4364308d649d56414b068157bf31f413a363d555f7c18f2d28677d852d1640e9df1408bd4c17d0bacc83b90ad579e624809da4bc6f55f602de8d9ec5786407eb

Download Submit
C:\Windows\system\EdWDLqL.exe

Filesize
1.8MB

MD5
7e8e3512d175273f35902081fef5b49c

SHA1
3568078cfba40cb222d1ebdf3bf69189825ceb4a

SHA256
0a0b1511e6b2fbcfca48a6b23160572085d91a47de622df3526331e072efa153

SHA512
5dd6fa1d59a755f5c6cb9ce1b1f6f360876a030685cf96f5fc8525f14ebf832aa95f6371f306856e091fefa21b724ca9f8644505683fdb893c4ae327cea594d5

Download Submit
C:\Windows\system\GjvomVS.exe

Filesize
1.8MB

MD5
4ff058ace30330e99ae7eeadfefed760

SHA1
0c7d530f40c74a5d8544e7bc7d43255992e284e4

SHA256
ac837f683702d2143fa6c070ca95b1d9e01cde88d5f0d681614e0202ebc9b695

SHA512
7b9e27138dfc99b2d796be72f66c7ad1ad6d6d977d0f8419483452c4b22c64bf2df697c759dc0eda471390d14b3a3fa093b71b4087e761c945d72de9be2a706c

Download Submit
C:\Windows\system\LyLnImG.exe

Filesize
1.8MB

MD5
48505d767d06ca8a5dcc850844eea7ef

SHA1
ab34c3fe4580c2561b7a8baf6bf55363ab9e24ad

SHA256
2ec5ea2def1f3b7a785dfccc3eaea6521858d867ab9b0b53070019bb5f5b1d24

SHA512
3734ce34cbb8c38c9f998220eccb1f1e26048a31f91f99ab8329d642ac11aa51d087c98198f09a24f4a4d31599f275bd62b0e156389fe6bc2948252edc68af68

Download Submit
C:\Windows\system\MKJDxyJ.exe

Filesize
1.8MB

MD5
803ef552aea7fa48ce054169f3cf21d8

SHA1
11b0dd373b8369d667f5174c3bfcca3d2ea2d9d8

SHA256
865bffd22fbbe06b298a36add878bdb5f548fd4639b4bbd3d9e3650620c3b719

SHA512
aa1245a267cbe456ffd72baa03a872c3e49e679a706e5eb305178a6e8c7a89ac4beb6cf3ff5c59309ec6c051995d1de43e84cc7f7388d5fbb2f0cdb60c70492b

Download Submit
C:\Windows\system\NZtIMTF.exe

Filesize
1.8MB

MD5
c4aea1d4d38d2ed7eb8e6169f100a510

SHA1
96f11b69ed9cb9100e932394d9c0df1f5c10ec93

SHA256
a56ca6c919dd2560747bd618992695160e5d902d64436273918fd5dbaa96981c

SHA512
224ee415c60a67fdd92da109a7f025c41b39e0d06850f8670dce94e2ae955034e3a5faff584ac3e36bbf869459c442f584d6da390b890fc0e52b04ff9ff90b34

Download Submit
C:\Windows\system\OwFhyQy.exe

Filesize
1.8MB

MD5
d49d69bd8fecf94ee5f82590f66749d5

SHA1
5c96470bac929674565ecdc9a743a7599c1f78a2

SHA256
66f6a1a28f08c62735a45e8f5a899cb56bd699a7db9d64dfeef43aac35419f73

SHA512
8cc3a2c9d461b2a3a89454ae13941e4a72eb8412253e6776cac27d5f2f5ba79dd3e67e8184bffc1129a25ab1b21be6089814f4e26ac25437eaada3e8870b7392

Download Submit
C:\Windows\system\QMVjXEy.exe

Filesize
1.8MB

MD5
f1586664acd6365236acc0ac76969e3b

SHA1
52382d9466f228b7324177966c19a387956ba93d

SHA256
76c48ffb1098581c91f79f25fb74ce79d0354ffade171fff7ce68a58276d4b62

SHA512
f93d3c98edfd5155b3dea65751e3a5e7dcf635bc6dfd41431f0541a03085ea12b654fb4140d06814f7f65740478a4a4ec89899d632b494ff813d0ede2feb731d

Download Submit
C:\Windows\system\RcpYYvv.exe

Filesize
1.8MB

MD5
c7d3555f0324026312f05e8e40c83ff0

SHA1
b1515abe916a1b9f697b815ae26af6a40541c5f1

SHA256
add1cf7964ddb1137994cb3ffa569e403decc5ef27e4b19f88d5dc3b58e27246

SHA512
c923c6e1f1a4272b6859f154e22b3ebdbfcca9e9f96fb1833a4bd9986defe080be44c4897444eef7c5269b7a3ffe966bb2a56aaf3588b9578f428b8d4122239c

Download Submit
C:\Windows\system\RnppxWo.exe

Filesize
1.8MB

MD5
f3f68c0eb5560cbf9bd9c8fe64cc5cc4

SHA1
ee3b4c351ec8524e18cf80c35bf88b860edaee56

SHA256
1c55c070325643366d4b57c79d956839845a979642b3d708d8f7ccd71b24fff3

SHA512
09f74b1bd7e3bd9ceebe7f946087dd9c354bb34c93b903dac69770b366f0510119fe450d4849458623834f965e049b8b4a5ce02c27621fd6acc97aeb7da7b9a3

Download Submit
C:\Windows\system\TjuilQu.exe

Filesize
1.8MB

MD5
0708e3e34dad00b956643dd953bd1b6d

SHA1
96e7cd6d3a9a3ab2cc3c74b272231729faf5d490

SHA256
a3b2dd8a8feba41c4d752e3cfb9fc40aba609f2cd3a4ffbf7f23c99cfa72c8b3

SHA512
5cfe2ed84661e461bd0132664713c650445c55ca9b97fc351ecff2678591061ccfbeb5d51b7dc72a25e60163be35ac3fe41f036516ad4e079ae4ac12382d16a4

Download Submit
C:\Windows\system\XeuNOPk.exe

Filesize
1.8MB

MD5
8e06544ede9ede9447b9dcc365ab4191

SHA1
b34f3be15cf6a6dbd89090ed135e98dc37896d55

SHA256
a5713b5bdb1d1a76522e74755cc65b3ce799c4866e9e157e748a9f5c683f5e48

SHA512
07da8c9e3c75345d707f84ade71686107b7dfa34c848ab05f7e6c2c42efea3c1f27e35ab521313ab8b48cbab168078d0dfc47495e2a66ad4d2f3e284698e7244

Download Submit
C:\Windows\system\aXldeBG.exe

Filesize
1.8MB

MD5
431ae3dcef7a75f4c95566d8b9146337

SHA1
454c309a4f8f28dca3c970fde55c6e023d7c7e92

SHA256
515b2b4be4b6aa586b92ea66fc9efb1022cb94c70be53cccab95814c831a3637

SHA512
1059f33f74ca4040e55cbd61fa422da5d76ff805261a5c4c154411bc669cc67cc27ce1581998d7ab4335915fb2e5462bbe56765e6f12bf0923e18a9058dc9de2

Download Submit
C:\Windows\system\apQKKzB.exe

Filesize
1.8MB

MD5
fd3624c27c8ca3407d780eff86d287cc

SHA1
9eb996839b2335700056e993e975d9ba4c3f2823

SHA256
19599eadfc44a444341ee594b7bf51b81bbd85713e5b7d9df0a22bd498927327

SHA512
9f1eb1f09ae2d516dfd90e0540158a4765b493aaf30ff1a4eefe7df33a54f2ebf35671b972a3c4a459eee9df50627d11520225d43b773fb43d8f06ca5b53e97e

Download Submit
C:\Windows\system\biNpYyV.exe

Filesize
1.8MB

MD5
fe1bcf3525742a80fa106457e721a1fb

SHA1
f4b5842f652df7e4761e6345199680b779af54aa

SHA256
158a4acb0b1294df44e692abc4f668d0f89eeda7c0ea82899c9b45009911fbf2

SHA512
d887373fd162de565439001df41ceacaf70c88570b569e53bbf24afc8d61281e1fe9ab89898e6bba9c845a5fd657e0374122ed992286e59512304197bbb49124

Download Submit
C:\Windows\system\fBipWEx.exe

Filesize
1.8MB

MD5
026ed8cd06866919c6f076c3dda49e7b

SHA1
acb5e12b8287133bb7b1674c9beb9289f5363a37

SHA256
7b390bd56ec813d7802cd4c778acda53af2e9daad7b4b0a5e2d65a7109919cf7

SHA512
252e195c7f3e25ba4609a9d753ce88324e7aa482856d4a91f7bc1da526d9a174f4fe472ad407f35bee851a61ae4966e71590f6dcad7f97a6e66632feba5fb0fc

Download Submit
C:\Windows\system\fdvEakn.exe

Filesize
1.8MB

MD5
e5fcda12de6f0095e3187df682c21205

SHA1
36c616d730a521e35121febe7525c952a4c6a61b

SHA256
4f3fbc568766c0a698bf9f0da511681a1651037aa18590a613abb01b5f8d3b03

SHA512
5650a3b24a487c35616b3e717e14a5d9b3a70a84e7584785644801330d7919f7cff15f0549a92a9b0d109ad0c22676d19d18a7927e93d1cf19dbf949027878a5

Download Submit
C:\Windows\system\fgbLPbH.exe

Filesize
1.8MB

MD5
4f369427f0bb77ecc73aa644aeee5a5e

SHA1
e3492b506c6b364711186fd3efb3f46085636894

SHA256
67c6d4544342767d5c924e18027cabf94d5965327ef68963591f6dd6a9392d84

SHA512
aa0d7a405bef367ed525e1ef360ff6c05e5c50df85a7fc4dca478f599d6ff23d5c50db4e0f8586b78c2d35ad0317ae18d5d2fd4657dea19868f1cbeee3f162d2

Download Submit
C:\Windows\system\ihabMth.exe

Filesize
1.8MB

MD5
529f04995d5ba22cf614b0a98cd9b4cd

SHA1
3dc7d925b80e60f64a52ecebc29ba992dfcacbb0

SHA256
0f8e7cf6cdeb7e9f16b2772b35d58a89edb8187797dcd7a95ed11398ff162810

SHA512
be071abe41835811a1c99158703aa46401686417a0eb6e4d10ba8ee19925c34d0852c1248653e12c649b0d2e33ca7f5673a3db84d528f41af58452fd58612a32

Download Submit
C:\Windows\system\klMpPMH.exe

Filesize
1.8MB

MD5
a186efbcdbbde7aea378b6cc26a891a0

SHA1
0e4db2ac7a312c4f8ebbace667135968b6a59916

SHA256
92ba35dbd79c808ae243548d36a5c63f2b8eab09677dfb7371f9e0e1fe199a84

SHA512
0659f6a6e80df7b7ca5f2c68baf7d115c6c18e2ef6982e72e89126df3efbcabb97ece33599dc0891a235607ce9bbd8389f03b1c84a6e22e76d5b6b553078329d

Download Submit
C:\Windows\system\vqFIrYm.exe

Filesize
1.8MB

MD5
aef0525ebc8f8df9f86b446739890555

SHA1
c886c4f2877785f033c82413e41100080653a362

SHA256
2606095313006be8fd5157ddbcb499bcf9f6cf0c3d56f7823e14a81db240fc6d

SHA512
2d2890bb8c5cffcb80aad3f94fbf1f00dbfe0bea482c14036e502f41edfc5a42f3478ae6e30cd787d24bb9606ae7d6a658327e264cc291f105e5e5dcc54c84b6

Download Submit
C:\Windows\system\wqlhDhC.exe

Filesize
1.8MB

MD5
7d0058d547732818fa7b2c1cd4990eb1

SHA1
4f226c79255d532f5c8f559b2b7f2540448560dd

SHA256
83b68f4f3c84c0e29bb80c7e863221c9611604cbf32d82e7c668263279cc807f

SHA512
0afeaec4df597104827857c4660396378283aa94f0f80adc0ca65d452bb42e3446b8ccae352cd4d878eda107a237d98b18943d59ae724f1ff39732753b74b0b0

Download Submit
C:\Windows\system\ychPHLQ.exe

Filesize
1.8MB

MD5
39b46c39295aa6fda3d18c691024fa8e

SHA1
92c85cb3019696166fa0d95b2069dc3871af9a65

SHA256
c2e9bca606cc5dffaa15290d0517ac583b0bac91f191ace31d3b7f8772a76bcf

SHA512
94e131ef967e7926ecbd3f7ceed2a8a8130d49ee95934fc768d7c61dc7f66c9bfc308af8a9eefe9d1aa2754d41700f3039ffe8e61432c1e2b099673a71e9a259

Download Submit
C:\Windows\system\yhsnYwN.exe

Filesize
1.8MB

MD5
7063886888e6221e63edbbf6a2731109

SHA1
c3c9957ac2cda2d8835fee2b1fbe328a4255edba

SHA256
d13ca335fd39f7c9b4b2082d301db666373f741670c13a8ebf8262a71f13efe0

SHA512
df69c904962303a553da3502968dbb171aa1239482aa9477cda7eb79a21b91403fd7d0b7c8767ba1a371aae606116b884571b04c0fa312b975a95ef53c34e1b7

Download Submit
C:\Windows\system\zExePuN.exe

Filesize
1.8MB

MD5
70573b146f74be01895e0567a38e2d3d

SHA1
ba6dd866f5c05f98a9215d290b4a0d729c33bf64

SHA256
329c95f8ab850751b317c8a000c6b714642d406e06a937542575580a7b651988

SHA512
80ce6a4d95457bd1b5e6225e610592047e7f0f166cb027de3bb36d31e960b27bfaf6dea92811f728c17ebc3d98ed1da82d489f5f665e71676479ad3271ef83e9

Download Submit
\Windows\system\NYcxykv.exe

Filesize
1.8MB

MD5
5667061e1659554b0dd42e2b985aa32c

SHA1
b3bb6b2cd1acc04289424f57d102c08e39b17dea

SHA256
887ec7f109142ed2fbba75826b9bf3e3de7de3b74ccd45ae3afb0561c2ce8ad6

SHA512
889eb7a61b9a993d309062f4d7d5e5510282fd3e86e4f854610230a5233e53e2b8b9b01534a92bec2eecd52d4a1aff4e4aae939421a642f8b067201504e8588d

Download Submit
\Windows\system\VsuQGqS.exe

Filesize
1.8MB

MD5
92cf1bb32be158a8904bd98c2db72c92

SHA1
3d520ec6d78e26d703064952821f84561f1f5cca

SHA256
c034a3e8abef8ef5d84985ff5474b8b2e3bf072dfcafebe92a2190a046fdc048

SHA512
cc474f4a4194905fbd4cd3f991a201761cd066abb0b3e743019adc28464f9a25ba99ec4c2fd3a905b8e13f4fa5b058c422eff3aec0a2cfde7ad5c13f6d2de728

Download Submit
\Windows\system\dNKFEkw.exe

Filesize
1.8MB

MD5
1219e9a2f0aab228a43b624dd6033eb7

SHA1
16231cb59825bd8b61ee0a10b4d7869c75412dd8

SHA256
873f53ee962befe8b73208f84cd086ee3c70ef027a2be1eb8be9e497d8a27afb

SHA512
c4e1bee64cfc8d41775d7f26846649ca3a28a8bacb05d8c5de1ad06c13e1bea48739af5adf6b8e8769befcf2bc0e48f0df0577a7196ed3f1039afa006c5aa61a

Download Submit
\Windows\system\elgGGCg.exe

Filesize
1.8MB

MD5
d7bdbb16e5319a4ad55d97c41e743e91

SHA1
164f3dff87e62d4f4236a37a3f3119e837d761f6

SHA256
756eabcbe0e1ce5c002e7be75ff6007d6dee7757bb88794d3c8f5483a5aa4ea2

SHA512
08c1d94002c5a525b46c061f6ce5252212db322750aec97afd4d9ba6a5cd0013b12b4bb004f92db61532d751486c1d8712860acacd98da0610f66b6c9ac9e036

Download Submit
\Windows\system\mZgSHdD.exe

Filesize
1.8MB

MD5
5e6ed1f9f1bc4aceb169fd481f73110d

SHA1
1e3b2f2b7fed6cda1641769da1b5adbdb4bcf8a4

SHA256
cecc203fbc05f3fff48d2d94117c2137c78ada149383e94ed21fbe676f85b8eb

SHA512
67cb9043af1a4879c628b199ce3c71f69bb994b30765810072f5de87ab523789dff3877f65f00cbd5bdf6369f8d9ea9b8e897c8e75c10a57465dddb00ed89e38

Download Submit
\Windows\system\seruqmD.exe

Filesize
1.8MB

MD5
47723138613f258539861895ec19c1ae

SHA1
a655cb5218732c24005ec3edc9e36dc5e0611725

SHA256
8135f17418c663c1f4bd6e98091488a3876be46e0a62e1e2b2f16254dc806168

SHA512
387b4bd60e74955f764d8ef8160bf900f4a4ce528d968f71854d9ae4512d0d15a3a212dfd60571a476f222606fc1d7203a6b72434395dcc660074c025e1231dc

Download Submit
memory/1144-29-0x000000013FED0000-0x0000000140224000-memory.dmp

Filesize
3.3MB

Download
memory/1144-3995-0x000000013FED0000-0x0000000140224000-memory.dmp

Filesize
3.3MB

Download
memory/1448-89-0x000000013FBB0000-0x000000013FF04000-memory.dmp

Filesize
3.3MB

Download
memory/1448-2992-0x000000013FBB0000-0x000000013FF04000-memory.dmp

Filesize
3.3MB

Download
memory/1448-4007-0x000000013FBB0000-0x000000013FF04000-memory.dmp

Filesize
3.3MB

Download
memory/1708-82-0x0000000001E70000-0x00000000021C4000-memory.dmp

Filesize
3.3MB

Download
memory/1708-34-0x000000013F1B0000-0x000000013F504000-memory.dmp

Filesize
3.3MB

Download
memory/1708-103-0x000000013FCE0000-0x0000000140034000-memory.dmp

Filesize
3.3MB

Download
memory/1708-1-0x0000000000300000-0x0000000000310000-memory.dmp

Filesize
64KB

Download
memory/1708-78-0x000000013F2E0000-0x000000013F634000-memory.dmp

Filesize
3.3MB

Download
memory/1708-30-0x000000013FE20000-0x0000000140174000-memory.dmp

Filesize
3.3MB

Download
memory/1708-81-0x000000013F240000-0x000000013F594000-memory.dmp

Filesize
3.3MB

Download
memory/1708-0-0x000000013F7A0000-0x000000013FAF4000-memory.dmp

Filesize
3.3MB

Download
memory/1708-3198-0x0000000001E70000-0x00000000021C4000-memory.dmp

Filesize
3.3MB

Download
memory/1708-74-0x000000013FC20000-0x000000013FF74000-memory.dmp

Filesize
3.3MB

Download
memory/1708-96-0x0000000001E70000-0x00000000021C4000-memory.dmp

Filesize
3.3MB

Download
memory/1708-60-0x0000000001E70000-0x00000000021C4000-memory.dmp

Filesize
3.3MB

Download
memory/1708-88-0x000000013FBB0000-0x000000013FF04000-memory.dmp

Filesize
3.3MB

Download
memory/1708-14-0x000000013FED0000-0x0000000140224000-memory.dmp

Filesize
3.3MB

Download
memory/1708-2880-0x0000000001E70000-0x00000000021C4000-memory.dmp

Filesize
3.3MB

Download
memory/1708-71-0x000000013FB40000-0x000000013FE94000-memory.dmp

Filesize
3.3MB

Download
memory/1708-2879-0x000000013F240000-0x000000013F594000-memory.dmp

Filesize
3.3MB

Download
memory/1708-2379-0x0000000001E70000-0x00000000021C4000-memory.dmp

Filesize
3.3MB

Download
memory/1708-2376-0x0000000001E70000-0x00000000021C4000-memory.dmp

Filesize
3.3MB

Download
memory/1708-431-0x000000013F7A0000-0x000000013FAF4000-memory.dmp

Filesize
3.3MB

Download
memory/2040-31-0x000000013F1B0000-0x000000013F504000-memory.dmp

Filesize
3.3MB

Download
memory/2040-3998-0x000000013F1B0000-0x000000013F504000-memory.dmp

Filesize
3.3MB

Download
memory/2092-4008-0x000000013FA90000-0x000000013FDE4000-memory.dmp

Filesize
3.3MB

Download
memory/2092-97-0x000000013FA90000-0x000000013FDE4000-memory.dmp

Filesize
3.3MB

Download
memory/2156-3999-0x000000013FE20000-0x0000000140174000-memory.dmp

Filesize
3.3MB

Download
memory/2156-32-0x000000013FE20000-0x0000000140174000-memory.dmp

Filesize
3.3MB

Download
memory/2508-80-0x000000013F240000-0x000000013F594000-memory.dmp

Filesize
3.3MB

Download
memory/2508-4006-0x000000013F240000-0x000000013F594000-memory.dmp

Filesize
3.3MB

Download
memory/2580-4005-0x000000013F620000-0x000000013F974000-memory.dmp

Filesize
3.3MB

Download
memory/2580-83-0x000000013F620000-0x000000013F974000-memory.dmp

Filesize
3.3MB

Download
memory/2592-4000-0x000000013F5A0000-0x000000013F8F4000-memory.dmp

Filesize
3.3MB

Download
memory/2592-2377-0x000000013F5A0000-0x000000013F8F4000-memory.dmp

Filesize
3.3MB

Download
memory/2592-45-0x000000013F5A0000-0x000000013F8F4000-memory.dmp

Filesize
3.3MB

Download
memory/2608-3997-0x000000013FCB0000-0x0000000140004000-memory.dmp

Filesize
3.3MB

Download
memory/2608-33-0x000000013FCB0000-0x0000000140004000-memory.dmp

Filesize
3.3MB

Download
memory/2632-4004-0x000000013F2E0000-0x000000013F634000-memory.dmp

Filesize
3.3MB

Download
memory/2632-66-0x000000013F2E0000-0x000000013F634000-memory.dmp

Filesize
3.3MB

Download
memory/2644-2600-0x000000013FC20000-0x000000013FF74000-memory.dmp

Filesize
3.3MB

Download
memory/2644-4003-0x000000013FC20000-0x000000013FF74000-memory.dmp

Filesize
3.3MB

Download
memory/2644-64-0x000000013FC20000-0x000000013FF74000-memory.dmp

Filesize
3.3MB

Download
memory/2728-2378-0x000000013FB40000-0x000000013FE94000-memory.dmp

Filesize
3.3MB

Download
memory/2728-4001-0x000000013FB40000-0x000000013FE94000-memory.dmp

Filesize
3.3MB

Download
memory/2728-53-0x000000013FB40000-0x000000013FE94000-memory.dmp

Filesize
3.3MB

Download
memory/2744-35-0x000000013F160000-0x000000013F4B4000-memory.dmp

Filesize
3.3MB

Download
memory/2744-3996-0x000000013F160000-0x000000013F4B4000-memory.dmp

Filesize
3.3MB

Download
memory/2820-4002-0x000000013F680000-0x000000013F9D4000-memory.dmp

Filesize
3.3MB

Download
memory/2820-65-0x000000013F680000-0x000000013F9D4000-memory.dmp

Filesize
3.3MB

Download