xmrig | b52b5f976cc73916ebcdbee55175b23c360d5da223f8492088ba853d2b57b0d2

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
14/05/2024, 21:31

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
Size

2.0MB
MD5

2be80d9fd00a55737330cbc071318810
SHA1

190d4ecdb69a1d41acbfc78afb0ce267fb86becf
SHA256

b52b5f976cc73916ebcdbee55175b23c360d5da223f8492088ba853d2b57b0d2
SHA512

8fd058246e6d201c7e19c1c820e6f989ff1f3cd65a9df89b0158b7a8f683f3d7dfdd054f738282dc0140b57ebad9ec2e8f687045f7b572f7c28d458bc3f07f8b
SSDEEP

49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+AKavC2csKy3:BemTLkNdfE0pZrw

Score

10^/10

xmrig miner upx

Malware Config

Signatures

xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
miner xmrig

XMRig Miner payload 64 IoCs

miner

resource	yara_rule
behavioral1/memory/2876-0-0x000000013FD60000-0x00000001400B4000-memory.dmp	xmrig
behavioral1/files/0x000e000000012345-3.dat	xmrig
behavioral1/memory/2848-9-0x000000013F1B0000-0x000000013F504000-memory.dmp	xmrig
behavioral1/files/0x00300000000126ff-12.dat	xmrig
behavioral1/files/0x0008000000013129-18.dat	xmrig
behavioral1/files/0x0008000000013134-19.dat	xmrig
behavioral1/memory/2548-28-0x000000013F6B0000-0x000000013FA04000-memory.dmp	xmrig
behavioral1/files/0x00080000000131d9-35.dat	xmrig
behavioral1/memory/2876-40-0x000000013F6A0000-0x000000013F9F4000-memory.dmp	xmrig
behavioral1/memory/2208-43-0x000000013F2F0000-0x000000013F644000-memory.dmp	xmrig
behavioral1/memory/2608-38-0x000000013FC60000-0x000000013FFB4000-memory.dmp	xmrig
behavioral1/memory/2536-36-0x000000013FCD0000-0x0000000140024000-memory.dmp	xmrig
behavioral1/memory/2624-33-0x000000013F6A0000-0x000000013F9F4000-memory.dmp	xmrig
behavioral1/files/0x000800000001315b-26.dat	xmrig
behavioral1/files/0x000a0000000133a3-47.dat	xmrig
behavioral1/files/0x000700000001417f-48.dat	xmrig
behavioral1/memory/2424-56-0x000000013F8B0000-0x000000013FC04000-memory.dmp	xmrig
behavioral1/files/0x000600000001418f-61.dat	xmrig
behavioral1/memory/2832-62-0x000000013F210000-0x000000013F564000-memory.dmp	xmrig
behavioral1/memory/2876-53-0x000000013F8B0000-0x000000013FC04000-memory.dmp	xmrig
behavioral1/memory/2676-52-0x000000013F9A0000-0x000000013FCF4000-memory.dmp	xmrig
behavioral1/memory/2876-74-0x000000013FD60000-0x00000001400B4000-memory.dmp	xmrig
behavioral1/files/0x0006000000014323-82.dat	xmrig
behavioral1/memory/2712-100-0x000000013FF00000-0x0000000140254000-memory.dmp	xmrig
behavioral1/files/0x00060000000143a8-106.dat	xmrig
behavioral1/memory/2608-110-0x000000013FC60000-0x000000013FFB4000-memory.dmp	xmrig
behavioral1/files/0x00060000000144d8-119.dat	xmrig
behavioral1/files/0x0006000000014702-149.dat	xmrig
behavioral1/files/0x0006000000014ba7-174.dat	xmrig
behavioral1/files/0x0006000000014eb9-184.dat	xmrig
behavioral1/files/0x000600000001502c-188.dat	xmrig
behavioral1/files/0x0006000000014dae-179.dat	xmrig
behavioral1/files/0x0006000000014b36-169.dat	xmrig
behavioral1/files/0x0006000000014b10-164.dat	xmrig
behavioral1/files/0x00060000000149e1-159.dat	xmrig
behavioral1/files/0x000600000001480e-154.dat	xmrig
behavioral1/files/0x00060000000146f8-144.dat	xmrig
behavioral1/files/0x0006000000014588-134.dat	xmrig
behavioral1/files/0x0006000000014662-139.dat	xmrig
behavioral1/files/0x0006000000014502-129.dat	xmrig
behavioral1/files/0x00060000000144e0-124.dat	xmrig
behavioral1/files/0x000600000001448d-114.dat	xmrig
behavioral1/files/0x0006000000014435-105.dat	xmrig
behavioral1/memory/2732-104-0x000000013F230000-0x000000013F584000-memory.dmp	xmrig
behavioral1/memory/2472-96-0x000000013F120000-0x000000013F474000-memory.dmp	xmrig
behavioral1/memory/1212-89-0x000000013FF20000-0x0000000140274000-memory.dmp	xmrig
behavioral1/memory/1564-88-0x000000013FAF0000-0x000000013FE44000-memory.dmp	xmrig
behavioral1/files/0x000600000001431c-86.dat	xmrig
behavioral1/files/0x000600000001430c-81.dat	xmrig
behavioral1/files/0x0006000000014204-72.dat	xmrig
behavioral1/files/0x0030000000012727-63.dat	xmrig
behavioral1/memory/2424-2481-0x000000013F8B0000-0x000000013FC04000-memory.dmp	xmrig
behavioral1/memory/2832-2857-0x000000013F210000-0x000000013F564000-memory.dmp	xmrig
behavioral1/memory/2848-4024-0x000000013F1B0000-0x000000013F504000-memory.dmp	xmrig
behavioral1/memory/2548-4025-0x000000013F6B0000-0x000000013FA04000-memory.dmp	xmrig
behavioral1/memory/2624-4026-0x000000013F6A0000-0x000000013F9F4000-memory.dmp	xmrig
behavioral1/memory/2536-4027-0x000000013FCD0000-0x0000000140024000-memory.dmp	xmrig
behavioral1/memory/2608-4028-0x000000013FC60000-0x000000013FFB4000-memory.dmp	xmrig
behavioral1/memory/2208-4029-0x000000013F2F0000-0x000000013F644000-memory.dmp	xmrig
behavioral1/memory/2676-4030-0x000000013F9A0000-0x000000013FCF4000-memory.dmp	xmrig
behavioral1/memory/2424-4031-0x000000013F8B0000-0x000000013FC04000-memory.dmp	xmrig
behavioral1/memory/1564-4033-0x000000013FAF0000-0x000000013FE44000-memory.dmp	xmrig
behavioral1/memory/2832-4032-0x000000013F210000-0x000000013F564000-memory.dmp	xmrig
behavioral1/memory/1212-4034-0x000000013FF20000-0x0000000140274000-memory.dmp	xmrig

Executes dropped EXE 64 IoCs

pid	Process
2848	ZHGpqKV.exe
2548	tvqmHPG.exe
2624	jaNAvPR.exe
2536	kdasutJ.exe
2608	vuFiOJa.exe
2208	bfDPtcy.exe
2676	JRHLgid.exe
2424	ohbpXfZ.exe
2832	WyfeLIL.exe
1564	DhiqhCb.exe
1212	MoHjwjQ.exe
2472	wwRbyUU.exe
2712	kkVeHNl.exe
2732	UbEiXLb.exe
404	cDADCgU.exe
344	cTEzCxy.exe
1616	IxYyazl.exe
1612	cCYDQHT.exe
1464	NQGCqak.exe
2376	emiSjLd.exe
860	tYXitlb.exe
2028	wLvHAkd.exe
2084	HBcIktz.exe
1716	hoRPcOK.exe
1932	efMEJwd.exe
2704	TxfGcFx.exe
2088	VAxzekX.exe
2764	xNpMpZY.exe
716	UatVPeC.exe
1004	CyWNWru.exe
1428	ztBXbiR.exe
832	FlyyNhd.exe
1196	qRsenTM.exe
1888	cPDTqea.exe
2948	weoRMMg.exe
108	Hgiaunf.exe
2944	gPyZXiJ.exe
864	UbLRCwr.exe
2972	ntDNZGK.exe
1492	UoTZuhr.exe
772	rDguIAe.exe
1828	GiTCryi.exe
380	hhecmQD.exe
2132	KwRMHnB.exe
968	qkEvGzh.exe
1448	bFEWbUg.exe
592	IUYKhBu.exe
2300	iiqeYQD.exe
1724	rxUCJCH.exe
572	gKRYNcd.exe
1640	kUHiBQp.exe
1956	KaoljRl.exe
2996	qPJqqRs.exe
1440	LpjYsQs.exe
1928	ZoTCSnP.exe
2236	UZsnFph.exe
2744	CwzaxTd.exe
2740	FiBVRor.exe
1544	oVwGbrV.exe
2520	UBzWuEa.exe
2104	bwgyJWT.exe
2560	VjypDBF.exe
2524	ylzpdYo.exe
2452	ulSMLRs.exe

Loads dropped DLL 64 IoCs

pid	Process
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe

UPX packed file 64 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral1/memory/2876-0-0x000000013FD60000-0x00000001400B4000-memory.dmp	upx
behavioral1/files/0x000e000000012345-3.dat	upx
behavioral1/memory/2848-9-0x000000013F1B0000-0x000000013F504000-memory.dmp	upx
behavioral1/files/0x00300000000126ff-12.dat	upx
behavioral1/files/0x0008000000013129-18.dat	upx
behavioral1/files/0x0008000000013134-19.dat	upx
behavioral1/memory/2548-28-0x000000013F6B0000-0x000000013FA04000-memory.dmp	upx
behavioral1/files/0x00080000000131d9-35.dat	upx
behavioral1/memory/2208-43-0x000000013F2F0000-0x000000013F644000-memory.dmp	upx
behavioral1/memory/2608-38-0x000000013FC60000-0x000000013FFB4000-memory.dmp	upx
behavioral1/memory/2536-36-0x000000013FCD0000-0x0000000140024000-memory.dmp	upx
behavioral1/memory/2624-33-0x000000013F6A0000-0x000000013F9F4000-memory.dmp	upx
behavioral1/files/0x000800000001315b-26.dat	upx
behavioral1/files/0x000a0000000133a3-47.dat	upx
behavioral1/files/0x000700000001417f-48.dat	upx
behavioral1/memory/2424-56-0x000000013F8B0000-0x000000013FC04000-memory.dmp	upx
behavioral1/files/0x000600000001418f-61.dat	upx
behavioral1/memory/2832-62-0x000000013F210000-0x000000013F564000-memory.dmp	upx
behavioral1/memory/2676-52-0x000000013F9A0000-0x000000013FCF4000-memory.dmp	upx
behavioral1/memory/2876-74-0x000000013FD60000-0x00000001400B4000-memory.dmp	upx
behavioral1/files/0x0006000000014323-82.dat	upx
behavioral1/memory/2712-100-0x000000013FF00000-0x0000000140254000-memory.dmp	upx
behavioral1/files/0x00060000000143a8-106.dat	upx
behavioral1/memory/2608-110-0x000000013FC60000-0x000000013FFB4000-memory.dmp	upx
behavioral1/files/0x00060000000144d8-119.dat	upx
behavioral1/files/0x0006000000014702-149.dat	upx
behavioral1/files/0x0006000000014ba7-174.dat	upx
behavioral1/files/0x0006000000014eb9-184.dat	upx
behavioral1/files/0x000600000001502c-188.dat	upx
behavioral1/files/0x0006000000014dae-179.dat	upx
behavioral1/files/0x0006000000014b36-169.dat	upx
behavioral1/files/0x0006000000014b10-164.dat	upx
behavioral1/files/0x00060000000149e1-159.dat	upx
behavioral1/files/0x000600000001480e-154.dat	upx
behavioral1/files/0x00060000000146f8-144.dat	upx
behavioral1/files/0x0006000000014588-134.dat	upx
behavioral1/files/0x0006000000014662-139.dat	upx
behavioral1/files/0x0006000000014502-129.dat	upx
behavioral1/files/0x00060000000144e0-124.dat	upx
behavioral1/files/0x000600000001448d-114.dat	upx
behavioral1/files/0x0006000000014435-105.dat	upx
behavioral1/memory/2732-104-0x000000013F230000-0x000000013F584000-memory.dmp	upx
behavioral1/memory/2472-96-0x000000013F120000-0x000000013F474000-memory.dmp	upx
behavioral1/memory/1212-89-0x000000013FF20000-0x0000000140274000-memory.dmp	upx
behavioral1/memory/1564-88-0x000000013FAF0000-0x000000013FE44000-memory.dmp	upx
behavioral1/files/0x000600000001431c-86.dat	upx
behavioral1/files/0x000600000001430c-81.dat	upx
behavioral1/files/0x0006000000014204-72.dat	upx
behavioral1/files/0x0030000000012727-63.dat	upx
behavioral1/memory/2424-2481-0x000000013F8B0000-0x000000013FC04000-memory.dmp	upx
behavioral1/memory/2832-2857-0x000000013F210000-0x000000013F564000-memory.dmp	upx
behavioral1/memory/2848-4024-0x000000013F1B0000-0x000000013F504000-memory.dmp	upx
behavioral1/memory/2548-4025-0x000000013F6B0000-0x000000013FA04000-memory.dmp	upx
behavioral1/memory/2624-4026-0x000000013F6A0000-0x000000013F9F4000-memory.dmp	upx
behavioral1/memory/2536-4027-0x000000013FCD0000-0x0000000140024000-memory.dmp	upx
behavioral1/memory/2608-4028-0x000000013FC60000-0x000000013FFB4000-memory.dmp	upx
behavioral1/memory/2208-4029-0x000000013F2F0000-0x000000013F644000-memory.dmp	upx
behavioral1/memory/2676-4030-0x000000013F9A0000-0x000000013FCF4000-memory.dmp	upx
behavioral1/memory/2424-4031-0x000000013F8B0000-0x000000013FC04000-memory.dmp	upx
behavioral1/memory/1564-4033-0x000000013FAF0000-0x000000013FE44000-memory.dmp	upx
behavioral1/memory/2832-4032-0x000000013F210000-0x000000013F564000-memory.dmp	upx
behavioral1/memory/1212-4034-0x000000013FF20000-0x0000000140274000-memory.dmp	upx
behavioral1/memory/2472-4036-0x000000013F120000-0x000000013F474000-memory.dmp	upx
behavioral1/memory/2712-4035-0x000000013FF00000-0x0000000140254000-memory.dmp	upx

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\System\sXFANOY.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\IEiIViN.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\RVwAbCu.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\hyhkxKq.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\HFZSRhm.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\YEmiJoy.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\EQberEC.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\sHrCwfc.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\QrZQsse.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\jpTIzaG.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\MuwLjyD.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\NfzqIHq.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\jPZtEza.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\zZdKouw.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\VajMhKl.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\nCPrgZS.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\UdfgaxJ.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\CIgfVVj.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\hyJzzoB.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\SBWxvCM.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\LNSGmMc.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\tTHFFMD.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\FxdcNHp.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\yZDxydR.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\avgcoUa.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\jYhMyTK.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\fbPWZdX.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\WJlwLcV.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\VOKYAaA.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\rDguIAe.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\SGXgUCs.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\gKZXnkn.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\nFHLWLS.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\KeAsRNr.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\QOzdSSD.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\TximTDv.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\GiTCryi.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\lHmVnNL.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\hHMsNjX.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\XJvwZrD.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\ulSMLRs.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\jSedBnX.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\cTTYROD.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\RcuVstw.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\CtaiuQb.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\GTxgPeH.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\QFbrmtF.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\NqdvVUd.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\fvxAhcK.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\BpzdxaE.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\KFgiWVM.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\aNzGlTn.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\LFxOXXi.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\ssSulhV.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\XrUODAA.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\JDmGCBD.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\jaNAvPR.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\saTpoSY.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\iWXhOUc.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\vPnHenH.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\OZNKXco.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\rURqtdn.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\yfYIilG.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
File created	C:\Windows\System\XbvNwrg.exe	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2876 wrote to memory of 2848	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	29
PID 2876 wrote to memory of 2848	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	29
PID 2876 wrote to memory of 2848	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	29
PID 2876 wrote to memory of 2548	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	30
PID 2876 wrote to memory of 2548	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	30
PID 2876 wrote to memory of 2548	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	30
PID 2876 wrote to memory of 2624	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	31
PID 2876 wrote to memory of 2624	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	31
PID 2876 wrote to memory of 2624	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	31
PID 2876 wrote to memory of 2608	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	32
PID 2876 wrote to memory of 2608	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	32
PID 2876 wrote to memory of 2608	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	32
PID 2876 wrote to memory of 2536	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	33
PID 2876 wrote to memory of 2536	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	33
PID 2876 wrote to memory of 2536	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	33
PID 2876 wrote to memory of 2208	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	34
PID 2876 wrote to memory of 2208	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	34
PID 2876 wrote to memory of 2208	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	34
PID 2876 wrote to memory of 2676	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	35
PID 2876 wrote to memory of 2676	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	35
PID 2876 wrote to memory of 2676	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	35
PID 2876 wrote to memory of 2424	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	36
PID 2876 wrote to memory of 2424	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	36
PID 2876 wrote to memory of 2424	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	36
PID 2876 wrote to memory of 2832	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	37
PID 2876 wrote to memory of 2832	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	37
PID 2876 wrote to memory of 2832	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	37
PID 2876 wrote to memory of 1564	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	38
PID 2876 wrote to memory of 1564	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	38
PID 2876 wrote to memory of 1564	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	38
PID 2876 wrote to memory of 1212	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	39
PID 2876 wrote to memory of 1212	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	39
PID 2876 wrote to memory of 1212	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	39
PID 2876 wrote to memory of 2472	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	40
PID 2876 wrote to memory of 2472	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	40
PID 2876 wrote to memory of 2472	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	40
PID 2876 wrote to memory of 2712	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	41
PID 2876 wrote to memory of 2712	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	41
PID 2876 wrote to memory of 2712	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	41
PID 2876 wrote to memory of 2732	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	42
PID 2876 wrote to memory of 2732	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	42
PID 2876 wrote to memory of 2732	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	42
PID 2876 wrote to memory of 344	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	43
PID 2876 wrote to memory of 344	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	43
PID 2876 wrote to memory of 344	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	43
PID 2876 wrote to memory of 404	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	44
PID 2876 wrote to memory of 404	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	44
PID 2876 wrote to memory of 404	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	44
PID 2876 wrote to memory of 1616	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	45
PID 2876 wrote to memory of 1616	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	45
PID 2876 wrote to memory of 1616	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	45
PID 2876 wrote to memory of 1612	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	46
PID 2876 wrote to memory of 1612	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	46
PID 2876 wrote to memory of 1612	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	46
PID 2876 wrote to memory of 1464	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	47
PID 2876 wrote to memory of 1464	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	47
PID 2876 wrote to memory of 1464	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	47
PID 2876 wrote to memory of 2376	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	48
PID 2876 wrote to memory of 2376	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	48
PID 2876 wrote to memory of 2376	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	48
PID 2876 wrote to memory of 860	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	49
PID 2876 wrote to memory of 860	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	49
PID 2876 wrote to memory of 860	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	49
PID 2876 wrote to memory of 2028	2876	2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe	50

C:\Users\Admin\AppData\Local\Temp\2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\2be80d9fd00a55737330cbc071318810_NeikiAnalytics.exe"
1⤵
- Loads dropped DLL
- Drops file in Windows directory
- Suspicious use of WriteProcessMemory
PID:2876
- C:\Windows\System\ZHGpqKV.exe
  C:\Windows\System\ZHGpqKV.exe
  2⤵
  - Executes dropped EXE
  PID:2848
- C:\Windows\System\tvqmHPG.exe
  C:\Windows\System\tvqmHPG.exe
  2⤵
  - Executes dropped EXE
  PID:2548
- C:\Windows\System\jaNAvPR.exe
  C:\Windows\System\jaNAvPR.exe
  2⤵
  - Executes dropped EXE
  PID:2624
- C:\Windows\System\vuFiOJa.exe
  C:\Windows\System\vuFiOJa.exe
  2⤵
  - Executes dropped EXE
  PID:2608
- C:\Windows\System\kdasutJ.exe
  C:\Windows\System\kdasutJ.exe
  2⤵
  - Executes dropped EXE
  PID:2536
- C:\Windows\System\bfDPtcy.exe
  C:\Windows\System\bfDPtcy.exe
  2⤵
  - Executes dropped EXE
  PID:2208
- C:\Windows\System\JRHLgid.exe
  C:\Windows\System\JRHLgid.exe
  2⤵
  - Executes dropped EXE
  PID:2676
- C:\Windows\System\ohbpXfZ.exe
  C:\Windows\System\ohbpXfZ.exe
  2⤵
  - Executes dropped EXE
  PID:2424
- C:\Windows\System\WyfeLIL.exe
  C:\Windows\System\WyfeLIL.exe
  2⤵
  - Executes dropped EXE
  PID:2832
- C:\Windows\System\DhiqhCb.exe
  C:\Windows\System\DhiqhCb.exe
  2⤵
  - Executes dropped EXE
  PID:1564
- C:\Windows\System\MoHjwjQ.exe
  C:\Windows\System\MoHjwjQ.exe
  2⤵
  - Executes dropped EXE
  PID:1212
- C:\Windows\System\wwRbyUU.exe
  C:\Windows\System\wwRbyUU.exe
  2⤵
  - Executes dropped EXE
  PID:2472
- C:\Windows\System\kkVeHNl.exe
  C:\Windows\System\kkVeHNl.exe
  2⤵
  - Executes dropped EXE
  PID:2712
- C:\Windows\System\UbEiXLb.exe
  C:\Windows\System\UbEiXLb.exe
  2⤵
  - Executes dropped EXE
  PID:2732
- C:\Windows\System\cTEzCxy.exe
  C:\Windows\System\cTEzCxy.exe
  2⤵
  - Executes dropped EXE
  PID:344
- C:\Windows\System\cDADCgU.exe
  C:\Windows\System\cDADCgU.exe
  2⤵
  - Executes dropped EXE
  PID:404
- C:\Windows\System\IxYyazl.exe
  C:\Windows\System\IxYyazl.exe
  2⤵
  - Executes dropped EXE
  PID:1616
- C:\Windows\System\cCYDQHT.exe
  C:\Windows\System\cCYDQHT.exe
  2⤵
  - Executes dropped EXE
  PID:1612
- C:\Windows\System\NQGCqak.exe
  C:\Windows\System\NQGCqak.exe
  2⤵
  - Executes dropped EXE
  PID:1464
- C:\Windows\System\emiSjLd.exe
  C:\Windows\System\emiSjLd.exe
  2⤵
  - Executes dropped EXE
  PID:2376
- C:\Windows\System\tYXitlb.exe
  C:\Windows\System\tYXitlb.exe
  2⤵
  - Executes dropped EXE
  PID:860
- C:\Windows\System\wLvHAkd.exe
  C:\Windows\System\wLvHAkd.exe
  2⤵
  - Executes dropped EXE
  PID:2028
- C:\Windows\System\HBcIktz.exe
  C:\Windows\System\HBcIktz.exe
  2⤵
  - Executes dropped EXE
  PID:2084
- C:\Windows\System\hoRPcOK.exe
  C:\Windows\System\hoRPcOK.exe
  2⤵
  - Executes dropped EXE
  PID:1716
- C:\Windows\System\efMEJwd.exe
  C:\Windows\System\efMEJwd.exe
  2⤵
  - Executes dropped EXE
  PID:1932
- C:\Windows\System\TxfGcFx.exe
  C:\Windows\System\TxfGcFx.exe
  2⤵
  - Executes dropped EXE
  PID:2704
- C:\Windows\System\VAxzekX.exe
  C:\Windows\System\VAxzekX.exe
  2⤵
  - Executes dropped EXE
  PID:2088
- C:\Windows\System\xNpMpZY.exe
  C:\Windows\System\xNpMpZY.exe
  2⤵
  - Executes dropped EXE
  PID:2764
- C:\Windows\System\UatVPeC.exe
  C:\Windows\System\UatVPeC.exe
  2⤵
  - Executes dropped EXE
  PID:716
- C:\Windows\System\CyWNWru.exe
  C:\Windows\System\CyWNWru.exe
  2⤵
  - Executes dropped EXE
  PID:1004
- C:\Windows\System\ztBXbiR.exe
  C:\Windows\System\ztBXbiR.exe
  2⤵
  - Executes dropped EXE
  PID:1428
- C:\Windows\System\FlyyNhd.exe
  C:\Windows\System\FlyyNhd.exe
  2⤵
  - Executes dropped EXE
  PID:832
- C:\Windows\System\qRsenTM.exe
  C:\Windows\System\qRsenTM.exe
  2⤵
  - Executes dropped EXE
  PID:1196
- C:\Windows\System\cPDTqea.exe
  C:\Windows\System\cPDTqea.exe
  2⤵
  - Executes dropped EXE
  PID:1888
- C:\Windows\System\Hgiaunf.exe
  C:\Windows\System\Hgiaunf.exe
  2⤵
  - Executes dropped EXE
  PID:108
- C:\Windows\System\weoRMMg.exe
  C:\Windows\System\weoRMMg.exe
  2⤵
  - Executes dropped EXE
  PID:2948
- C:\Windows\System\UbLRCwr.exe
  C:\Windows\System\UbLRCwr.exe
  2⤵
  - Executes dropped EXE
  PID:864
- C:\Windows\System\gPyZXiJ.exe
  C:\Windows\System\gPyZXiJ.exe
  2⤵
  - Executes dropped EXE
  PID:2944
- C:\Windows\System\ntDNZGK.exe
  C:\Windows\System\ntDNZGK.exe
  2⤵
  - Executes dropped EXE
  PID:2972
- C:\Windows\System\UoTZuhr.exe
  C:\Windows\System\UoTZuhr.exe
  2⤵
  - Executes dropped EXE
  PID:1492
- C:\Windows\System\rDguIAe.exe
  C:\Windows\System\rDguIAe.exe
  2⤵
  - Executes dropped EXE
  PID:772
- C:\Windows\System\GiTCryi.exe
  C:\Windows\System\GiTCryi.exe
  2⤵
  - Executes dropped EXE
  PID:1828
- C:\Windows\System\hhecmQD.exe
  C:\Windows\System\hhecmQD.exe
  2⤵
  - Executes dropped EXE
  PID:380
- C:\Windows\System\KwRMHnB.exe
  C:\Windows\System\KwRMHnB.exe
  2⤵
  - Executes dropped EXE
  PID:2132
- C:\Windows\System\qkEvGzh.exe
  C:\Windows\System\qkEvGzh.exe
  2⤵
  - Executes dropped EXE
  PID:968
- C:\Windows\System\bFEWbUg.exe
  C:\Windows\System\bFEWbUg.exe
  2⤵
  - Executes dropped EXE
  PID:1448
- C:\Windows\System\IUYKhBu.exe
  C:\Windows\System\IUYKhBu.exe
  2⤵
  - Executes dropped EXE
  PID:592
- C:\Windows\System\iiqeYQD.exe
  C:\Windows\System\iiqeYQD.exe
  2⤵
  - Executes dropped EXE
  PID:2300
- C:\Windows\System\rxUCJCH.exe
  C:\Windows\System\rxUCJCH.exe
  2⤵
  - Executes dropped EXE
  PID:1724
- C:\Windows\System\gKRYNcd.exe
  C:\Windows\System\gKRYNcd.exe
  2⤵
  - Executes dropped EXE
  PID:572
- C:\Windows\System\kUHiBQp.exe
  C:\Windows\System\kUHiBQp.exe
  2⤵
  - Executes dropped EXE
  PID:1640
- C:\Windows\System\KaoljRl.exe
  C:\Windows\System\KaoljRl.exe
  2⤵
  - Executes dropped EXE
  PID:1956
- C:\Windows\System\qPJqqRs.exe
  C:\Windows\System\qPJqqRs.exe
  2⤵
  - Executes dropped EXE
  PID:2996
- C:\Windows\System\LpjYsQs.exe
  C:\Windows\System\LpjYsQs.exe
  2⤵
  - Executes dropped EXE
  PID:1440
- C:\Windows\System\ZoTCSnP.exe
  C:\Windows\System\ZoTCSnP.exe
  2⤵
  - Executes dropped EXE
  PID:1928
- C:\Windows\System\UZsnFph.exe
  C:\Windows\System\UZsnFph.exe
  2⤵
  - Executes dropped EXE
  PID:2236
- C:\Windows\System\CwzaxTd.exe
  C:\Windows\System\CwzaxTd.exe
  2⤵
  - Executes dropped EXE
  PID:2744
- C:\Windows\System\FiBVRor.exe
  C:\Windows\System\FiBVRor.exe
  2⤵
  - Executes dropped EXE
  PID:2740
- C:\Windows\System\oVwGbrV.exe
  C:\Windows\System\oVwGbrV.exe
  2⤵
  - Executes dropped EXE
  PID:1544
- C:\Windows\System\UBzWuEa.exe
  C:\Windows\System\UBzWuEa.exe
  2⤵
  - Executes dropped EXE
  PID:2520
- C:\Windows\System\bwgyJWT.exe
  C:\Windows\System\bwgyJWT.exe
  2⤵
  - Executes dropped EXE
  PID:2104
- C:\Windows\System\VjypDBF.exe
  C:\Windows\System\VjypDBF.exe
  2⤵
  - Executes dropped EXE
  PID:2560
- C:\Windows\System\ylzpdYo.exe
  C:\Windows\System\ylzpdYo.exe
  2⤵
  - Executes dropped EXE
  PID:2524
- C:\Windows\System\ulSMLRs.exe
  C:\Windows\System\ulSMLRs.exe
  2⤵
  - Executes dropped EXE
  PID:2452
- C:\Windows\System\oMmfBRE.exe
  C:\Windows\System\oMmfBRE.exe
  2⤵
  PID:2904
- C:\Windows\System\LWRNIEb.exe
  C:\Windows\System\LWRNIEb.exe
  2⤵
  PID:2612
- C:\Windows\System\BhTjsND.exe
  C:\Windows\System\BhTjsND.exe
  2⤵
  PID:1364
- C:\Windows\System\aQYzTjY.exe
  C:\Windows\System\aQYzTjY.exe
  2⤵
  PID:2620
- C:\Windows\System\pwrCMJS.exe
  C:\Windows\System\pwrCMJS.exe
  2⤵
  PID:2644
- C:\Windows\System\SwOTnpV.exe
  C:\Windows\System\SwOTnpV.exe
  2⤵
  PID:1776
- C:\Windows\System\lWlqyNX.exe
  C:\Windows\System\lWlqyNX.exe
  2⤵
  PID:1596
- C:\Windows\System\cphFVgc.exe
  C:\Windows\System\cphFVgc.exe
  2⤵
  PID:2544
- C:\Windows\System\SKuvIpr.exe
  C:\Windows\System\SKuvIpr.exe
  2⤵
  PID:2448
- C:\Windows\System\TJvwzRY.exe
  C:\Windows\System\TJvwzRY.exe
  2⤵
  PID:3004
- C:\Windows\System\iwMFNuH.exe
  C:\Windows\System\iwMFNuH.exe
  2⤵
  PID:1704
- C:\Windows\System\TARvxUR.exe
  C:\Windows\System\TARvxUR.exe
  2⤵
  PID:2072
- C:\Windows\System\wsgCPcy.exe
  C:\Windows\System\wsgCPcy.exe
  2⤵
  PID:2380
- C:\Windows\System\LitnKxa.exe
  C:\Windows\System\LitnKxa.exe
  2⤵
  PID:1964
- C:\Windows\System\bJTCLwM.exe
  C:\Windows\System\bJTCLwM.exe
  2⤵
  PID:2768
- C:\Windows\System\VzWLucF.exe
  C:\Windows\System\VzWLucF.exe
  2⤵
  PID:796
- C:\Windows\System\wltJvLR.exe
  C:\Windows\System\wltJvLR.exe
  2⤵
  PID:1736
- C:\Windows\System\wBMVnMn.exe
  C:\Windows\System\wBMVnMn.exe
  2⤵
  PID:820
- C:\Windows\System\nCPrgZS.exe
  C:\Windows\System\nCPrgZS.exe
  2⤵
  PID:2928
- C:\Windows\System\xRlGMZL.exe
  C:\Windows\System\xRlGMZL.exe
  2⤵
  PID:3008
- C:\Windows\System\ArhiRrg.exe
  C:\Windows\System\ArhiRrg.exe
  2⤵
  PID:3000
- C:\Windows\System\BOCzgGa.exe
  C:\Windows\System\BOCzgGa.exe
  2⤵
  PID:2328
- C:\Windows\System\alwAquE.exe
  C:\Windows\System\alwAquE.exe
  2⤵
  PID:1904
- C:\Windows\System\wdQKZnu.exe
  C:\Windows\System\wdQKZnu.exe
  2⤵
  PID:1824
- C:\Windows\System\NipGJSk.exe
  C:\Windows\System\NipGJSk.exe
  2⤵
  PID:1696
- C:\Windows\System\SzaovcF.exe
  C:\Windows\System\SzaovcF.exe
  2⤵
  PID:1580
- C:\Windows\System\KygZrCC.exe
  C:\Windows\System\KygZrCC.exe
  2⤵
  PID:2920
- C:\Windows\System\SpDFUjk.exe
  C:\Windows\System\SpDFUjk.exe
  2⤵
  PID:1676
- C:\Windows\System\WHKcmVM.exe
  C:\Windows\System\WHKcmVM.exe
  2⤵
  PID:1976
- C:\Windows\System\TwBYInQ.exe
  C:\Windows\System\TwBYInQ.exe
  2⤵
  PID:2264
- C:\Windows\System\VSNzAuw.exe
  C:\Windows\System\VSNzAuw.exe
  2⤵
  PID:1008
- C:\Windows\System\AYpQrfz.exe
  C:\Windows\System\AYpQrfz.exe
  2⤵
  PID:900
- C:\Windows\System\bkkHBeI.exe
  C:\Windows\System\bkkHBeI.exe
  2⤵
  PID:872
- C:\Windows\System\YMDOfcW.exe
  C:\Windows\System\YMDOfcW.exe
  2⤵
  PID:1520
- C:\Windows\System\QKphvJf.exe
  C:\Windows\System\QKphvJf.exe
  2⤵
  PID:2908
- C:\Windows\System\RjwqveI.exe
  C:\Windows\System\RjwqveI.exe
  2⤵
  PID:2432
- C:\Windows\System\LgjsuiA.exe
  C:\Windows\System\LgjsuiA.exe
  2⤵
  PID:2828
- C:\Windows\System\ACNUgvF.exe
  C:\Windows\System\ACNUgvF.exe
  2⤵
  PID:2460
- C:\Windows\System\XbvNwrg.exe
  C:\Windows\System\XbvNwrg.exe
  2⤵
  PID:2652
- C:\Windows\System\jThhAjE.exe
  C:\Windows\System\jThhAjE.exe
  2⤵
  PID:852
- C:\Windows\System\jYhMyTK.exe
  C:\Windows\System\jYhMyTK.exe
  2⤵
  PID:1652
- C:\Windows\System\GcvmjXf.exe
  C:\Windows\System\GcvmjXf.exe
  2⤵
  PID:2140
- C:\Windows\System\vrawRpr.exe
  C:\Windows\System\vrawRpr.exe
  2⤵
  PID:1244
- C:\Windows\System\ctoUEFl.exe
  C:\Windows\System\ctoUEFl.exe
  2⤵
  PID:1200
- C:\Windows\System\tnoWqDM.exe
  C:\Windows\System\tnoWqDM.exe
  2⤵
  PID:2388
- C:\Windows\System\iEbYbjL.exe
  C:\Windows\System\iEbYbjL.exe
  2⤵
  PID:2392
- C:\Windows\System\BhIolMw.exe
  C:\Windows\System\BhIolMw.exe
  2⤵
  PID:1772
- C:\Windows\System\YccIejB.exe
  C:\Windows\System\YccIejB.exe
  2⤵
  PID:624
- C:\Windows\System\NHQgVJh.exe
  C:\Windows\System\NHQgVJh.exe
  2⤵
  PID:448
- C:\Windows\System\fBbGlJT.exe
  C:\Windows\System\fBbGlJT.exe
  2⤵
  PID:1476
- C:\Windows\System\tSebjPl.exe
  C:\Windows\System\tSebjPl.exe
  2⤵
  PID:276
- C:\Windows\System\jXLVvGU.exe
  C:\Windows\System\jXLVvGU.exe
  2⤵
  PID:2272
- C:\Windows\System\yUaUfpu.exe
  C:\Windows\System\yUaUfpu.exe
  2⤵
  PID:876
- C:\Windows\System\VPnEcKm.exe
  C:\Windows\System\VPnEcKm.exe
  2⤵
  PID:1984
- C:\Windows\System\QZxDcFL.exe
  C:\Windows\System\QZxDcFL.exe
  2⤵
  PID:1948
- C:\Windows\System\llUaySo.exe
  C:\Windows\System\llUaySo.exe
  2⤵
  PID:1256
- C:\Windows\System\pkOVKor.exe
  C:\Windows\System\pkOVKor.exe
  2⤵
  PID:1740
- C:\Windows\System\QOzdSSD.exe
  C:\Windows\System\QOzdSSD.exe
  2⤵
  PID:1536
- C:\Windows\System\SpaCBNk.exe
  C:\Windows\System\SpaCBNk.exe
  2⤵
  PID:2672
- C:\Windows\System\xackqLl.exe
  C:\Windows\System\xackqLl.exe
  2⤵
  PID:2416
- C:\Windows\System\RcuVstw.exe
  C:\Windows\System\RcuVstw.exe
  2⤵
  PID:2484
- C:\Windows\System\alwpSbj.exe
  C:\Windows\System\alwpSbj.exe
  2⤵
  PID:1288
- C:\Windows\System\tsfwkTF.exe
  C:\Windows\System\tsfwkTF.exe
  2⤵
  PID:2500
- C:\Windows\System\pWgZzKH.exe
  C:\Windows\System\pWgZzKH.exe
  2⤵
  PID:2444
- C:\Windows\System\WqCgKeJ.exe
  C:\Windows\System\WqCgKeJ.exe
  2⤵
  PID:2164
- C:\Windows\System\rjOcobB.exe
  C:\Windows\System\rjOcobB.exe
  2⤵
  PID:2040
- C:\Windows\System\dLbmczp.exe
  C:\Windows\System\dLbmczp.exe
  2⤵
  PID:2192
- C:\Windows\System\ZjsbJRF.exe
  C:\Windows\System\ZjsbJRF.exe
  2⤵
  PID:2508
- C:\Windows\System\puLgJdu.exe
  C:\Windows\System\puLgJdu.exe
  2⤵
  PID:1420
- C:\Windows\System\zexlDRe.exe
  C:\Windows\System\zexlDRe.exe
  2⤵
  PID:1252
- C:\Windows\System\wZIrCnw.exe
  C:\Windows\System\wZIrCnw.exe
  2⤵
  PID:2992
- C:\Windows\System\NgFRvOD.exe
  C:\Windows\System\NgFRvOD.exe
  2⤵
  PID:384
- C:\Windows\System\afZxPRm.exe
  C:\Windows\System\afZxPRm.exe
  2⤵
  PID:952
- C:\Windows\System\gQKvGJt.exe
  C:\Windows\System\gQKvGJt.exe
  2⤵
  PID:1952
- C:\Windows\System\EkrfVRf.exe
  C:\Windows\System\EkrfVRf.exe
  2⤵
  PID:1784
- C:\Windows\System\FStovQF.exe
  C:\Windows\System\FStovQF.exe
  2⤵
  PID:2864
- C:\Windows\System\mrFpbwr.exe
  C:\Windows\System\mrFpbwr.exe
  2⤵
  PID:1552
- C:\Windows\System\qCvhnmY.exe
  C:\Windows\System\qCvhnmY.exe
  2⤵
  PID:3020
- C:\Windows\System\qVrPDyc.exe
  C:\Windows\System\qVrPDyc.exe
  2⤵
  PID:2436
- C:\Windows\System\MezoFlE.exe
  C:\Windows\System\MezoFlE.exe
  2⤵
  PID:2316
- C:\Windows\System\kReWfJf.exe
  C:\Windows\System\kReWfJf.exe
  2⤵
  PID:2532
- C:\Windows\System\yHkLqOi.exe
  C:\Windows\System\yHkLqOi.exe
  2⤵
  PID:2156
- C:\Windows\System\LPDjFFg.exe
  C:\Windows\System\LPDjFFg.exe
  2⤵
  PID:2160
- C:\Windows\System\QksBmFf.exe
  C:\Windows\System\QksBmFf.exe
  2⤵
  PID:2552
- C:\Windows\System\RtZJgWa.exe
  C:\Windows\System\RtZJgWa.exe
  2⤵
  PID:2780
- C:\Windows\System\IKXmePp.exe
  C:\Windows\System\IKXmePp.exe
  2⤵
  PID:1376
- C:\Windows\System\oPYbwpX.exe
  C:\Windows\System\oPYbwpX.exe
  2⤵
  PID:696
- C:\Windows\System\bRVFJIP.exe
  C:\Windows\System\bRVFJIP.exe
  2⤵
  PID:488
- C:\Windows\System\QqWOLcB.exe
  C:\Windows\System\QqWOLcB.exe
  2⤵
  PID:540
- C:\Windows\System\bgsLGBh.exe
  C:\Windows\System\bgsLGBh.exe
  2⤵
  PID:1216
- C:\Windows\System\cEanfKM.exe
  C:\Windows\System\cEanfKM.exe
  2⤵
  PID:1960
- C:\Windows\System\rtyAFsP.exe
  C:\Windows\System\rtyAFsP.exe
  2⤵
  PID:804
- C:\Windows\System\mzVaBlk.exe
  C:\Windows\System\mzVaBlk.exe
  2⤵
  PID:1500
- C:\Windows\System\hvRoxtZ.exe
  C:\Windows\System\hvRoxtZ.exe
  2⤵
  PID:2108
- C:\Windows\System\BEWQuJK.exe
  C:\Windows\System\BEWQuJK.exe
  2⤵
  PID:2540
- C:\Windows\System\QXfrgmL.exe
  C:\Windows\System\QXfrgmL.exe
  2⤵
  PID:676
- C:\Windows\System\GZMzpTn.exe
  C:\Windows\System\GZMzpTn.exe
  2⤵
  PID:1788
- C:\Windows\System\eNiVDDV.exe
  C:\Windows\System\eNiVDDV.exe
  2⤵
  PID:1572
- C:\Windows\System\OYHhTEY.exe
  C:\Windows\System\OYHhTEY.exe
  2⤵
  PID:2372
- C:\Windows\System\WdYpALu.exe
  C:\Windows\System\WdYpALu.exe
  2⤵
  PID:1556
- C:\Windows\System\vbOsZyV.exe
  C:\Windows\System\vbOsZyV.exe
  2⤵
  PID:2068
- C:\Windows\System\EjFlzKk.exe
  C:\Windows\System\EjFlzKk.exe
  2⤵
  PID:2268
- C:\Windows\System\yfALYqE.exe
  C:\Windows\System\yfALYqE.exe
  2⤵
  PID:2152
- C:\Windows\System\bOvBNGN.exe
  C:\Windows\System\bOvBNGN.exe
  2⤵
  PID:1000
- C:\Windows\System\KtvreQg.exe
  C:\Windows\System\KtvreQg.exe
  2⤵
  PID:1568
- C:\Windows\System\wtGCrqx.exe
  C:\Windows\System\wtGCrqx.exe
  2⤵
  PID:1276
- C:\Windows\System\vIxkDrb.exe
  C:\Windows\System\vIxkDrb.exe
  2⤵
  PID:1532
- C:\Windows\System\JjDmSdY.exe
  C:\Windows\System\JjDmSdY.exe
  2⤵
  PID:2960
- C:\Windows\System\duXaKYL.exe
  C:\Windows\System\duXaKYL.exe
  2⤵
  PID:2724
- C:\Windows\System\QFTghOs.exe
  C:\Windows\System\QFTghOs.exe
  2⤵
  PID:1068
- C:\Windows\System\SfsUshK.exe
  C:\Windows\System\SfsUshK.exe
  2⤵
  PID:2696
- C:\Windows\System\HUcfnzc.exe
  C:\Windows\System\HUcfnzc.exe
  2⤵
  PID:1604
- C:\Windows\System\vWygrnV.exe
  C:\Windows\System\vWygrnV.exe
  2⤵
  PID:312
- C:\Windows\System\wXvdkbt.exe
  C:\Windows\System\wXvdkbt.exe
  2⤵
  PID:320
- C:\Windows\System\kafDkUu.exe
  C:\Windows\System\kafDkUu.exe
  2⤵
  PID:2144
- C:\Windows\System\AlmKkey.exe
  C:\Windows\System\AlmKkey.exe
  2⤵
  PID:3080
- C:\Windows\System\vDSCASg.exe
  C:\Windows\System\vDSCASg.exe
  2⤵
  PID:3100
- C:\Windows\System\WuoBlGO.exe
  C:\Windows\System\WuoBlGO.exe
  2⤵
  PID:3132
- C:\Windows\System\ygsjkqd.exe
  C:\Windows\System\ygsjkqd.exe
  2⤵
  PID:3148
- C:\Windows\System\gZHZbsb.exe
  C:\Windows\System\gZHZbsb.exe
  2⤵
  PID:3164
- C:\Windows\System\vZieZnf.exe
  C:\Windows\System\vZieZnf.exe
  2⤵
  PID:3192
- C:\Windows\System\StAmOxE.exe
  C:\Windows\System\StAmOxE.exe
  2⤵
  PID:3208
- C:\Windows\System\FMIqnrL.exe
  C:\Windows\System\FMIqnrL.exe
  2⤵
  PID:3224
- C:\Windows\System\GTxgPeH.exe
  C:\Windows\System\GTxgPeH.exe
  2⤵
  PID:3240
- C:\Windows\System\UDrPHNO.exe
  C:\Windows\System\UDrPHNO.exe
  2⤵
  PID:3288
- C:\Windows\System\TximTDv.exe
  C:\Windows\System\TximTDv.exe
  2⤵
  PID:3304
- C:\Windows\System\ndZsRCg.exe
  C:\Windows\System\ndZsRCg.exe
  2⤵
  PID:3320
- C:\Windows\System\rKVqOcP.exe
  C:\Windows\System\rKVqOcP.exe
  2⤵
  PID:3352
- C:\Windows\System\gdCGJXB.exe
  C:\Windows\System\gdCGJXB.exe
  2⤵
  PID:3368
- C:\Windows\System\cDSTUeT.exe
  C:\Windows\System\cDSTUeT.exe
  2⤵
  PID:3384
- C:\Windows\System\aQWhwTI.exe
  C:\Windows\System\aQWhwTI.exe
  2⤵
  PID:3416
- C:\Windows\System\jcAlkhA.exe
  C:\Windows\System\jcAlkhA.exe
  2⤵
  PID:3432
- C:\Windows\System\eARBiPo.exe
  C:\Windows\System\eARBiPo.exe
  2⤵
  PID:3448
- C:\Windows\System\JhpNcMW.exe
  C:\Windows\System\JhpNcMW.exe
  2⤵
  PID:3464
- C:\Windows\System\bdHKTIL.exe
  C:\Windows\System\bdHKTIL.exe
  2⤵
  PID:3480
- C:\Windows\System\ICHdUlq.exe
  C:\Windows\System\ICHdUlq.exe
  2⤵
  PID:3496
- C:\Windows\System\VWNKzEv.exe
  C:\Windows\System\VWNKzEv.exe
  2⤵
  PID:3516
- C:\Windows\System\jHLxEOz.exe
  C:\Windows\System\jHLxEOz.exe
  2⤵
  PID:3536
- C:\Windows\System\RXRlhiv.exe
  C:\Windows\System\RXRlhiv.exe
  2⤵
  PID:3552
- C:\Windows\System\yxTHquP.exe
  C:\Windows\System\yxTHquP.exe
  2⤵
  PID:3572
- C:\Windows\System\SxqpLep.exe
  C:\Windows\System\SxqpLep.exe
  2⤵
  PID:3600
- C:\Windows\System\ArhaNvd.exe
  C:\Windows\System\ArhaNvd.exe
  2⤵
  PID:3616
- C:\Windows\System\htvWwPT.exe
  C:\Windows\System\htvWwPT.exe
  2⤵
  PID:3632
- C:\Windows\System\JQCJofK.exe
  C:\Windows\System\JQCJofK.exe
  2⤵
  PID:3656
- C:\Windows\System\UTQxjXV.exe
  C:\Windows\System\UTQxjXV.exe
  2⤵
  PID:3672
- C:\Windows\System\hIZORJf.exe
  C:\Windows\System\hIZORJf.exe
  2⤵
  PID:3696
- C:\Windows\System\ZPCPqKv.exe
  C:\Windows\System\ZPCPqKv.exe
  2⤵
  PID:3732
- C:\Windows\System\yBnFWRb.exe
  C:\Windows\System\yBnFWRb.exe
  2⤵
  PID:3752
- C:\Windows\System\EOgVzyZ.exe
  C:\Windows\System\EOgVzyZ.exe
  2⤵
  PID:3768
- C:\Windows\System\kcMGqHv.exe
  C:\Windows\System\kcMGqHv.exe
  2⤵
  PID:3784
- C:\Windows\System\eWavpkh.exe
  C:\Windows\System\eWavpkh.exe
  2⤵
  PID:3800
- C:\Windows\System\dISgyLZ.exe
  C:\Windows\System\dISgyLZ.exe
  2⤵
  PID:3816
- C:\Windows\System\eMwQblZ.exe
  C:\Windows\System\eMwQblZ.exe
  2⤵
  PID:3832
- C:\Windows\System\ZwoxEKy.exe
  C:\Windows\System\ZwoxEKy.exe
  2⤵
  PID:3848
- C:\Windows\System\AkPxPrA.exe
  C:\Windows\System\AkPxPrA.exe
  2⤵
  PID:3864
- C:\Windows\System\bvhdQMI.exe
  C:\Windows\System\bvhdQMI.exe
  2⤵
  PID:3880
- C:\Windows\System\saTpoSY.exe
  C:\Windows\System\saTpoSY.exe
  2⤵
  PID:3900
- C:\Windows\System\mgdDCAs.exe
  C:\Windows\System\mgdDCAs.exe
  2⤵
  PID:3916
- C:\Windows\System\ejrMlfe.exe
  C:\Windows\System\ejrMlfe.exe
  2⤵
  PID:3936
- C:\Windows\System\aNzGlTn.exe
  C:\Windows\System\aNzGlTn.exe
  2⤵
  PID:3952
- C:\Windows\System\GjpxePA.exe
  C:\Windows\System\GjpxePA.exe
  2⤵
  PID:3976
- C:\Windows\System\GVXwbEO.exe
  C:\Windows\System\GVXwbEO.exe
  2⤵
  PID:3992
- C:\Windows\System\idPkrxp.exe
  C:\Windows\System\idPkrxp.exe
  2⤵
  PID:4012
- C:\Windows\System\qohOSzb.exe
  C:\Windows\System\qohOSzb.exe
  2⤵
  PID:4032
- C:\Windows\System\NagcsCn.exe
  C:\Windows\System\NagcsCn.exe
  2⤵
  PID:4052
- C:\Windows\System\bFVwDlt.exe
  C:\Windows\System\bFVwDlt.exe
  2⤵
  PID:4072
- C:\Windows\System\pbJTKVS.exe
  C:\Windows\System\pbJTKVS.exe
  2⤵
  PID:4092
- C:\Windows\System\VQiVXpr.exe
  C:\Windows\System\VQiVXpr.exe
  2⤵
  PID:3096
- C:\Windows\System\SgphjRI.exe
  C:\Windows\System\SgphjRI.exe
  2⤵
  PID:3144
- C:\Windows\System\UprvXuH.exe
  C:\Windows\System\UprvXuH.exe
  2⤵
  PID:3176
- C:\Windows\System\AoWkVWP.exe
  C:\Windows\System\AoWkVWP.exe
  2⤵
  PID:3184
- C:\Windows\System\rvqvWxu.exe
  C:\Windows\System\rvqvWxu.exe
  2⤵
  PID:1140
- C:\Windows\System\UcFKiCD.exe
  C:\Windows\System\UcFKiCD.exe
  2⤵
  PID:3120
- C:\Windows\System\OjkyMYU.exe
  C:\Windows\System\OjkyMYU.exe
  2⤵
  PID:1560
- C:\Windows\System\SXNWgum.exe
  C:\Windows\System\SXNWgum.exe
  2⤵
  PID:3312
- C:\Windows\System\twvyYzH.exe
  C:\Windows\System\twvyYzH.exe
  2⤵
  PID:3328
- C:\Windows\System\YSsbnpM.exe
  C:\Windows\System\YSsbnpM.exe
  2⤵
  PID:3400
- C:\Windows\System\qvOXCXU.exe
  C:\Windows\System\qvOXCXU.exe
  2⤵
  PID:3340
- C:\Windows\System\khvExVk.exe
  C:\Windows\System\khvExVk.exe
  2⤵
  PID:3396
- C:\Windows\System\wQiePBO.exe
  C:\Windows\System\wQiePBO.exe
  2⤵
  PID:932
- C:\Windows\System\KeAsRNr.exe
  C:\Windows\System\KeAsRNr.exe
  2⤵
  PID:3476
- C:\Windows\System\IGFRTFF.exe
  C:\Windows\System\IGFRTFF.exe
  2⤵
  PID:3548
- C:\Windows\System\XDsURrO.exe
  C:\Windows\System\XDsURrO.exe
  2⤵
  PID:3592
- C:\Windows\System\UzlYLTr.exe
  C:\Windows\System\UzlYLTr.exe
  2⤵
  PID:3456
- C:\Windows\System\xTWlaFH.exe
  C:\Windows\System\xTWlaFH.exe
  2⤵
  PID:3664
- C:\Windows\System\xXMuWpJ.exe
  C:\Windows\System\xXMuWpJ.exe
  2⤵
  PID:3492
- C:\Windows\System\KuknhHP.exe
  C:\Windows\System\KuknhHP.exe
  2⤵
  PID:3640
- C:\Windows\System\uGvWqoH.exe
  C:\Windows\System\uGvWqoH.exe
  2⤵
  PID:3684
- C:\Windows\System\IyuOFyI.exe
  C:\Windows\System\IyuOFyI.exe
  2⤵
  PID:3560
- C:\Windows\System\cysyWDh.exe
  C:\Windows\System\cysyWDh.exe
  2⤵
  PID:3704
- C:\Windows\System\iefLDvV.exe
  C:\Windows\System\iefLDvV.exe
  2⤵
  PID:3720
- C:\Windows\System\dKlfVjn.exe
  C:\Windows\System\dKlfVjn.exe
  2⤵
  PID:3856
- C:\Windows\System\liUvRTr.exe
  C:\Windows\System\liUvRTr.exe
  2⤵
  PID:3764
- C:\Windows\System\iTNrDXi.exe
  C:\Windows\System\iTNrDXi.exe
  2⤵
  PID:3828
- C:\Windows\System\chwtcYw.exe
  C:\Windows\System\chwtcYw.exe
  2⤵
  PID:4080
- C:\Windows\System\plpFyNG.exe
  C:\Windows\System\plpFyNG.exe
  2⤵
  PID:1588
- C:\Windows\System\NkSfCue.exe
  C:\Windows\System\NkSfCue.exe
  2⤵
  PID:3108
- C:\Windows\System\WtNPHuJ.exe
  C:\Windows\System\WtNPHuJ.exe
  2⤵
  PID:3912
- C:\Windows\System\CVGDBwF.exe
  C:\Windows\System\CVGDBwF.exe
  2⤵
  PID:3216
- C:\Windows\System\RwEBxay.exe
  C:\Windows\System\RwEBxay.exe
  2⤵
  PID:3160
- C:\Windows\System\ktKdmiH.exe
  C:\Windows\System\ktKdmiH.exe
  2⤵
  PID:3948
- C:\Windows\System\jtEYyYS.exe
  C:\Windows\System\jtEYyYS.exe
  2⤵
  PID:4024
- C:\Windows\System\DxygxMs.exe
  C:\Windows\System\DxygxMs.exe
  2⤵
  PID:4068
- C:\Windows\System\TFJpvPk.exe
  C:\Windows\System\TFJpvPk.exe
  2⤵
  PID:3780
- C:\Windows\System\zORhmBH.exe
  C:\Windows\System\zORhmBH.exe
  2⤵
  PID:3808
- C:\Windows\System\iFouNSI.exe
  C:\Windows\System\iFouNSI.exe
  2⤵
  PID:3260
- C:\Windows\System\bDcEbHU.exe
  C:\Windows\System\bDcEbHU.exe
  2⤵
  PID:3280
- C:\Windows\System\LFxOXXi.exe
  C:\Windows\System\LFxOXXi.exe
  2⤵
  PID:3380
- C:\Windows\System\PRuCuMd.exe
  C:\Windows\System\PRuCuMd.exe
  2⤵
  PID:2172
- C:\Windows\System\eVSwgtc.exe
  C:\Windows\System\eVSwgtc.exe
  2⤵
  PID:3588
- C:\Windows\System\wSzcDdH.exe
  C:\Windows\System\wSzcDdH.exe
  2⤵
  PID:3644
- C:\Windows\System\IGYocDA.exe
  C:\Windows\System\IGYocDA.exe
  2⤵
  PID:3924
- C:\Windows\System\EjCppPo.exe
  C:\Windows\System\EjCppPo.exe
  2⤵
  PID:580
- C:\Windows\System\frtVEav.exe
  C:\Windows\System\frtVEav.exe
  2⤵
  PID:3488
- C:\Windows\System\jfcCvad.exe
  C:\Windows\System\jfcCvad.exe
  2⤵
  PID:3728
- C:\Windows\System\UWILGSn.exe
  C:\Windows\System\UWILGSn.exe
  2⤵
  PID:3544
- C:\Windows\System\YSrNFpA.exe
  C:\Windows\System\YSrNFpA.exe
  2⤵
  PID:3512
- C:\Windows\System\tkXQZBY.exe
  C:\Windows\System\tkXQZBY.exe
  2⤵
  PID:1332
- C:\Windows\System\CgqbKBc.exe
  C:\Windows\System\CgqbKBc.exe
  2⤵
  PID:3892
- C:\Windows\System\HzJYMQA.exe
  C:\Windows\System\HzJYMQA.exe
  2⤵
  PID:3932
- C:\Windows\System\QQQcSgs.exe
  C:\Windows\System\QQQcSgs.exe
  2⤵
  PID:3968
- C:\Windows\System\GtKbqxy.exe
  C:\Windows\System\GtKbqxy.exe
  2⤵
  PID:4004
- C:\Windows\System\uvuKCsR.exe
  C:\Windows\System\uvuKCsR.exe
  2⤵
  PID:4084
- C:\Windows\System\ROytycr.exe
  C:\Windows\System\ROytycr.exe
  2⤵
  PID:2008
- C:\Windows\System\hqiRRXn.exe
  C:\Windows\System\hqiRRXn.exe
  2⤵
  PID:3140
- C:\Windows\System\oJDzCJf.exe
  C:\Windows\System\oJDzCJf.exe
  2⤵
  PID:3748
- C:\Windows\System\AQCQzeT.exe
  C:\Windows\System\AQCQzeT.exe
  2⤵
  PID:3776
- C:\Windows\System\GkORSDC.exe
  C:\Windows\System\GkORSDC.exe
  2⤵
  PID:3092
- C:\Windows\System\wdIIuTN.exe
  C:\Windows\System\wdIIuTN.exe
  2⤵
  PID:3252
- C:\Windows\System\mcKJtTZ.exe
  C:\Windows\System\mcKJtTZ.exe
  2⤵
  PID:2304
- C:\Windows\System\jIjqJbP.exe
  C:\Windows\System\jIjqJbP.exe
  2⤵
  PID:3412
- C:\Windows\System\gZttgSh.exe
  C:\Windows\System\gZttgSh.exe
  2⤵
  PID:3528
- C:\Windows\System\sActitf.exe
  C:\Windows\System\sActitf.exe
  2⤵
  PID:1268
- C:\Windows\System\VBOHXKK.exe
  C:\Windows\System\VBOHXKK.exe
  2⤵
  PID:3716
- C:\Windows\System\LESoKzs.exe
  C:\Windows\System\LESoKzs.exe
  2⤵
  PID:3888
- C:\Windows\System\UPqOXMK.exe
  C:\Windows\System\UPqOXMK.exe
  2⤵
  PID:3584
- C:\Windows\System\MUhOBlY.exe
  C:\Windows\System\MUhOBlY.exe
  2⤵
  PID:3508
- C:\Windows\System\HFZSRhm.exe
  C:\Windows\System\HFZSRhm.exe
  2⤵
  PID:3928
- C:\Windows\System\WniDZOd.exe
  C:\Windows\System\WniDZOd.exe
  2⤵
  PID:3844
- C:\Windows\System\MmghZdX.exe
  C:\Windows\System\MmghZdX.exe
  2⤵
  PID:3628
- C:\Windows\System\tQXHEtZ.exe
  C:\Windows\System\tQXHEtZ.exe
  2⤵
  PID:3812
- C:\Windows\System\OPEVlYD.exe
  C:\Windows\System\OPEVlYD.exe
  2⤵
  PID:3680
- C:\Windows\System\aoSQJcu.exe
  C:\Windows\System\aoSQJcu.exe
  2⤵
  PID:3964
- C:\Windows\System\fEzffHZ.exe
  C:\Windows\System\fEzffHZ.exe
  2⤵
  PID:3568
- C:\Windows\System\jERCZRb.exe
  C:\Windows\System\jERCZRb.exe
  2⤵
  PID:3220
- C:\Windows\System\szvSMUn.exe
  C:\Windows\System\szvSMUn.exe
  2⤵
  PID:3896
- C:\Windows\System\BcgAAaS.exe
  C:\Windows\System\BcgAAaS.exe
  2⤵
  PID:3272
- C:\Windows\System\aFpoqos.exe
  C:\Windows\System\aFpoqos.exe
  2⤵
  PID:2184
- C:\Windows\System\rmDzIvZ.exe
  C:\Windows\System\rmDzIvZ.exe
  2⤵
  PID:3840
- C:\Windows\System\iMSTlSr.exe
  C:\Windows\System\iMSTlSr.exe
  2⤵
  PID:3364
- C:\Windows\System\MHzfinn.exe
  C:\Windows\System\MHzfinn.exe
  2⤵
  PID:3296
- C:\Windows\System\iWVODkW.exe
  C:\Windows\System\iWVODkW.exe
  2⤵
  PID:4116
- C:\Windows\System\nXMJzlv.exe
  C:\Windows\System\nXMJzlv.exe
  2⤵
  PID:4132
- C:\Windows\System\lsHYiKq.exe
  C:\Windows\System\lsHYiKq.exe
  2⤵
  PID:4148
- C:\Windows\System\ElVkDou.exe
  C:\Windows\System\ElVkDou.exe
  2⤵
  PID:4164
- C:\Windows\System\OsToXzE.exe
  C:\Windows\System\OsToXzE.exe
  2⤵
  PID:4180
- C:\Windows\System\SfRqzTk.exe
  C:\Windows\System\SfRqzTk.exe
  2⤵
  PID:4196
- C:\Windows\System\OmaOStB.exe
  C:\Windows\System\OmaOStB.exe
  2⤵
  PID:4212
- C:\Windows\System\psUxAmc.exe
  C:\Windows\System\psUxAmc.exe
  2⤵
  PID:4232
- C:\Windows\System\fIDAkUb.exe
  C:\Windows\System\fIDAkUb.exe
  2⤵
  PID:4248
- C:\Windows\System\ZMVSLyR.exe
  C:\Windows\System\ZMVSLyR.exe
  2⤵
  PID:4264
- C:\Windows\System\PHurYYO.exe
  C:\Windows\System\PHurYYO.exe
  2⤵
  PID:4280
- C:\Windows\System\IwjXyQZ.exe
  C:\Windows\System\IwjXyQZ.exe
  2⤵
  PID:4296
- C:\Windows\System\nsYZaXv.exe
  C:\Windows\System\nsYZaXv.exe
  2⤵
  PID:4312
- C:\Windows\System\zJTCRUa.exe
  C:\Windows\System\zJTCRUa.exe
  2⤵
  PID:4332
- C:\Windows\System\CieOTkJ.exe
  C:\Windows\System\CieOTkJ.exe
  2⤵
  PID:4348
- C:\Windows\System\nqGWUHR.exe
  C:\Windows\System\nqGWUHR.exe
  2⤵
  PID:4364
- C:\Windows\System\oindpsU.exe
  C:\Windows\System\oindpsU.exe
  2⤵
  PID:4380
- C:\Windows\System\yyKMFVO.exe
  C:\Windows\System\yyKMFVO.exe
  2⤵
  PID:4396
- C:\Windows\System\HwfbXRO.exe
  C:\Windows\System\HwfbXRO.exe
  2⤵
  PID:4412
- C:\Windows\System\NOejDjE.exe
  C:\Windows\System\NOejDjE.exe
  2⤵
  PID:4428
- C:\Windows\System\PFpLFbq.exe
  C:\Windows\System\PFpLFbq.exe
  2⤵
  PID:4444
- C:\Windows\System\yJhiywb.exe
  C:\Windows\System\yJhiywb.exe
  2⤵
  PID:4468
- C:\Windows\System\BEhnuDp.exe
  C:\Windows\System\BEhnuDp.exe
  2⤵
  PID:4484
- C:\Windows\System\kIbdMoL.exe
  C:\Windows\System\kIbdMoL.exe
  2⤵
  PID:4500
- C:\Windows\System\StVpTNR.exe
  C:\Windows\System\StVpTNR.exe
  2⤵
  PID:4516
- C:\Windows\System\ZmGJElA.exe
  C:\Windows\System\ZmGJElA.exe
  2⤵
  PID:4532
- C:\Windows\System\laLGHEG.exe
  C:\Windows\System\laLGHEG.exe
  2⤵
  PID:4548
- C:\Windows\System\UEeXrnQ.exe
  C:\Windows\System\UEeXrnQ.exe
  2⤵
  PID:4564
- C:\Windows\System\twaSlHG.exe
  C:\Windows\System\twaSlHG.exe
  2⤵
  PID:4580
- C:\Windows\System\OuqzEcd.exe
  C:\Windows\System\OuqzEcd.exe
  2⤵
  PID:4596
- C:\Windows\System\zDVnjgD.exe
  C:\Windows\System\zDVnjgD.exe
  2⤵
  PID:4612
- C:\Windows\System\tjoWdNY.exe
  C:\Windows\System\tjoWdNY.exe
  2⤵
  PID:4628
- C:\Windows\System\XrSJJyS.exe
  C:\Windows\System\XrSJJyS.exe
  2⤵
  PID:4644
- C:\Windows\System\NNzuQLB.exe
  C:\Windows\System\NNzuQLB.exe
  2⤵
  PID:4660
- C:\Windows\System\nIAqLdy.exe
  C:\Windows\System\nIAqLdy.exe
  2⤵
  PID:4676
- C:\Windows\System\SIlWFof.exe
  C:\Windows\System\SIlWFof.exe
  2⤵
  PID:4692
- C:\Windows\System\KavUSzZ.exe
  C:\Windows\System\KavUSzZ.exe
  2⤵
  PID:4708
- C:\Windows\System\EuxLSCq.exe
  C:\Windows\System\EuxLSCq.exe
  2⤵
  PID:4724
- C:\Windows\System\PTyLxwB.exe
  C:\Windows\System\PTyLxwB.exe
  2⤵
  PID:4740
- C:\Windows\System\PrzYKNa.exe
  C:\Windows\System\PrzYKNa.exe
  2⤵
  PID:4756
- C:\Windows\System\VlMagNE.exe
  C:\Windows\System\VlMagNE.exe
  2⤵
  PID:4772
- C:\Windows\System\SGXgUCs.exe
  C:\Windows\System\SGXgUCs.exe
  2⤵
  PID:4788
- C:\Windows\System\UkTBEEg.exe
  C:\Windows\System\UkTBEEg.exe
  2⤵
  PID:4804
- C:\Windows\System\FfKybDb.exe
  C:\Windows\System\FfKybDb.exe
  2⤵
  PID:4820
- C:\Windows\System\OByRQZo.exe
  C:\Windows\System\OByRQZo.exe
  2⤵
  PID:4836
- C:\Windows\System\ftzPHER.exe
  C:\Windows\System\ftzPHER.exe
  2⤵
  PID:4852
- C:\Windows\System\sPkwiEe.exe
  C:\Windows\System\sPkwiEe.exe
  2⤵
  PID:4868
- C:\Windows\System\oWhlXMK.exe
  C:\Windows\System\oWhlXMK.exe
  2⤵
  PID:4884
- C:\Windows\System\JpPyTmi.exe
  C:\Windows\System\JpPyTmi.exe
  2⤵
  PID:4900
- C:\Windows\System\JwcJPup.exe
  C:\Windows\System\JwcJPup.exe
  2⤵
  PID:4916
- C:\Windows\System\ddaQHRI.exe
  C:\Windows\System\ddaQHRI.exe
  2⤵
  PID:4932
- C:\Windows\System\SJodwBm.exe
  C:\Windows\System\SJodwBm.exe
  2⤵
  PID:4948
- C:\Windows\System\AMsMtIv.exe
  C:\Windows\System\AMsMtIv.exe
  2⤵
  PID:4964
- C:\Windows\System\GKuynBl.exe
  C:\Windows\System\GKuynBl.exe
  2⤵
  PID:4980
- C:\Windows\System\TqwMjCD.exe
  C:\Windows\System\TqwMjCD.exe
  2⤵
  PID:4996
- C:\Windows\System\iWXhOUc.exe
  C:\Windows\System\iWXhOUc.exe
  2⤵
  PID:5012
- C:\Windows\System\XuYHioD.exe
  C:\Windows\System\XuYHioD.exe
  2⤵
  PID:5028
- C:\Windows\System\yZEcNZL.exe
  C:\Windows\System\yZEcNZL.exe
  2⤵
  PID:5044
- C:\Windows\System\VhOuxmr.exe
  C:\Windows\System\VhOuxmr.exe
  2⤵
  PID:5060
- C:\Windows\System\KmxiMdk.exe
  C:\Windows\System\KmxiMdk.exe
  2⤵
  PID:5076
- C:\Windows\System\JufbWFF.exe
  C:\Windows\System\JufbWFF.exe
  2⤵
  PID:5092
- C:\Windows\System\Bahmwfp.exe
  C:\Windows\System\Bahmwfp.exe
  2⤵
  PID:5108
- C:\Windows\System\gATgZgC.exe
  C:\Windows\System\gATgZgC.exe
  2⤵
  PID:3692
- C:\Windows\System\MoUPHlI.exe
  C:\Windows\System\MoUPHlI.exe
  2⤵
  PID:3824
- C:\Windows\System\COgEyAs.exe
  C:\Windows\System\COgEyAs.exe
  2⤵
  PID:4124
- C:\Windows\System\DsxQZNv.exe
  C:\Windows\System\DsxQZNv.exe
  2⤵
  PID:4144
- C:\Windows\System\VQTvwXO.exe
  C:\Windows\System\VQTvwXO.exe
  2⤵
  PID:4192
- C:\Windows\System\Npojocx.exe
  C:\Windows\System\Npojocx.exe
  2⤵
  PID:4176
- C:\Windows\System\IKQNhwR.exe
  C:\Windows\System\IKQNhwR.exe
  2⤵
  PID:4244
- C:\Windows\System\jOYXOdY.exe
  C:\Windows\System\jOYXOdY.exe
  2⤵
  PID:4288
- C:\Windows\System\ssSulhV.exe
  C:\Windows\System\ssSulhV.exe
  2⤵
  PID:4356
- C:\Windows\System\nnbNbJZ.exe
  C:\Windows\System\nnbNbJZ.exe
  2⤵
  PID:4344
- C:\Windows\System\cTyYViK.exe
  C:\Windows\System\cTyYViK.exe
  2⤵
  PID:4456
- C:\Windows\System\zDvEGTU.exe
  C:\Windows\System\zDvEGTU.exe
  2⤵
  PID:4496
- C:\Windows\System\HGsxGEG.exe
  C:\Windows\System\HGsxGEG.exe
  2⤵
  PID:4476
- C:\Windows\System\GnEEESk.exe
  C:\Windows\System\GnEEESk.exe
  2⤵
  PID:4480
- C:\Windows\System\PsStCGc.exe
  C:\Windows\System\PsStCGc.exe
  2⤵
  PID:4576
- C:\Windows\System\xPdtLUL.exe
  C:\Windows\System\xPdtLUL.exe
  2⤵
  PID:4652
- C:\Windows\System\muklUEV.exe
  C:\Windows\System\muklUEV.exe
  2⤵
  PID:4720
- C:\Windows\System\EOkxjzP.exe
  C:\Windows\System\EOkxjzP.exe
  2⤵
  PID:4764
- C:\Windows\System\hgPLRkL.exe
  C:\Windows\System\hgPLRkL.exe
  2⤵
  PID:4800
- C:\Windows\System\eGiEgpG.exe
  C:\Windows\System\eGiEgpG.exe
  2⤵
  PID:4668
- C:\Windows\System\ItbWCiz.exe
  C:\Windows\System\ItbWCiz.exe
  2⤵
  PID:4876
- C:\Windows\System\CCoYxlr.exe
  C:\Windows\System\CCoYxlr.exe
  2⤵
  PID:4892
- C:\Windows\System\IEJALhf.exe
  C:\Windows\System\IEJALhf.exe
  2⤵
  PID:4940
- C:\Windows\System\RORfMPF.exe
  C:\Windows\System\RORfMPF.exe
  2⤵
  PID:4956
- C:\Windows\System\lHmVnNL.exe
  C:\Windows\System\lHmVnNL.exe
  2⤵
  PID:5008
- C:\Windows\System\fFGFAMM.exe
  C:\Windows\System\fFGFAMM.exe
  2⤵
  PID:5036
- C:\Windows\System\zxaTgaP.exe
  C:\Windows\System\zxaTgaP.exe
  2⤵
  PID:5084
- C:\Windows\System\xxYexZg.exe
  C:\Windows\System\xxYexZg.exe
  2⤵
  PID:4064
- C:\Windows\System\DnmVYZX.exe
  C:\Windows\System\DnmVYZX.exe
  2⤵
  PID:4112
- C:\Windows\System\JGlCoQa.exe
  C:\Windows\System\JGlCoQa.exe
  2⤵
  PID:4188
- C:\Windows\System\XkSSsdh.exe
  C:\Windows\System\XkSSsdh.exe
  2⤵
  PID:4256
- C:\Windows\System\PPCwVel.exe
  C:\Windows\System\PPCwVel.exe
  2⤵
  PID:4328
- C:\Windows\System\eMZCXlG.exe
  C:\Windows\System\eMZCXlG.exe
  2⤵
  PID:4420
- C:\Windows\System\qdtIUBe.exe
  C:\Windows\System\qdtIUBe.exe
  2⤵
  PID:4436
- C:\Windows\System\DUIMJsj.exe
  C:\Windows\System\DUIMJsj.exe
  2⤵
  PID:4424
- C:\Windows\System\IFNJRHn.exe
  C:\Windows\System\IFNJRHn.exe
  2⤵
  PID:4492
- C:\Windows\System\nwODyBW.exe
  C:\Windows\System\nwODyBW.exe
  2⤵
  PID:4556
- C:\Windows\System\hHMsNjX.exe
  C:\Windows\System\hHMsNjX.exe
  2⤵
  PID:4624
- C:\Windows\System\pJQTSfi.exe
  C:\Windows\System\pJQTSfi.exe
  2⤵
  PID:4780
- C:\Windows\System\SHrnAIC.exe
  C:\Windows\System\SHrnAIC.exe
  2⤵
  PID:4684
- C:\Windows\System\TMXjrsH.exe
  C:\Windows\System\TMXjrsH.exe
  2⤵
  PID:4704
- C:\Windows\System\ouYDtVZ.exe
  C:\Windows\System\ouYDtVZ.exe
  2⤵
  PID:4832
- C:\Windows\System\wDPdXHd.exe
  C:\Windows\System\wDPdXHd.exe
  2⤵
  PID:4848
- C:\Windows\System\oCcsmBM.exe
  C:\Windows\System\oCcsmBM.exe
  2⤵
  PID:4896
- C:\Windows\System\ethKOUp.exe
  C:\Windows\System\ethKOUp.exe
  2⤵
  PID:4988
- C:\Windows\System\KfhVxnd.exe
  C:\Windows\System\KfhVxnd.exe
  2⤵
  PID:5004
- C:\Windows\System\kFhWUgs.exe
  C:\Windows\System\kFhWUgs.exe
  2⤵
  PID:5116
- C:\Windows\System\FLgHpGm.exe
  C:\Windows\System\FLgHpGm.exe
  2⤵
  PID:3712
- C:\Windows\System\BxhdljO.exe
  C:\Windows\System\BxhdljO.exe
  2⤵
  PID:4320
- C:\Windows\System\KkaWsLJ.exe
  C:\Windows\System\KkaWsLJ.exe
  2⤵
  PID:4228
- C:\Windows\System\BPpNDov.exe
  C:\Windows\System\BPpNDov.exe
  2⤵
  PID:4512
- C:\Windows\System\wrZdGHT.exe
  C:\Windows\System\wrZdGHT.exe
  2⤵
  PID:4588
- C:\Windows\System\pqhpDEL.exe
  C:\Windows\System\pqhpDEL.exe
  2⤵
  PID:4604
- C:\Windows\System\RLXuxTy.exe
  C:\Windows\System\RLXuxTy.exe
  2⤵
  PID:4592
- C:\Windows\System\OlLjAQE.exe
  C:\Windows\System\OlLjAQE.exe
  2⤵
  PID:4912
- C:\Windows\System\SNOCYLn.exe
  C:\Windows\System\SNOCYLn.exe
  2⤵
  PID:4160
- C:\Windows\System\ipzjMJD.exe
  C:\Windows\System\ipzjMJD.exe
  2⤵
  PID:5072
- C:\Windows\System\fbPWZdX.exe
  C:\Windows\System\fbPWZdX.exe
  2⤵
  PID:5124
- C:\Windows\System\uUSFphL.exe
  C:\Windows\System\uUSFphL.exe
  2⤵
  PID:5140
- C:\Windows\System\apmyIXs.exe
  C:\Windows\System\apmyIXs.exe
  2⤵
  PID:5156
- C:\Windows\System\RBJMpzC.exe
  C:\Windows\System\RBJMpzC.exe
  2⤵
  PID:5172
- C:\Windows\System\SpLCPHJ.exe
  C:\Windows\System\SpLCPHJ.exe
  2⤵
  PID:5212
- C:\Windows\System\qCxTNoT.exe
  C:\Windows\System\qCxTNoT.exe
  2⤵
  PID:5228
- C:\Windows\System\CYTsazw.exe
  C:\Windows\System\CYTsazw.exe
  2⤵
  PID:5248
- C:\Windows\System\UDrBXzp.exe
  C:\Windows\System\UDrBXzp.exe
  2⤵
  PID:5264
- C:\Windows\System\avgcoUa.exe
  C:\Windows\System\avgcoUa.exe
  2⤵
  PID:5280
- C:\Windows\System\JcYlOPs.exe
  C:\Windows\System\JcYlOPs.exe
  2⤵
  PID:5300
- C:\Windows\System\wMojudv.exe
  C:\Windows\System\wMojudv.exe
  2⤵
  PID:5316
- C:\Windows\System\IsciwYp.exe
  C:\Windows\System\IsciwYp.exe
  2⤵
  PID:5332
- C:\Windows\System\CSsgMDy.exe
  C:\Windows\System\CSsgMDy.exe
  2⤵
  PID:5356
- C:\Windows\System\DbzyTnI.exe
  C:\Windows\System\DbzyTnI.exe
  2⤵
  PID:5372
- C:\Windows\System\LCrafGG.exe
  C:\Windows\System\LCrafGG.exe
  2⤵
  PID:5400
- C:\Windows\System\QZRRcdy.exe
  C:\Windows\System\QZRRcdy.exe
  2⤵
  PID:5416
- C:\Windows\System\KglgWuC.exe
  C:\Windows\System\KglgWuC.exe
  2⤵
  PID:5432
- C:\Windows\System\JQFinrA.exe
  C:\Windows\System\JQFinrA.exe
  2⤵
  PID:5448
- C:\Windows\System\KFgiWVM.exe
  C:\Windows\System\KFgiWVM.exe
  2⤵
  PID:5464
- C:\Windows\System\LNSGmMc.exe
  C:\Windows\System\LNSGmMc.exe
  2⤵
  PID:5480
- C:\Windows\System\HLdYPoa.exe
  C:\Windows\System\HLdYPoa.exe
  2⤵
  PID:5496
- C:\Windows\System\lDTiOuK.exe
  C:\Windows\System\lDTiOuK.exe
  2⤵
  PID:5512
- C:\Windows\System\TNPmqsy.exe
  C:\Windows\System\TNPmqsy.exe
  2⤵
  PID:5528
- C:\Windows\System\zhocJSG.exe
  C:\Windows\System\zhocJSG.exe
  2⤵
  PID:5544
- C:\Windows\System\MdoTtQK.exe
  C:\Windows\System\MdoTtQK.exe
  2⤵
  PID:5560
- C:\Windows\System\BjiPmqA.exe
  C:\Windows\System\BjiPmqA.exe
  2⤵
  PID:5576
- C:\Windows\System\YURZCEq.exe
  C:\Windows\System\YURZCEq.exe
  2⤵
  PID:5592
- C:\Windows\System\xCcQfTG.exe
  C:\Windows\System\xCcQfTG.exe
  2⤵
  PID:5608
- C:\Windows\System\bXHkVLo.exe
  C:\Windows\System\bXHkVLo.exe
  2⤵
  PID:5624
- C:\Windows\System\bnbJVDY.exe
  C:\Windows\System\bnbJVDY.exe
  2⤵
  PID:5640
- C:\Windows\System\jUBjbdZ.exe
  C:\Windows\System\jUBjbdZ.exe
  2⤵
  PID:5684
- C:\Windows\System\fADUtFi.exe
  C:\Windows\System\fADUtFi.exe
  2⤵
  PID:5700
- C:\Windows\System\fiDOnKy.exe
  C:\Windows\System\fiDOnKy.exe
  2⤵
  PID:5716
- C:\Windows\System\QCIAaeF.exe
  C:\Windows\System\QCIAaeF.exe
  2⤵
  PID:5732
- C:\Windows\System\KSGqDdB.exe
  C:\Windows\System\KSGqDdB.exe
  2⤵
  PID:5748
- C:\Windows\System\ZhqOaKg.exe
  C:\Windows\System\ZhqOaKg.exe
  2⤵
  PID:5764
- C:\Windows\System\JypzPfK.exe
  C:\Windows\System\JypzPfK.exe
  2⤵
  PID:5780
- C:\Windows\System\PEwJDsy.exe
  C:\Windows\System\PEwJDsy.exe
  2⤵
  PID:5796
- C:\Windows\System\oxribjD.exe
  C:\Windows\System\oxribjD.exe
  2⤵
  PID:5812
- C:\Windows\System\TJUVsTN.exe
  C:\Windows\System\TJUVsTN.exe
  2⤵
  PID:5828
- C:\Windows\System\oKQHmng.exe
  C:\Windows\System\oKQHmng.exe
  2⤵
  PID:5844
- C:\Windows\System\qXGyGUX.exe
  C:\Windows\System\qXGyGUX.exe
  2⤵
  PID:5860
- C:\Windows\System\wMRxugy.exe
  C:\Windows\System\wMRxugy.exe
  2⤵
  PID:5876
- C:\Windows\System\eMhiCDz.exe
  C:\Windows\System\eMhiCDz.exe
  2⤵
  PID:5892
- C:\Windows\System\sqgEXSu.exe
  C:\Windows\System\sqgEXSu.exe
  2⤵
  PID:5908
- C:\Windows\System\yPWidwZ.exe
  C:\Windows\System\yPWidwZ.exe
  2⤵
  PID:5924
- C:\Windows\System\gVDBsle.exe
  C:\Windows\System\gVDBsle.exe
  2⤵
  PID:5940
- C:\Windows\System\SdrmmMq.exe
  C:\Windows\System\SdrmmMq.exe
  2⤵
  PID:5956
- C:\Windows\System\mHnDEBg.exe
  C:\Windows\System\mHnDEBg.exe
  2⤵
  PID:5972
- C:\Windows\System\zqKvEUc.exe
  C:\Windows\System\zqKvEUc.exe
  2⤵
  PID:5988
- C:\Windows\System\tyEhfGw.exe
  C:\Windows\System\tyEhfGw.exe
  2⤵
  PID:6004
- C:\Windows\System\cToCgzh.exe
  C:\Windows\System\cToCgzh.exe
  2⤵
  PID:6020
- C:\Windows\System\QAdROPu.exe
  C:\Windows\System\QAdROPu.exe
  2⤵
  PID:6044
- C:\Windows\System\ZfAmsIk.exe
  C:\Windows\System\ZfAmsIk.exe
  2⤵
  PID:6060
- C:\Windows\System\ruklJHp.exe
  C:\Windows\System\ruklJHp.exe
  2⤵
  PID:6076
- C:\Windows\System\XhtyPMH.exe
  C:\Windows\System\XhtyPMH.exe
  2⤵
  PID:6092
- C:\Windows\System\etuyUXA.exe
  C:\Windows\System\etuyUXA.exe
  2⤵
  PID:6108
- C:\Windows\System\BXfyWsY.exe
  C:\Windows\System\BXfyWsY.exe
  2⤵
  PID:6124
- C:\Windows\System\BxCuMmS.exe
  C:\Windows\System\BxCuMmS.exe
  2⤵
  PID:6140
- C:\Windows\System\KFIDhbS.exe
  C:\Windows\System\KFIDhbS.exe
  2⤵
  PID:4572
- C:\Windows\System\APCobRk.exe
  C:\Windows\System\APCobRk.exe
  2⤵
  PID:4860
- C:\Windows\System\mdRmEKm.exe
  C:\Windows\System\mdRmEKm.exe
  2⤵
  PID:4928
- C:\Windows\System\KWztuRN.exe
  C:\Windows\System\KWztuRN.exe
  2⤵
  PID:5136
- C:\Windows\System\vaddNVw.exe
  C:\Windows\System\vaddNVw.exe
  2⤵
  PID:4972
- C:\Windows\System\WLdPVfL.exe
  C:\Windows\System\WLdPVfL.exe
  2⤵
  PID:5188
- C:\Windows\System\cItRrMC.exe
  C:\Windows\System\cItRrMC.exe
  2⤵
  PID:5204
- C:\Windows\System\chzdwqd.exe
  C:\Windows\System\chzdwqd.exe
  2⤵
  PID:5244
- C:\Windows\System\YBNoWjM.exe
  C:\Windows\System\YBNoWjM.exe
  2⤵
  PID:5312
- C:\Windows\System\WJlwLcV.exe
  C:\Windows\System\WJlwLcV.exe
  2⤵
  PID:5352
- C:\Windows\System\FRhyPbp.exe
  C:\Windows\System\FRhyPbp.exe
  2⤵
  PID:5392
- C:\Windows\System\yiyMNaa.exe
  C:\Windows\System\yiyMNaa.exe
  2⤵
  PID:5456
- C:\Windows\System\GiNiaMx.exe
  C:\Windows\System\GiNiaMx.exe
  2⤵
  PID:5492
- C:\Windows\System\tOCJAsA.exe
  C:\Windows\System\tOCJAsA.exe
  2⤵
  PID:5256
- C:\Windows\System\YnAnsuL.exe
  C:\Windows\System\YnAnsuL.exe
  2⤵
  PID:5292
- C:\Windows\System\TfmGbzc.exe
  C:\Windows\System\TfmGbzc.exe
  2⤵
  PID:5620
- C:\Windows\System\wFRyhBm.exe
  C:\Windows\System\wFRyhBm.exe
  2⤵
  PID:5368
- C:\Windows\System\LsQjktO.exe
  C:\Windows\System\LsQjktO.exe
  2⤵
  PID:5668
- C:\Windows\System\QSNToWu.exe
  C:\Windows\System\QSNToWu.exe
  2⤵
  PID:5472
- C:\Windows\System\vPnHenH.exe
  C:\Windows\System\vPnHenH.exe
  2⤵
  PID:5476
- C:\Windows\System\ZxSlGmr.exe
  C:\Windows\System\ZxSlGmr.exe
  2⤵
  PID:5540
- C:\Windows\System\UtBcwfE.exe
  C:\Windows\System\UtBcwfE.exe
  2⤵
  PID:5712
- C:\Windows\System\OKkbHMM.exe
  C:\Windows\System\OKkbHMM.exe
  2⤵
  PID:5808
- C:\Windows\System\vSbxBII.exe
  C:\Windows\System\vSbxBII.exe
  2⤵
  PID:5696
- C:\Windows\System\eCdJQzq.exe
  C:\Windows\System\eCdJQzq.exe
  2⤵
  PID:5872
- C:\Windows\System\YwQOFcu.exe
  C:\Windows\System\YwQOFcu.exe
  2⤵
  PID:5936
- C:\Windows\System\gJLXxzN.exe
  C:\Windows\System\gJLXxzN.exe
  2⤵
  PID:5692
- C:\Windows\System\tVOFOmF.exe
  C:\Windows\System\tVOFOmF.exe
  2⤵
  PID:5996
- C:\Windows\System\aLfjhlL.exe
  C:\Windows\System\aLfjhlL.exe
  2⤵
  PID:5916
- C:\Windows\System\UIPqLTa.exe
  C:\Windows\System\UIPqLTa.exe
  2⤵
  PID:5984
- C:\Windows\System\tTHFFMD.exe
  C:\Windows\System\tTHFFMD.exe
  2⤵
  PID:6016
- C:\Windows\System\seDtYrv.exe
  C:\Windows\System\seDtYrv.exe
  2⤵
  PID:6068
- C:\Windows\System\lhtDBnQ.exe
  C:\Windows\System\lhtDBnQ.exe
  2⤵
  PID:6088
- C:\Windows\System\gariKwA.exe
  C:\Windows\System\gariKwA.exe
  2⤵
  PID:6116
- C:\Windows\System\wsIfmPq.exe
  C:\Windows\System\wsIfmPq.exe
  2⤵
  PID:4560
- C:\Windows\System\tXOlxTT.exe
  C:\Windows\System\tXOlxTT.exe
  2⤵
  PID:4452
- C:\Windows\System\yFZXadi.exe
  C:\Windows\System\yFZXadi.exe
  2⤵
  PID:5068
- C:\Windows\System\RhbIKFs.exe
  C:\Windows\System\RhbIKFs.exe
  2⤵
  PID:4464
- C:\Windows\System\UdfgaxJ.exe
  C:\Windows\System\UdfgaxJ.exe
  2⤵
  PID:5052
- C:\Windows\System\YPeXYTP.exe
  C:\Windows\System\YPeXYTP.exe
  2⤵
  PID:5424
- C:\Windows\System\LUmFmVT.exe
  C:\Windows\System\LUmFmVT.exe
  2⤵
  PID:5196
- C:\Windows\System\VXlGQGd.exe
  C:\Windows\System\VXlGQGd.exe
  2⤵
  PID:5164
- C:\Windows\System\pPutiJu.exe
  C:\Windows\System\pPutiJu.exe
  2⤵
  PID:5308
- C:\Windows\System\gsUfHAU.exe
  C:\Windows\System\gsUfHAU.exe
  2⤵
  PID:5288
- C:\Windows\System\ytRcMue.exe
  C:\Windows\System\ytRcMue.exe
  2⤵
  PID:5588
- C:\Windows\System\oeiiQlu.exe
  C:\Windows\System\oeiiQlu.exe
  2⤵
  PID:5664
- C:\Windows\System\gWkOgwV.exe
  C:\Windows\System\gWkOgwV.exe
  2⤵
  PID:5604
- C:\Windows\System\aPRIXjZ.exe
  C:\Windows\System\aPRIXjZ.exe
  2⤵
  PID:5632
- C:\Windows\System\ViwLIZE.exe
  C:\Windows\System\ViwLIZE.exe
  2⤵
  PID:5932
- C:\Windows\System\LbRavkk.exe
  C:\Windows\System\LbRavkk.exe
  2⤵
  PID:5744
- C:\Windows\System\QokqUWc.exe
  C:\Windows\System\QokqUWc.exe
  2⤵
  PID:5788
- C:\Windows\System\WpntlhE.exe
  C:\Windows\System\WpntlhE.exe
  2⤵
  PID:5652
- C:\Windows\System\msGOTOi.exe
  C:\Windows\System\msGOTOi.exe
  2⤵
  PID:5724
- C:\Windows\System\qzIICbF.exe
  C:\Windows\System\qzIICbF.exe
  2⤵
  PID:5328
- C:\Windows\System\NnCzfTm.exe
  C:\Windows\System\NnCzfTm.exe
  2⤵
  PID:5824
- C:\Windows\System\LEXVAIl.exe
  C:\Windows\System\LEXVAIl.exe
  2⤵
  PID:6000
- C:\Windows\System\SyzvVCb.exe
  C:\Windows\System\SyzvVCb.exe
  2⤵
  PID:4372
- C:\Windows\System\UKWMwpm.exe
  C:\Windows\System\UKWMwpm.exe
  2⤵
  PID:6136
- C:\Windows\System\ncpvfWd.exe
  C:\Windows\System\ncpvfWd.exe
  2⤵
  PID:4976
- C:\Windows\System\MfSGuzr.exe
  C:\Windows\System\MfSGuzr.exe
  2⤵
  PID:5132
- C:\Windows\System\XZPLdht.exe
  C:\Windows\System\XZPLdht.exe
  2⤵
  PID:5660
- C:\Windows\System\XBULIsL.exe
  C:\Windows\System\XBULIsL.exe
  2⤵
  PID:5412
- C:\Windows\System\gsuCqIe.exe
  C:\Windows\System\gsuCqIe.exe
  2⤵
  PID:5556
- C:\Windows\System\DjYOtyp.exe
  C:\Windows\System\DjYOtyp.exe
  2⤵
  PID:6104
- C:\Windows\System\uwnkgwT.exe
  C:\Windows\System\uwnkgwT.exe
  2⤵
  PID:5224
- C:\Windows\System\zceNzti.exe
  C:\Windows\System\zceNzti.exe
  2⤵
  PID:5820
- C:\Windows\System\cgBCLQQ.exe
  C:\Windows\System\cgBCLQQ.exe
  2⤵
  PID:5680
- C:\Windows\System\GQUSaKg.exe
  C:\Windows\System\GQUSaKg.exe
  2⤵
  PID:5904
- C:\Windows\System\pCZouaS.exe
  C:\Windows\System\pCZouaS.exe
  2⤵
  PID:5600
- C:\Windows\System\WKDcQDY.exe
  C:\Windows\System\WKDcQDY.exe
  2⤵
  PID:5384
- C:\Windows\System\jdkPCPT.exe
  C:\Windows\System\jdkPCPT.exe
  2⤵
  PID:6032
- C:\Windows\System\PjCXyGD.exe
  C:\Windows\System\PjCXyGD.exe
  2⤵
  PID:5460
- C:\Windows\System\cDRfxWo.exe
  C:\Windows\System\cDRfxWo.exe
  2⤵
  PID:4796
- C:\Windows\System\iyjpUcn.exe
  C:\Windows\System\iyjpUcn.exe
  2⤵
  PID:5364
- C:\Windows\System\KIDSeoV.exe
  C:\Windows\System\KIDSeoV.exe
  2⤵
  PID:6148
- C:\Windows\System\WWVBiYW.exe
  C:\Windows\System\WWVBiYW.exe
  2⤵
  PID:6164
- C:\Windows\System\lrCbEKS.exe
  C:\Windows\System\lrCbEKS.exe
  2⤵
  PID:6180
- C:\Windows\System\aYwSEGT.exe
  C:\Windows\System\aYwSEGT.exe
  2⤵
  PID:6196
- C:\Windows\System\qQZEnLB.exe
  C:\Windows\System\qQZEnLB.exe
  2⤵
  PID:6212
- C:\Windows\System\ktSSPCB.exe
  C:\Windows\System\ktSSPCB.exe
  2⤵
  PID:6228
- C:\Windows\System\vUnMfIV.exe
  C:\Windows\System\vUnMfIV.exe
  2⤵
  PID:6244
- C:\Windows\System\QnCwDWN.exe
  C:\Windows\System\QnCwDWN.exe
  2⤵
  PID:6260
- C:\Windows\System\bBCNBvG.exe
  C:\Windows\System\bBCNBvG.exe
  2⤵
  PID:6276
- C:\Windows\System\mNDDSHW.exe
  C:\Windows\System\mNDDSHW.exe
  2⤵
  PID:6292
- C:\Windows\System\IwahTxJ.exe
  C:\Windows\System\IwahTxJ.exe
  2⤵
  PID:6308
- C:\Windows\System\udcZuKv.exe
  C:\Windows\System\udcZuKv.exe
  2⤵
  PID:6324
- C:\Windows\System\WptuAXA.exe
  C:\Windows\System\WptuAXA.exe
  2⤵
  PID:6348
- C:\Windows\System\CmJPINe.exe
  C:\Windows\System\CmJPINe.exe
  2⤵
  PID:6364
- C:\Windows\System\SkFZXsl.exe
  C:\Windows\System\SkFZXsl.exe
  2⤵
  PID:6380
- C:\Windows\System\BzDtwQh.exe
  C:\Windows\System\BzDtwQh.exe
  2⤵
  PID:6396
- C:\Windows\System\VKxjdxw.exe
  C:\Windows\System\VKxjdxw.exe
  2⤵
  PID:6412
- C:\Windows\System\GiijAoC.exe
  C:\Windows\System\GiijAoC.exe
  2⤵
  PID:6428
- C:\Windows\System\DQMSpZQ.exe
  C:\Windows\System\DQMSpZQ.exe
  2⤵
  PID:6444
- C:\Windows\System\ndtdZuq.exe
  C:\Windows\System\ndtdZuq.exe
  2⤵
  PID:6460
- C:\Windows\System\QFMJGaJ.exe
  C:\Windows\System\QFMJGaJ.exe
  2⤵
  PID:6480
- C:\Windows\System\xLDVNDg.exe
  C:\Windows\System\xLDVNDg.exe
  2⤵
  PID:6496
- C:\Windows\System\lNDBmmM.exe
  C:\Windows\System\lNDBmmM.exe
  2⤵
  PID:6512
- C:\Windows\System\xRbuNMi.exe
  C:\Windows\System\xRbuNMi.exe
  2⤵
  PID:6532
- C:\Windows\System\qxXgXAt.exe
  C:\Windows\System\qxXgXAt.exe
  2⤵
  PID:6548
- C:\Windows\System\qEgtfXY.exe
  C:\Windows\System\qEgtfXY.exe
  2⤵
  PID:6564
- C:\Windows\System\oZHaObC.exe
  C:\Windows\System\oZHaObC.exe
  2⤵
  PID:6580
- C:\Windows\System\IghlxpL.exe
  C:\Windows\System\IghlxpL.exe
  2⤵
  PID:6596
- C:\Windows\System\EkOZgDY.exe
  C:\Windows\System\EkOZgDY.exe
  2⤵
  PID:6612
- C:\Windows\System\grYHUVV.exe
  C:\Windows\System\grYHUVV.exe
  2⤵
  PID:6628
- C:\Windows\System\wdXKzcc.exe
  C:\Windows\System\wdXKzcc.exe
  2⤵
  PID:6644
- C:\Windows\System\BlKMuvT.exe
  C:\Windows\System\BlKMuvT.exe
  2⤵
  PID:6660
- C:\Windows\System\sRKNgWs.exe
  C:\Windows\System\sRKNgWs.exe
  2⤵
  PID:6868
- C:\Windows\System\sUiuxzg.exe
  C:\Windows\System\sUiuxzg.exe
  2⤵
  PID:6904
- C:\Windows\System\uICXgGj.exe
  C:\Windows\System\uICXgGj.exe
  2⤵
  PID:6928
- C:\Windows\System\eWztCxt.exe
  C:\Windows\System\eWztCxt.exe
  2⤵
  PID:6960
- C:\Windows\System\GrTPtnG.exe
  C:\Windows\System\GrTPtnG.exe
  2⤵
  PID:6968
- C:\Windows\System\eYCTTCk.exe
  C:\Windows\System\eYCTTCk.exe
  2⤵
  PID:6984
- C:\Windows\System\MuwLjyD.exe
  C:\Windows\System\MuwLjyD.exe
  2⤵
  PID:7004
- C:\Windows\System\xIKKMMc.exe
  C:\Windows\System\xIKKMMc.exe
  2⤵
  PID:7020
- C:\Windows\System\PBAJLZU.exe
  C:\Windows\System\PBAJLZU.exe
  2⤵
  PID:7040
- C:\Windows\System\rSEwwMd.exe
  C:\Windows\System\rSEwwMd.exe
  2⤵
  PID:7072
- C:\Windows\System\bzHOJBS.exe
  C:\Windows\System\bzHOJBS.exe
  2⤵
  PID:7068
- C:\Windows\System\svcAUTe.exe
  C:\Windows\System\svcAUTe.exe
  2⤵
  PID:7104
- C:\Windows\System\jpTIzaG.exe
  C:\Windows\System\jpTIzaG.exe
  2⤵
  PID:7100
- C:\Windows\System\CmIycfe.exe
  C:\Windows\System\CmIycfe.exe
  2⤵
  PID:7156
- C:\Windows\System\CLfvzPw.exe
  C:\Windows\System\CLfvzPw.exe
  2⤵
  PID:5440
- C:\Windows\System\RhfpUKU.exe
  C:\Windows\System\RhfpUKU.exe
  2⤵
  PID:5552
- C:\Windows\System\qNkEOQT.exe
  C:\Windows\System\qNkEOQT.exe
  2⤵
  PID:6220
- C:\Windows\System\dsoIxaX.exe
  C:\Windows\System\dsoIxaX.exe
  2⤵
  PID:6252
- C:\Windows\System\VgsBvvH.exe
  C:\Windows\System\VgsBvvH.exe
  2⤵
  PID:5980
- C:\Windows\System\OQyIzeM.exe
  C:\Windows\System\OQyIzeM.exe
  2⤵
  PID:6316
- C:\Windows\System\biVPHKM.exe
  C:\Windows\System\biVPHKM.exe
  2⤵
  PID:6360
- C:\Windows\System\jzymuDh.exe
  C:\Windows\System\jzymuDh.exe
  2⤵
  PID:6376
- C:\Windows\System\CIgfVVj.exe
  C:\Windows\System\CIgfVVj.exe
  2⤵
  PID:6424
- C:\Windows\System\tOqslhN.exe
  C:\Windows\System\tOqslhN.exe
  2⤵
  PID:6372
- C:\Windows\System\rzTCCkj.exe
  C:\Windows\System\rzTCCkj.exe
  2⤵
  PID:6488
- C:\Windows\System\FriZgaH.exe
  C:\Windows\System\FriZgaH.exe
  2⤵
  PID:6528
- C:\Windows\System\pKoPagl.exe
  C:\Windows\System\pKoPagl.exe
  2⤵
  PID:6556
- C:\Windows\System\dUyNPDZ.exe
  C:\Windows\System\dUyNPDZ.exe
  2⤵
  PID:6620
- C:\Windows\System\QjPcylL.exe
  C:\Windows\System\QjPcylL.exe
  2⤵
  PID:6604
- C:\Windows\System\wcUWhcG.exe
  C:\Windows\System\wcUWhcG.exe
  2⤵
  PID:6572
- C:\Windows\System\XGCrVsr.exe
  C:\Windows\System\XGCrVsr.exe
  2⤵
  PID:6680
- C:\Windows\System\hVPHPjk.exe
  C:\Windows\System\hVPHPjk.exe
  2⤵
  PID:6700
- C:\Windows\System\kFBajyo.exe
  C:\Windows\System\kFBajyo.exe
  2⤵
  PID:6716
- C:\Windows\System\yTKdcRx.exe
  C:\Windows\System\yTKdcRx.exe
  2⤵
  PID:6732
- C:\Windows\System\KgVgtcb.exe
  C:\Windows\System\KgVgtcb.exe
  2⤵
  PID:6756
- C:\Windows\System\hwHjzsi.exe
  C:\Windows\System\hwHjzsi.exe
  2⤵
  PID:6772
- C:\Windows\System\MtDrgPp.exe
  C:\Windows\System\MtDrgPp.exe
  2⤵
  PID:6792
- C:\Windows\System\rmVlPLn.exe
  C:\Windows\System\rmVlPLn.exe
  2⤵
  PID:6808
- C:\Windows\System\RotMUeU.exe
  C:\Windows\System\RotMUeU.exe
  2⤵
  PID:6844
- C:\Windows\System\MHTYrSv.exe
  C:\Windows\System\MHTYrSv.exe
  2⤵
  PID:6672
- C:\Windows\System\YXxvKBW.exe
  C:\Windows\System\YXxvKBW.exe
  2⤵
  PID:6900
- C:\Windows\System\lAcEQxE.exe
  C:\Windows\System\lAcEQxE.exe
  2⤵
  PID:6916
- C:\Windows\System\ISkhZII.exe
  C:\Windows\System\ISkhZII.exe
  2⤵
  PID:6952
- C:\Windows\System\zIZZLCS.exe
  C:\Windows\System\zIZZLCS.exe
  2⤵
  PID:7052
- C:\Windows\System\aldbLqR.exe
  C:\Windows\System\aldbLqR.exe
  2⤵
  PID:7000
- C:\Windows\System\zpSWaWL.exe
  C:\Windows\System\zpSWaWL.exe
  2⤵
  PID:7136
- C:\Windows\System\UXFcAVE.exe
  C:\Windows\System\UXFcAVE.exe
  2⤵
  PID:6160
- C:\Windows\System\lvifcjP.exe
  C:\Windows\System\lvifcjP.exe
  2⤵
  PID:6176
- C:\Windows\System\nSakXMc.exe
  C:\Windows\System\nSakXMc.exe
  2⤵
  PID:7060
- C:\Windows\System\bYCmohe.exe
  C:\Windows\System\bYCmohe.exe
  2⤵
  PID:6964
- C:\Windows\System\ZJQWMaD.exe
  C:\Windows\System\ZJQWMaD.exe
  2⤵
  PID:4324
- C:\Windows\System\KKGYufG.exe
  C:\Windows\System\KKGYufG.exe
  2⤵
  PID:6300
- C:\Windows\System\DbqbZWW.exe
  C:\Windows\System\DbqbZWW.exe
  2⤵
  PID:6284
- C:\Windows\System\wfFGGNP.exe
  C:\Windows\System\wfFGGNP.exe
  2⤵
  PID:6332
- C:\Windows\System\kOJtPUb.exe
  C:\Windows\System\kOJtPUb.exe
  2⤵
  PID:6524
- C:\Windows\System\xeUgZrL.exe
  C:\Windows\System\xeUgZrL.exe
  2⤵
  PID:6476
- C:\Windows\System\aJRqjyw.exe
  C:\Windows\System\aJRqjyw.exe
  2⤵
  PID:6696
- C:\Windows\System\HBizjPE.exe
  C:\Windows\System\HBizjPE.exe
  2⤵
  PID:6800
- C:\Windows\System\qgnxCWD.exe
  C:\Windows\System\qgnxCWD.exe
  2⤵
  PID:6472
- C:\Windows\System\lCOGsaq.exe
  C:\Windows\System\lCOGsaq.exe
  2⤵
  PID:6392
- C:\Windows\System\UAKUnwR.exe
  C:\Windows\System\UAKUnwR.exe
  2⤵
  PID:6540
- C:\Windows\System\ayWIspM.exe
  C:\Windows\System\ayWIspM.exe
  2⤵
  PID:6816
- C:\Windows\System\sGMlfeQ.exe
  C:\Windows\System\sGMlfeQ.exe
  2⤵
  PID:6852
- C:\Windows\System\cvcvqUX.exe
  C:\Windows\System\cvcvqUX.exe
  2⤵
  PID:6912
- C:\Windows\System\hqUJtIe.exe
  C:\Windows\System\hqUJtIe.exe
  2⤵
  PID:7016
- C:\Windows\System\AFYvEqO.exe
  C:\Windows\System\AFYvEqO.exe
  2⤵
  PID:6780
- C:\Windows\System\XrUODAA.exe
  C:\Windows\System\XrUODAA.exe
  2⤵
  PID:6132
- C:\Windows\System\loSsPid.exe
  C:\Windows\System\loSsPid.exe
  2⤵
  PID:6268
- C:\Windows\System\QFbrmtF.exe
  C:\Windows\System\QFbrmtF.exe
  2⤵
  PID:7108
- C:\Windows\System\HpLHnvN.exe
  C:\Windows\System\HpLHnvN.exe
  2⤵
  PID:6208
- C:\Windows\System\DCtsBCA.exe
  C:\Windows\System\DCtsBCA.exe
  2⤵
  PID:6640
- C:\Windows\System\rrkpLsC.exe
  C:\Windows\System\rrkpLsC.exe
  2⤵
  PID:6948
- C:\Windows\System\RxSRBec.exe
  C:\Windows\System\RxSRBec.exe
  2⤵
  PID:6876
- C:\Windows\System\sXFANOY.exe
  C:\Windows\System\sXFANOY.exe
  2⤵
  PID:6452
- C:\Windows\System\qNvSmOL.exe
  C:\Windows\System\qNvSmOL.exe
  2⤵
  PID:6456
- C:\Windows\System\XJvwZrD.exe
  C:\Windows\System\XJvwZrD.exe
  2⤵
  PID:7076
- C:\Windows\System\lbQQFJB.exe
  C:\Windows\System\lbQQFJB.exe
  2⤵
  PID:6760
- C:\Windows\System\LHcfAPF.exe
  C:\Windows\System\LHcfAPF.exe
  2⤵
  PID:6676
- C:\Windows\System\HRHROcw.exe
  C:\Windows\System\HRHROcw.exe
  2⤵
  PID:6576
- C:\Windows\System\FxdcNHp.exe
  C:\Windows\System\FxdcNHp.exe
  2⤵
  PID:6740
- C:\Windows\System\glydVIp.exe
  C:\Windows\System\glydVIp.exe
  2⤵
  PID:6304
- C:\Windows\System\mDyxCFu.exe
  C:\Windows\System\mDyxCFu.exe
  2⤵
  PID:7180
- C:\Windows\System\IuPSgfh.exe
  C:\Windows\System\IuPSgfh.exe
  2⤵
  PID:7200
- C:\Windows\System\fulFiJN.exe
  C:\Windows\System\fulFiJN.exe
  2⤵
  PID:7220
- C:\Windows\System\OZNKXco.exe
  C:\Windows\System\OZNKXco.exe
  2⤵
  PID:7240
- C:\Windows\System\prmXHtl.exe
  C:\Windows\System\prmXHtl.exe
  2⤵
  PID:7272
- C:\Windows\System\RyMUYRF.exe
  C:\Windows\System\RyMUYRF.exe
  2⤵
  PID:7296
- C:\Windows\System\HVYJkbo.exe
  C:\Windows\System\HVYJkbo.exe
  2⤵
  PID:7336
- C:\Windows\System\TQAtYMn.exe
  C:\Windows\System\TQAtYMn.exe
  2⤵
  PID:7352
- C:\Windows\System\EHEKfZQ.exe
  C:\Windows\System\EHEKfZQ.exe
  2⤵
  PID:7372
- C:\Windows\System\zFNuOQc.exe
  C:\Windows\System\zFNuOQc.exe
  2⤵
  PID:7392
- C:\Windows\System\oNFjRpv.exe
  C:\Windows\System\oNFjRpv.exe
  2⤵
  PID:7416
- C:\Windows\System\iuIScuC.exe
  C:\Windows\System\iuIScuC.exe
  2⤵
  PID:7436
- C:\Windows\System\XRthzWJ.exe
  C:\Windows\System\XRthzWJ.exe
  2⤵
  PID:7452
- C:\Windows\System\tKoJvtA.exe
  C:\Windows\System\tKoJvtA.exe
  2⤵
  PID:7472
- C:\Windows\System\gAXEIKg.exe
  C:\Windows\System\gAXEIKg.exe
  2⤵
  PID:7492
- C:\Windows\System\TWYylJd.exe
  C:\Windows\System\TWYylJd.exe
  2⤵
  PID:7508
- C:\Windows\System\GxKcQyv.exe
  C:\Windows\System\GxKcQyv.exe
  2⤵
  PID:7528
- C:\Windows\System\ZsndCEt.exe
  C:\Windows\System\ZsndCEt.exe
  2⤵
  PID:7552
- C:\Windows\System\NcGMqzG.exe
  C:\Windows\System\NcGMqzG.exe
  2⤵
  PID:7568
- C:\Windows\System\eblcfPU.exe
  C:\Windows\System\eblcfPU.exe
  2⤵
  PID:7584
- C:\Windows\System\jiDxTUC.exe
  C:\Windows\System\jiDxTUC.exe
  2⤵
  PID:7604
- C:\Windows\System\sgcXCIZ.exe
  C:\Windows\System\sgcXCIZ.exe
  2⤵
  PID:7624
- C:\Windows\System\nNJOBWH.exe
  C:\Windows\System\nNJOBWH.exe
  2⤵
  PID:7644
- C:\Windows\System\ixHgCUT.exe
  C:\Windows\System\ixHgCUT.exe
  2⤵
  PID:7660
- C:\Windows\System\goGYTnh.exe
  C:\Windows\System\goGYTnh.exe
  2⤵
  PID:7680
- C:\Windows\System\islVZpP.exe
  C:\Windows\System\islVZpP.exe
  2⤵
  PID:7700
- C:\Windows\System\ZChNpDG.exe
  C:\Windows\System\ZChNpDG.exe
  2⤵
  PID:7716
- C:\Windows\System\NfzqIHq.exe
  C:\Windows\System\NfzqIHq.exe
  2⤵
  PID:7784
- C:\Windows\System\dPJVElO.exe
  C:\Windows\System\dPJVElO.exe
  2⤵
  PID:7800
- C:\Windows\System\LHuZyqV.exe
  C:\Windows\System\LHuZyqV.exe
  2⤵
  PID:7816
- C:\Windows\System\JDuYqBH.exe
  C:\Windows\System\JDuYqBH.exe
  2⤵
  PID:7836
- C:\Windows\System\bpdhCMh.exe
  C:\Windows\System\bpdhCMh.exe
  2⤵
  PID:7852
- C:\Windows\System\LHLkeJw.exe
  C:\Windows\System\LHLkeJw.exe
  2⤵
  PID:7880
- C:\Windows\System\FEXJjsu.exe
  C:\Windows\System\FEXJjsu.exe
  2⤵
  PID:7896
- C:\Windows\System\gKZXnkn.exe
  C:\Windows\System\gKZXnkn.exe
  2⤵
  PID:7912
- C:\Windows\System\lXIMxVS.exe
  C:\Windows\System\lXIMxVS.exe
  2⤵
  PID:7928
- C:\Windows\System\oWDGbfd.exe
  C:\Windows\System\oWDGbfd.exe
  2⤵
  PID:7944
- C:\Windows\System\fwxjzWV.exe
  C:\Windows\System\fwxjzWV.exe
  2⤵
  PID:7964
- C:\Windows\System\ozpQTBr.exe
  C:\Windows\System\ozpQTBr.exe
  2⤵
  PID:7980
- C:\Windows\System\vwyMXOs.exe
  C:\Windows\System\vwyMXOs.exe
  2⤵
  PID:7996
- C:\Windows\System\kodDFZy.exe
  C:\Windows\System\kodDFZy.exe
  2⤵
  PID:8016
- C:\Windows\System\DLOgWmE.exe
  C:\Windows\System\DLOgWmE.exe
  2⤵
  PID:8032
- C:\Windows\System\TDWsKsi.exe
  C:\Windows\System\TDWsKsi.exe
  2⤵
  PID:8084
- C:\Windows\System\vOPKAtK.exe
  C:\Windows\System\vOPKAtK.exe
  2⤵
  PID:8104
- C:\Windows\System\eRitcus.exe
  C:\Windows\System\eRitcus.exe
  2⤵
  PID:8120
- C:\Windows\System\NdmDcjL.exe
  C:\Windows\System\NdmDcjL.exe
  2⤵
  PID:8144
- C:\Windows\System\HQOdAUm.exe
  C:\Windows\System\HQOdAUm.exe
  2⤵
  PID:8164
- C:\Windows\System\rmNRjAF.exe
  C:\Windows\System\rmNRjAF.exe
  2⤵
  PID:8180
- C:\Windows\System\AUkSlgD.exe
  C:\Windows\System\AUkSlgD.exe
  2⤵
  PID:6848
- C:\Windows\System\vIaqOWC.exe
  C:\Windows\System\vIaqOWC.exe
  2⤵
  PID:7132
- C:\Windows\System\yykjcYO.exe
  C:\Windows\System\yykjcYO.exe
  2⤵
  PID:6668
- C:\Windows\System\OEMtKWk.exe
  C:\Windows\System\OEMtKWk.exe
  2⤵
  PID:7172
- C:\Windows\System\ShWyfVO.exe
  C:\Windows\System\ShWyfVO.exe
  2⤵
  PID:7216
- C:\Windows\System\lnSMjBR.exe
  C:\Windows\System\lnSMjBR.exe
  2⤵
  PID:6788
- C:\Windows\System\xDTqfjY.exe
  C:\Windows\System\xDTqfjY.exe
  2⤵
  PID:7192
- C:\Windows\System\gvfZHXh.exe
  C:\Windows\System\gvfZHXh.exe
  2⤵
  PID:7268
- C:\Windows\System\RmvXPMe.exe
  C:\Windows\System\RmvXPMe.exe
  2⤵
  PID:6828
- C:\Windows\System\nGxXHHg.exe
  C:\Windows\System\nGxXHHg.exe
  2⤵
  PID:6884
- C:\Windows\System\QvEdSIO.exe
  C:\Windows\System\QvEdSIO.exe
  2⤵
  PID:6388
- C:\Windows\System\KfCikGL.exe
  C:\Windows\System\KfCikGL.exe
  2⤵
  PID:7232
- C:\Windows\System\ePmgYMP.exe
  C:\Windows\System\ePmgYMP.exe
  2⤵
  PID:7400
- C:\Windows\System\jPZtEza.exe
  C:\Windows\System\jPZtEza.exe
  2⤵
  PID:7444
- C:\Windows\System\NCLpUPw.exe
  C:\Windows\System\NCLpUPw.exe
  2⤵
  PID:7484
- C:\Windows\System\KMLajVc.exe
  C:\Windows\System\KMLajVc.exe
  2⤵
  PID:7560
- C:\Windows\System\ufqAgWc.exe
  C:\Windows\System\ufqAgWc.exe
  2⤵
  PID:7600
- C:\Windows\System\pjFUpgh.exe
  C:\Windows\System\pjFUpgh.exe
  2⤵
  PID:7640
- C:\Windows\System\VsYrJtK.exe
  C:\Windows\System\VsYrJtK.exe
  2⤵
  PID:7284
- C:\Windows\System\RRGQTln.exe
  C:\Windows\System\RRGQTln.exe
  2⤵
  PID:7348
- C:\Windows\System\olUMEIf.exe
  C:\Windows\System\olUMEIf.exe
  2⤵
  PID:7428
- C:\Windows\System\oFSfsbO.exe
  C:\Windows\System\oFSfsbO.exe
  2⤵
  PID:7468
- C:\Windows\System\ElNUZpJ.exe
  C:\Windows\System\ElNUZpJ.exe
  2⤵
  PID:7548
- C:\Windows\System\OUwBuiz.exe
  C:\Windows\System\OUwBuiz.exe
  2⤵
  PID:7728
- C:\Windows\System\iAfJTjz.exe
  C:\Windows\System\iAfJTjz.exe
  2⤵
  PID:7732
- C:\Windows\System\iyZaOQD.exe
  C:\Windows\System\iyZaOQD.exe
  2⤵
  PID:7740
- C:\Windows\System\maSgTXV.exe
  C:\Windows\System\maSgTXV.exe
  2⤵
  PID:7752
- C:\Windows\System\TOBzEmo.exe
  C:\Windows\System\TOBzEmo.exe
  2⤵
  PID:7652
- C:\Windows\System\XZkUFqF.exe
  C:\Windows\System\XZkUFqF.exe
  2⤵
  PID:7832
- C:\Windows\System\vvquLmQ.exe
  C:\Windows\System\vvquLmQ.exe
  2⤵
  PID:7872
- C:\Windows\System\nFHLWLS.exe
  C:\Windows\System\nFHLWLS.exe
  2⤵
  PID:7940
- C:\Windows\System\gNzOudW.exe
  C:\Windows\System\gNzOudW.exe
  2⤵
  PID:8004
- C:\Windows\System\RYccWZH.exe
  C:\Windows\System\RYccWZH.exe
  2⤵
  PID:8056
- C:\Windows\System\xXsXHxE.exe
  C:\Windows\System\xXsXHxE.exe
  2⤵
  PID:2804
- C:\Windows\System\nwPddkr.exe
  C:\Windows\System\nwPddkr.exe
  2⤵
  PID:2816
- C:\Windows\System\fTMTvCF.exe
  C:\Windows\System\fTMTvCF.exe
  2⤵
  PID:7920
- C:\Windows\System\oRrUKuV.exe
  C:\Windows\System\oRrUKuV.exe
  2⤵
  PID:8112
- C:\Windows\System\RikTFQo.exe
  C:\Windows\System\RikTFQo.exe
  2⤵
  PID:8096
- C:\Windows\System\jvUdARG.exe
  C:\Windows\System\jvUdARG.exe
  2⤵
  PID:8188
- C:\Windows\System\aNcmGkg.exe
  C:\Windows\System\aNcmGkg.exe
  2⤵
  PID:6768
- C:\Windows\System\mJIClgM.exe
  C:\Windows\System\mJIClgM.exe
  2⤵
  PID:6996
- C:\Windows\System\aEBqqff.exe
  C:\Windows\System\aEBqqff.exe
  2⤵
  PID:8136
- C:\Windows\System\ZfgKCMv.exe
  C:\Windows\System\ZfgKCMv.exe
  2⤵
  PID:7312
- C:\Windows\System\gJdTOoN.exe
  C:\Windows\System\gJdTOoN.exe
  2⤵
  PID:6860
- C:\Windows\System\EhbYRBN.exe
  C:\Windows\System\EhbYRBN.exe
  2⤵
  PID:6636
- C:\Windows\System\lxHcChQ.exe
  C:\Windows\System\lxHcChQ.exe
  2⤵
  PID:7364
- C:\Windows\System\IxPqKfu.exe
  C:\Windows\System\IxPqKfu.exe
  2⤵
  PID:7256
- C:\Windows\System\BYUTQeW.exe
  C:\Windows\System\BYUTQeW.exe
  2⤵
  PID:7404
- C:\Windows\System\bAdsxYx.exe
  C:\Windows\System\bAdsxYx.exe
  2⤵
  PID:7148
- C:\Windows\System\XDEpeHG.exe
  C:\Windows\System\XDEpeHG.exe
  2⤵
  PID:7480
- C:\Windows\System\ftPHIzd.exe
  C:\Windows\System\ftPHIzd.exe
  2⤵
  PID:7516
- C:\Windows\System\oULGiAg.exe
  C:\Windows\System\oULGiAg.exe
  2⤵
  PID:7460
- C:\Windows\System\OcOzvfV.exe
  C:\Windows\System\OcOzvfV.exe
  2⤵
  PID:7712
- C:\Windows\System\KDYvEaJ.exe
  C:\Windows\System\KDYvEaJ.exe
  2⤵
  PID:7616
- C:\Windows\System\vyfibzh.exe
  C:\Windows\System\vyfibzh.exe
  2⤵
  PID:7744
- C:\Windows\System\XaJGbSk.exe
  C:\Windows\System\XaJGbSk.exe
  2⤵
  PID:7796
- C:\Windows\System\cfkJZTL.exe
  C:\Windows\System\cfkJZTL.exe
  2⤵
  PID:7828
- C:\Windows\System\tYzrqza.exe
  C:\Windows\System\tYzrqza.exe
  2⤵
  PID:7908
- C:\Windows\System\HvghMjv.exe
  C:\Windows\System\HvghMjv.exe
  2⤵
  PID:7612
- C:\Windows\System\OdgZvsI.exe
  C:\Windows\System\OdgZvsI.exe
  2⤵
  PID:8012
- C:\Windows\System\fuEaUYc.exe
  C:\Windows\System\fuEaUYc.exe
  2⤵
  PID:8052
- C:\Windows\System\JgprSPU.exe
  C:\Windows\System\JgprSPU.exe
  2⤵
  PID:7844
- C:\Windows\System\txtlnvf.exe
  C:\Windows\System\txtlnvf.exe
  2⤵
  PID:7992
- C:\Windows\System\LdxxTpw.exe
  C:\Windows\System\LdxxTpw.exe
  2⤵
  PID:8092
- C:\Windows\System\HYnQLFX.exe
  C:\Windows\System\HYnQLFX.exe
  2⤵
  PID:7208
- C:\Windows\System\UseVtyN.exe
  C:\Windows\System\UseVtyN.exe
  2⤵
  PID:7304
- C:\Windows\System\liwvITr.exe
  C:\Windows\System\liwvITr.exe
  2⤵
  PID:6340
- C:\Windows\System\nMZBTGA.exe
  C:\Windows\System\nMZBTGA.exe
  2⤵
  PID:7164
- C:\Windows\System\GcHyCUH.exe
  C:\Windows\System\GcHyCUH.exe
  2⤵
  PID:7032
- C:\Windows\System\uyQZYTg.exe
  C:\Windows\System\uyQZYTg.exe
  2⤵
  PID:7360
- C:\Windows\System\esKgmRM.exe
  C:\Windows\System\esKgmRM.exe
  2⤵
  PID:7292
- C:\Windows\System\YNjlBWT.exe
  C:\Windows\System\YNjlBWT.exe
  2⤵
  PID:7708
- C:\Windows\System\ZOBgDVz.exe
  C:\Windows\System\ZOBgDVz.exe
  2⤵
  PID:7540
- C:\Windows\System\GqynrJX.exe
  C:\Windows\System\GqynrJX.exe
  2⤵
  PID:7824
- C:\Windows\System\nIopDHt.exe
  C:\Windows\System\nIopDHt.exe
  2⤵
  PID:7976
- C:\Windows\System\bYQCFen.exe
  C:\Windows\System\bYQCFen.exe
  2⤵
  PID:8044
- C:\Windows\System\fGjBorT.exe
  C:\Windows\System\fGjBorT.exe
  2⤵
  PID:7892
- C:\Windows\System\znifPan.exe
  C:\Windows\System\znifPan.exe
  2⤵
  PID:8028
- C:\Windows\System\QJmdEJW.exe
  C:\Windows\System\QJmdEJW.exe
  2⤵
  PID:6920
- C:\Windows\System\HCnvNDL.exe
  C:\Windows\System\HCnvNDL.exe
  2⤵
  PID:8176
- C:\Windows\System\ubtwQDE.exe
  C:\Windows\System\ubtwQDE.exe
  2⤵
  PID:7596
- C:\Windows\System\zIelyyZ.exe
  C:\Windows\System\zIelyyZ.exe
  2⤵
  PID:7504
- C:\Windows\System\NgRcjjJ.exe
  C:\Windows\System\NgRcjjJ.exe
  2⤵
  PID:7424
- C:\Windows\System\jLrDeFI.exe
  C:\Windows\System\jLrDeFI.exe
  2⤵
  PID:6864
- C:\Windows\System\hfNwQoA.exe
  C:\Windows\System\hfNwQoA.exe
  2⤵
  PID:7264
- C:\Windows\System\CYIYCtB.exe
  C:\Windows\System\CYIYCtB.exe
  2⤵
  PID:7952
- C:\Windows\System\lDguYyl.exe
  C:\Windows\System\lDguYyl.exe
  2⤵
  PID:7956
- C:\Windows\System\CoTRPBU.exe
  C:\Windows\System\CoTRPBU.exe
  2⤵
  PID:7812
- C:\Windows\System\kePvGZS.exe
  C:\Windows\System\kePvGZS.exe
  2⤵
  PID:7320
- C:\Windows\System\DvIhROM.exe
  C:\Windows\System\DvIhROM.exe
  2⤵
  PID:7384
- C:\Windows\System\xKRyUbY.exe
  C:\Windows\System\xKRyUbY.exe
  2⤵
  PID:8200
- C:\Windows\System\cXOdGZY.exe
  C:\Windows\System\cXOdGZY.exe
  2⤵
  PID:8216
- C:\Windows\System\BMiryep.exe
  C:\Windows\System\BMiryep.exe
  2⤵
  PID:8232
- C:\Windows\System\RJNFEeb.exe
  C:\Windows\System\RJNFEeb.exe
  2⤵
  PID:8248
- C:\Windows\System\xzBLmEH.exe
  C:\Windows\System\xzBLmEH.exe
  2⤵
  PID:8264
- C:\Windows\System\zkQynDf.exe
  C:\Windows\System\zkQynDf.exe
  2⤵
  PID:8320
- C:\Windows\System\YEmiJoy.exe
  C:\Windows\System\YEmiJoy.exe
  2⤵
  PID:8348
- C:\Windows\System\TtnJIrD.exe
  C:\Windows\System\TtnJIrD.exe
  2⤵
  PID:8364
- C:\Windows\System\aqnDzyc.exe
  C:\Windows\System\aqnDzyc.exe
  2⤵
  PID:8380
- C:\Windows\System\oYTURLV.exe
  C:\Windows\System\oYTURLV.exe
  2⤵
  PID:8396
- C:\Windows\System\IEiIViN.exe
  C:\Windows\System\IEiIViN.exe
  2⤵
  PID:8412
- C:\Windows\System\XBsiTkX.exe
  C:\Windows\System\XBsiTkX.exe
  2⤵
  PID:8428
- C:\Windows\System\eHcfJmP.exe
  C:\Windows\System\eHcfJmP.exe
  2⤵
  PID:8444
- C:\Windows\System\XEvwVFi.exe
  C:\Windows\System\XEvwVFi.exe
  2⤵
  PID:8460
- C:\Windows\System\EQberEC.exe
  C:\Windows\System\EQberEC.exe
  2⤵
  PID:8480
- C:\Windows\System\bQUeKmf.exe
  C:\Windows\System\bQUeKmf.exe
  2⤵
  PID:8504
- C:\Windows\System\qQJnaAM.exe
  C:\Windows\System\qQJnaAM.exe
  2⤵
  PID:8552
- C:\Windows\System\HhEemcG.exe
  C:\Windows\System\HhEemcG.exe
  2⤵
  PID:8568
- C:\Windows\System\uGQznmN.exe
  C:\Windows\System\uGQznmN.exe
  2⤵
  PID:8584
- C:\Windows\System\DXRqMjD.exe
  C:\Windows\System\DXRqMjD.exe
  2⤵
  PID:8600
- C:\Windows\System\AAQObjT.exe
  C:\Windows\System\AAQObjT.exe
  2⤵
  PID:8632
- C:\Windows\System\QlssVBU.exe
  C:\Windows\System\QlssVBU.exe
  2⤵
  PID:8648
- C:\Windows\System\jJnqyLQ.exe
  C:\Windows\System\jJnqyLQ.exe
  2⤵
  PID:8664
- C:\Windows\System\iBsZJTu.exe
  C:\Windows\System\iBsZJTu.exe
  2⤵
  PID:8680
- C:\Windows\System\sHrCwfc.exe
  C:\Windows\System\sHrCwfc.exe
  2⤵
  PID:8696
- C:\Windows\System\CynPKFl.exe
  C:\Windows\System\CynPKFl.exe
  2⤵
  PID:8712
- C:\Windows\System\KJlUDQd.exe
  C:\Windows\System\KJlUDQd.exe
  2⤵
  PID:8728
- C:\Windows\System\EshOKGw.exe
  C:\Windows\System\EshOKGw.exe
  2⤵
  PID:8748
- C:\Windows\System\SSmvUna.exe
  C:\Windows\System\SSmvUna.exe
  2⤵
  PID:8768
- C:\Windows\System\nbncaXF.exe
  C:\Windows\System\nbncaXF.exe
  2⤵
  PID:8784
- C:\Windows\System\YkAaqED.exe
  C:\Windows\System\YkAaqED.exe
  2⤵
  PID:8800
- C:\Windows\System\tljDZFE.exe
  C:\Windows\System\tljDZFE.exe
  2⤵
  PID:8816
- C:\Windows\System\NqdvVUd.exe
  C:\Windows\System\NqdvVUd.exe
  2⤵
  PID:8876
- C:\Windows\System\JherPfu.exe
  C:\Windows\System\JherPfu.exe
  2⤵
  PID:8892
- C:\Windows\System\hyJzzoB.exe
  C:\Windows\System\hyJzzoB.exe
  2⤵
  PID:8908
- C:\Windows\System\kNAImaE.exe
  C:\Windows\System\kNAImaE.exe
  2⤵
  PID:8928
- C:\Windows\System\fbFjsVb.exe
  C:\Windows\System\fbFjsVb.exe
  2⤵
  PID:8952
- C:\Windows\System\Vrrlsjs.exe
  C:\Windows\System\Vrrlsjs.exe
  2⤵
  PID:8972
- C:\Windows\System\pMQXUNt.exe
  C:\Windows\System\pMQXUNt.exe
  2⤵
  PID:8992
- C:\Windows\System\qAMJjGg.exe
  C:\Windows\System\qAMJjGg.exe
  2⤵
  PID:9012
- C:\Windows\System\FybaYvM.exe
  C:\Windows\System\FybaYvM.exe
  2⤵
  PID:9028
- C:\Windows\System\oVPkSiA.exe
  C:\Windows\System\oVPkSiA.exe
  2⤵
  PID:9056
- C:\Windows\System\UevaVAp.exe
  C:\Windows\System\UevaVAp.exe
  2⤵
  PID:9072
- C:\Windows\System\ItLRusx.exe
  C:\Windows\System\ItLRusx.exe
  2⤵
  PID:9088
- C:\Windows\System\jSedBnX.exe
  C:\Windows\System\jSedBnX.exe
  2⤵
  PID:9104
- C:\Windows\System\mKmpCGV.exe
  C:\Windows\System\mKmpCGV.exe
  2⤵
  PID:9120
- C:\Windows\System\ZjRrhgC.exe
  C:\Windows\System\ZjRrhgC.exe
  2⤵
  PID:9140
- C:\Windows\System\mOasfBJ.exe
  C:\Windows\System\mOasfBJ.exe
  2⤵
  PID:9156
- C:\Windows\System\zwbCnLE.exe
  C:\Windows\System\zwbCnLE.exe
  2⤵
  PID:9172
- C:\Windows\System\rOLNQSK.exe
  C:\Windows\System\rOLNQSK.exe
  2⤵
  PID:9188
- C:\Windows\System\tYXqfKj.exe
  C:\Windows\System\tYXqfKj.exe
  2⤵
  PID:9212
- C:\Windows\System\TIdAbET.exe
  C:\Windows\System\TIdAbET.exe
  2⤵
  PID:6688
- C:\Windows\System\rAuKTHH.exe
  C:\Windows\System\rAuKTHH.exe
  2⤵
  PID:7736
- C:\Windows\System\dXZRWeH.exe
  C:\Windows\System\dXZRWeH.exe
  2⤵
  PID:7188
- C:\Windows\System\ZxqXavj.exe
  C:\Windows\System\ZxqXavj.exe
  2⤵
  PID:7876
- C:\Windows\System\jfJnSZF.exe
  C:\Windows\System\jfJnSZF.exe
  2⤵
  PID:8224
- C:\Windows\System\rURqtdn.exe
  C:\Windows\System\rURqtdn.exe
  2⤵
  PID:8328
- C:\Windows\System\kFVlaog.exe
  C:\Windows\System\kFVlaog.exe
  2⤵
  PID:8404
- C:\Windows\System\UsdxEZH.exe
  C:\Windows\System\UsdxEZH.exe
  2⤵
  PID:8304
- C:\Windows\System\VhLYhHA.exe
  C:\Windows\System\VhLYhHA.exe
  2⤵
  PID:8272
- C:\Windows\System\CNztsSD.exe
  C:\Windows\System\CNztsSD.exe
  2⤵
  PID:8452
- C:\Windows\System\bvwpkdt.exe
  C:\Windows\System\bvwpkdt.exe
  2⤵
  PID:8392
- C:\Windows\System\eCbuixz.exe
  C:\Windows\System\eCbuixz.exe
  2⤵
  PID:8356
- C:\Windows\System\lnhtMVU.exe
  C:\Windows\System\lnhtMVU.exe
  2⤵
  PID:8492
- C:\Windows\System\BwTQmQw.exe
  C:\Windows\System\BwTQmQw.exe
  2⤵
  PID:8516
- C:\Windows\System\YahCBfq.exe
  C:\Windows\System\YahCBfq.exe
  2⤵
  PID:8564
- C:\Windows\System\MOmyPon.exe
  C:\Windows\System\MOmyPon.exe
  2⤵
  PID:8596
- C:\Windows\System\SUViPUs.exe
  C:\Windows\System\SUViPUs.exe
  2⤵
  PID:8620
- C:\Windows\System\TWeKcbq.exe
  C:\Windows\System\TWeKcbq.exe
  2⤵
  PID:8640
- C:\Windows\System\gewPfZV.exe
  C:\Windows\System\gewPfZV.exe
  2⤵
  PID:8756
- C:\Windows\System\uhpLyZY.exe
  C:\Windows\System\uhpLyZY.exe
  2⤵
  PID:8796
- C:\Windows\System\GiFnAjC.exe
  C:\Windows\System\GiFnAjC.exe
  2⤵
  PID:8744
- C:\Windows\System\fvxAhcK.exe
  C:\Windows\System\fvxAhcK.exe
  2⤵
  PID:8812
- C:\Windows\System\hljgtsc.exe
  C:\Windows\System\hljgtsc.exe
  2⤵
  PID:8844
- C:\Windows\System\FyrQgTB.exe
  C:\Windows\System\FyrQgTB.exe
  2⤵
  PID:7936
- C:\Windows\System\YKpDKbv.exe
  C:\Windows\System\YKpDKbv.exe
  2⤵
  PID:8900
- C:\Windows\System\ETUbnbT.exe
  C:\Windows\System\ETUbnbT.exe
  2⤵
  PID:8924
- C:\Windows\System\iTUaEPg.exe
  C:\Windows\System\iTUaEPg.exe
  2⤵
  PID:8960
- C:\Windows\System\eYCwAEr.exe
  C:\Windows\System\eYCwAEr.exe
  2⤵
  PID:9004
- C:\Windows\System\OrwTCes.exe
  C:\Windows\System\OrwTCes.exe
  2⤵
  PID:9024
- C:\Windows\System\NrhTiUa.exe
  C:\Windows\System\NrhTiUa.exe
  2⤵
  PID:9068
- C:\Windows\System\JNDXDHv.exe
  C:\Windows\System\JNDXDHv.exe
  2⤵
  PID:9100
- C:\Windows\System\Ayjerod.exe
  C:\Windows\System\Ayjerod.exe
  2⤵
  PID:9164
- C:\Windows\System\APsFvJE.exe
  C:\Windows\System\APsFvJE.exe
  2⤵
  PID:9204
- C:\Windows\System\GBKlqGH.exe
  C:\Windows\System\GBKlqGH.exe
  2⤵
  PID:7724
- C:\Windows\System\JiIxHsS.exe
  C:\Windows\System\JiIxHsS.exe
  2⤵
  PID:8256
- C:\Windows\System\GUiugYj.exe
  C:\Windows\System\GUiugYj.exe
  2⤵
  PID:8064
- C:\Windows\System\rmnQuhb.exe
  C:\Windows\System\rmnQuhb.exe
  2⤵
  PID:9116
- C:\Windows\System\rwOuIoT.exe
  C:\Windows\System\rwOuIoT.exe
  2⤵
  PID:7544
- C:\Windows\System\PVPGfOw.exe
  C:\Windows\System\PVPGfOw.exe
  2⤵
  PID:8300
- C:\Windows\System\LSSJaut.exe
  C:\Windows\System\LSSJaut.exe
  2⤵
  PID:8292
- C:\Windows\System\nBWGHsh.exe
  C:\Windows\System\nBWGHsh.exe
  2⤵
  PID:8340
- C:\Windows\System\FzKpzfe.exe
  C:\Windows\System\FzKpzfe.exe
  2⤵
  PID:8408
- C:\Windows\System\mQHWFWn.exe
  C:\Windows\System\mQHWFWn.exe
  2⤵
  PID:8540
- C:\Windows\System\HKRwZgZ.exe
  C:\Windows\System\HKRwZgZ.exe
  2⤵
  PID:8560
- C:\Windows\System\WEaKrVE.exe
  C:\Windows\System\WEaKrVE.exe
  2⤵
  PID:8656
- C:\Windows\System\dgpRidP.exe
  C:\Windows\System\dgpRidP.exe
  2⤵
  PID:8708
- C:\Windows\System\bWBrZFh.exe
  C:\Windows\System\bWBrZFh.exe
  2⤵
  PID:8776
- C:\Windows\System\WyhUeMi.exe
  C:\Windows\System\WyhUeMi.exe
  2⤵
  PID:8840
- C:\Windows\System\fHEgckz.exe
  C:\Windows\System\fHEgckz.exe
  2⤵
  PID:8856
- C:\Windows\System\dvVPeGu.exe
  C:\Windows\System\dvVPeGu.exe
  2⤵
  PID:8936
- C:\Windows\System\otImMCs.exe
  C:\Windows\System\otImMCs.exe
  2⤵
  PID:8948
- C:\Windows\System\TylVJgW.exe
  C:\Windows\System\TylVJgW.exe
  2⤵
  PID:9080
- C:\Windows\System\DvNFBUQ.exe
  C:\Windows\System\DvNFBUQ.exe
  2⤵
  PID:9184
- C:\Windows\System\bRNqUdD.exe
  C:\Windows\System\bRNqUdD.exe
  2⤵
  PID:8424
- C:\Windows\System\cQNQKkm.exe
  C:\Windows\System\cQNQKkm.exe
  2⤵
  PID:7764
- C:\Windows\System\kPiavpc.exe
  C:\Windows\System\kPiavpc.exe
  2⤵
  PID:8068
- C:\Windows\System\AKqrWBp.exe
  C:\Windows\System\AKqrWBp.exe
  2⤵
  PID:8336
- C:\Windows\System\bKawjzM.exe
  C:\Windows\System\bKawjzM.exe
  2⤵
  PID:8332
- C:\Windows\System\SmfxPaU.exe
  C:\Windows\System\SmfxPaU.exe
  2⤵
  PID:8500
- C:\Windows\System\QdEIwLw.exe
  C:\Windows\System\QdEIwLw.exe
  2⤵
  PID:8244
- C:\Windows\System\wggAfqV.exe
  C:\Windows\System\wggAfqV.exe
  2⤵
  PID:8440
- C:\Windows\System\JnkzDnQ.exe
  C:\Windows\System\JnkzDnQ.exe
  2⤵
  PID:8548
- C:\Windows\System\XaPpEAU.exe
  C:\Windows\System\XaPpEAU.exe
  2⤵
  PID:8688
- C:\Windows\System\YqmHdXf.exe
  C:\Windows\System\YqmHdXf.exe
  2⤵
  PID:8764
- C:\Windows\System\WnouNJN.exe
  C:\Windows\System\WnouNJN.exe
  2⤵
  PID:1516
- C:\Windows\System\CtaiuQb.exe
  C:\Windows\System\CtaiuQb.exe
  2⤵
  PID:8832
- C:\Windows\System\hThmHjs.exe
  C:\Windows\System\hThmHjs.exe
  2⤵
  PID:8980
- C:\Windows\System\BpzdxaE.exe
  C:\Windows\System\BpzdxaE.exe
  2⤵
  PID:7012
- C:\Windows\System\NyDdSFu.exe
  C:\Windows\System\NyDdSFu.exe
  2⤵
  PID:9096
- C:\Windows\System\CTnfvZv.exe
  C:\Windows\System\CTnfvZv.exe
  2⤵
  PID:9148
- C:\Windows\System\KloNkiv.exe
  C:\Windows\System\KloNkiv.exe
  2⤵
  PID:9048
- C:\Windows\System\goMyvUa.exe
  C:\Windows\System\goMyvUa.exe
  2⤵
  PID:8512
- C:\Windows\System\aPeVyvU.exe
  C:\Windows\System\aPeVyvU.exe
  2⤵
  PID:8592
- C:\Windows\System\SRWTCFQ.exe
  C:\Windows\System\SRWTCFQ.exe
  2⤵
  PID:8868
- C:\Windows\System\CBoWVuT.exe
  C:\Windows\System\CBoWVuT.exe
  2⤵
  PID:8420
- C:\Windows\System\vSQYnty.exe
  C:\Windows\System\vSQYnty.exe
  2⤵
  PID:8644
- C:\Windows\System\ubJYrFC.exe
  C:\Windows\System\ubJYrFC.exe
  2⤵
  PID:8288
- C:\Windows\System\bWEWCuY.exe
  C:\Windows\System\bWEWCuY.exe
  2⤵
  PID:9152
- C:\Windows\System\IlLVxtr.exe
  C:\Windows\System\IlLVxtr.exe
  2⤵
  PID:8984
- C:\Windows\System\FjJhrzw.exe
  C:\Windows\System\FjJhrzw.exe
  2⤵
  PID:9084
- C:\Windows\System\XNBxIao.exe
  C:\Windows\System\XNBxIao.exe
  2⤵
  PID:7860
- C:\Windows\System\RaZvzaI.exe
  C:\Windows\System\RaZvzaI.exe
  2⤵
  PID:8864
- C:\Windows\System\qrKffYA.exe
  C:\Windows\System\qrKffYA.exe
  2⤵
  PID:8496
- C:\Windows\System\UPANdKc.exe
  C:\Windows\System\UPANdKc.exe
  2⤵
  PID:8720
- C:\Windows\System\TuhArfH.exe
  C:\Windows\System\TuhArfH.exe
  2⤵
  PID:9224
- C:\Windows\System\eYauyEV.exe
  C:\Windows\System\eYauyEV.exe
  2⤵
  PID:9240
- C:\Windows\System\VwspKAl.exe
  C:\Windows\System\VwspKAl.exe
  2⤵
  PID:9256
- C:\Windows\System\vOEEuwm.exe
  C:\Windows\System\vOEEuwm.exe
  2⤵
  PID:9272
- C:\Windows\System\JDmGCBD.exe
  C:\Windows\System\JDmGCBD.exe
  2⤵
  PID:9288
- C:\Windows\System\iVJlHfp.exe
  C:\Windows\System\iVJlHfp.exe
  2⤵
  PID:9304
- C:\Windows\System\DRNJnPw.exe
  C:\Windows\System\DRNJnPw.exe
  2⤵
  PID:9320
- C:\Windows\System\jMbcKia.exe
  C:\Windows\System\jMbcKia.exe
  2⤵
  PID:9340
- C:\Windows\System\epIcxDe.exe
  C:\Windows\System\epIcxDe.exe
  2⤵
  PID:9356
- C:\Windows\System\SWXAudw.exe
  C:\Windows\System\SWXAudw.exe
  2⤵
  PID:9372
- C:\Windows\System\bDvDmNq.exe
  C:\Windows\System\bDvDmNq.exe
  2⤵
  PID:9392
- C:\Windows\System\tQYJATu.exe
  C:\Windows\System\tQYJATu.exe
  2⤵
  PID:9412
- C:\Windows\System\dIbHgpP.exe
  C:\Windows\System\dIbHgpP.exe
  2⤵
  PID:9472
- C:\Windows\System\BSVhnBm.exe
  C:\Windows\System\BSVhnBm.exe
  2⤵
  PID:9500
- C:\Windows\System\QiSTUtd.exe
  C:\Windows\System\QiSTUtd.exe
  2⤵
  PID:9520
- C:\Windows\System\BntkoRf.exe
  C:\Windows\System\BntkoRf.exe
  2⤵
  PID:9536
- C:\Windows\System\FKwAkAs.exe
  C:\Windows\System\FKwAkAs.exe
  2⤵
  PID:9552
- C:\Windows\System\nwPibXn.exe
  C:\Windows\System\nwPibXn.exe
  2⤵
  PID:9588
- C:\Windows\System\IBsTJOa.exe
  C:\Windows\System\IBsTJOa.exe
  2⤵
  PID:9604
- C:\Windows\System\ehuWxNX.exe
  C:\Windows\System\ehuWxNX.exe
  2⤵
  PID:9620
- C:\Windows\System\YUvpliF.exe
  C:\Windows\System\YUvpliF.exe
  2⤵
  PID:9636
- C:\Windows\System\zZdKouw.exe
  C:\Windows\System\zZdKouw.exe
  2⤵
  PID:9660
- C:\Windows\System\yHCUkSJ.exe
  C:\Windows\System\yHCUkSJ.exe
  2⤵
  PID:9680
- C:\Windows\System\ONqRFza.exe
  C:\Windows\System\ONqRFza.exe
  2⤵
  PID:9696
- C:\Windows\System\lbvamtE.exe
  C:\Windows\System\lbvamtE.exe
  2⤵
  PID:9712
- C:\Windows\System\yuTfzcF.exe
  C:\Windows\System\yuTfzcF.exe
  2⤵
  PID:9728
- C:\Windows\System\xMUVpmA.exe
  C:\Windows\System\xMUVpmA.exe
  2⤵
  PID:9744
- C:\Windows\System\gZbaspw.exe
  C:\Windows\System\gZbaspw.exe
  2⤵
  PID:9760
- C:\Windows\System\aGAyrWI.exe
  C:\Windows\System\aGAyrWI.exe
  2⤵
  PID:9776
- C:\Windows\System\ybepOzr.exe
  C:\Windows\System\ybepOzr.exe
  2⤵
  PID:9828
- C:\Windows\System\ttwKQup.exe
  C:\Windows\System\ttwKQup.exe
  2⤵
  PID:9844
- C:\Windows\System\BFKlJvR.exe
  C:\Windows\System\BFKlJvR.exe
  2⤵
  PID:9860
- C:\Windows\System\BdNhHnR.exe
  C:\Windows\System\BdNhHnR.exe
  2⤵
  PID:9876
- C:\Windows\System\rnVNvfy.exe
  C:\Windows\System\rnVNvfy.exe
  2⤵
  PID:9892
- C:\Windows\System\IfQOwqC.exe
  C:\Windows\System\IfQOwqC.exe
  2⤵
  PID:9908
- C:\Windows\System\mHsmhgg.exe
  C:\Windows\System\mHsmhgg.exe
  2⤵
  PID:9948
- C:\Windows\System\lEyXHEE.exe
  C:\Windows\System\lEyXHEE.exe
  2⤵
  PID:9972
- C:\Windows\System\fegiiDc.exe
  C:\Windows\System\fegiiDc.exe
  2⤵
  PID:9988
- C:\Windows\System\DGThoEX.exe
  C:\Windows\System\DGThoEX.exe
  2⤵
  PID:10004
- C:\Windows\System\DFFfxJp.exe
  C:\Windows\System\DFFfxJp.exe
  2⤵
  PID:10020
- C:\Windows\System\LllNWMJ.exe
  C:\Windows\System\LllNWMJ.exe
  2⤵
  PID:10036
- C:\Windows\System\cdcojdp.exe
  C:\Windows\System\cdcojdp.exe
  2⤵
  PID:10056
- C:\Windows\System\fqLQCKY.exe
  C:\Windows\System\fqLQCKY.exe
  2⤵
  PID:10076
- C:\Windows\System\GiDdHNR.exe
  C:\Windows\System\GiDdHNR.exe
  2⤵
  PID:10108
- C:\Windows\System\JuzTxli.exe
  C:\Windows\System\JuzTxli.exe
  2⤵
  PID:10128
- C:\Windows\System\IvDfUpx.exe
  C:\Windows\System\IvDfUpx.exe
  2⤵
  PID:10144
- C:\Windows\System\yzxsgYF.exe
  C:\Windows\System\yzxsgYF.exe
  2⤵
  PID:10164
- C:\Windows\System\PxFoOgM.exe
  C:\Windows\System\PxFoOgM.exe
  2⤵
  PID:10180
- C:\Windows\System\IzTPlOY.exe
  C:\Windows\System\IzTPlOY.exe
  2⤵
  PID:10196
- C:\Windows\System\vIQxsCD.exe
  C:\Windows\System\vIQxsCD.exe
  2⤵
  PID:10216
- C:\Windows\System\GujvTIw.exe
  C:\Windows\System\GujvTIw.exe
  2⤵
  PID:9000
- C:\Windows\System\GndMiMJ.exe
  C:\Windows\System\GndMiMJ.exe
  2⤵
  PID:9268
- C:\Windows\System\gXidRek.exe
  C:\Windows\System\gXidRek.exe
  2⤵
  PID:9328
- C:\Windows\System\CJPKFQr.exe
  C:\Windows\System\CJPKFQr.exe
  2⤵
  PID:8968
- C:\Windows\System\vWWmice.exe
  C:\Windows\System\vWWmice.exe
  2⤵
  PID:9352
- C:\Windows\System\kcqrDQc.exe
  C:\Windows\System\kcqrDQc.exe
  2⤵
  PID:9284
- C:\Windows\System\vpAgNiU.exe
  C:\Windows\System\vpAgNiU.exe
  2⤵
  PID:9408
- C:\Windows\System\XDgUzRh.exe
  C:\Windows\System\XDgUzRh.exe
  2⤵
  PID:9488
- C:\Windows\System\cCLGwBj.exe
  C:\Windows\System\cCLGwBj.exe
  2⤵
  PID:9496
- C:\Windows\System\gHnVLnf.exe
  C:\Windows\System\gHnVLnf.exe
  2⤵
  PID:9428
- C:\Windows\System\ceGOGHq.exe
  C:\Windows\System\ceGOGHq.exe
  2⤵
  PID:9464
- C:\Windows\System\GDELUUl.exe
  C:\Windows\System\GDELUUl.exe
  2⤵
  PID:9052
- C:\Windows\System\aHLkrlY.exe
  C:\Windows\System\aHLkrlY.exe
  2⤵
  PID:9584
- C:\Windows\System\yfAixev.exe
  C:\Windows\System\yfAixev.exe
  2⤵
  PID:9644
- C:\Windows\System\aSBXHhM.exe
  C:\Windows\System\aSBXHhM.exe
  2⤵
  PID:9688
- C:\Windows\System\mvlYbVg.exe
  C:\Windows\System\mvlYbVg.exe
  2⤵
  PID:9668
- C:\Windows\System\dkthEcp.exe
  C:\Windows\System\dkthEcp.exe
  2⤵
  PID:9704
- C:\Windows\System\zyOwofQ.exe
  C:\Windows\System\zyOwofQ.exe
  2⤵
  PID:9724
- C:\Windows\System\VlIDsCR.exe
  C:\Windows\System\VlIDsCR.exe
  2⤵
  PID:9796
- C:\Windows\System\QgaVNWH.exe
  C:\Windows\System\QgaVNWH.exe
  2⤵
  PID:9816

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Windows\system\CyWNWru.exe

Filesize
2.0MB

MD5
b2af486e0b8cbc1737d12bf4f0bb48c2

SHA1
e4b33b6fe9f5bfff2348d4b6a89bfecad9baf94f

SHA256
be215517ac7ba8b96806904d0d9bc1e337b9cc70aa4cd37bb30b8df412d33e45

SHA512
a8027c57785b5038414b6b83657dad6e73f32b19cee39ba92f4415a479341a9c3e9ed93777081bdfbd6bc1ef4111575bc77ca42c31f632a0a0c19d9a814a2b3b

Download Submit
C:\Windows\system\FlyyNhd.exe

Filesize
2.0MB

MD5
9a175015f552785acd2f5e3e806d6840

SHA1
e6ebb800b989c1c736762cf9b17166016b78b2ee

SHA256
dd99181773fb477a4c11358ccff8faa8097ea676be8768a022febe3165c8c09b

SHA512
93d8ddd3e88de9888a332fa7c19222ee4a12f4449d4e55fb4e86e3a3e81a13f143f80720bf6c9e36ac389de19b60bbad3a425a007258302d303a2b04aece46d2

Download Submit
C:\Windows\system\HBcIktz.exe

Filesize
2.0MB

MD5
c1dc457f590c20f6eb2af9687b265bff

SHA1
61c884d890dd9992835fe4289afd438795d88916

SHA256
6374bb698ade7fa9dd23900dfd2e44b30cfe0bd7455efeebf029520a47e4f2fb

SHA512
31f2450152fcc34f751d2b85b3a64939bb22007f72e4b0040a33968bf59c3cff31832d2cb193d4a8925cf27323377269d1c304d0c0fdf0bd8f9f9e030e35ef8b

Download Submit
C:\Windows\system\IxYyazl.exe

Filesize
2.0MB

MD5
fc95d4c844d284297ec4d873324e1ae4

SHA1
50d80b2843bed43e546af6a02e9d70c4de122a31

SHA256
e11b58e90d3ab61c517052b207a17158cef0bc2af49204b32802d3de8fed4fd1

SHA512
83eceec4253d6887405c3c3910ec0ef35058c24de8af455485d869735307d5094affb51bc03018ebd3bd5b0438a205309f89de9ca6c00242c45779495a36859f

Download Submit
C:\Windows\system\JRHLgid.exe

Filesize
2.0MB

MD5
9d453a43b92371c1d94677793fb68562

SHA1
85c19a2aacfe9ee6e58415d241beeab6f9f681b9

SHA256
4c8a44339367881561e92b83b6e28c62867eb6e83d72947fd66af072648cb9d7

SHA512
4386c96a338c7431df0216005e0629e78c98201992de895576679918fea581dcf66b93d38f4830be0439226fa6c7cfc557f3d1797e0b97de4622c8ef78025b47

Download Submit
C:\Windows\system\MoHjwjQ.exe

Filesize
2.0MB

MD5
8f3063cf81df0d2fae0b3d98c146fcf8

SHA1
c60b6b4eb197106adcabb7d8f474c0b0c01e1295

SHA256
b31dd2de385bf7fe0efbe89a5561ed361f376debe5ba29e286d0a7f778e2d55a

SHA512
b480c16fd299234b740bc9190c2f2782e81df5329ed778e0a1a84fa084578f122a60dfc46304548dd30fbb7017bd217e598935f83715e6374036b86369ee5a03

Download Submit
C:\Windows\system\NQGCqak.exe

Filesize
2.0MB

MD5
8bea3e213642620d5ceb69a01a2d98c9

SHA1
4963474c374e6019a145615b1b597a8989c11bc7

SHA256
586ef0daa92a997c5351094ff1cc83612ca10383851787369987939a283ddc6d

SHA512
27a2e3816d40b03138c24b0f7d100970deae9b81f1137b940c2344b91bfece038929661b6d65f6199c7168ce32d9a1774b3b29e4dc2dd370faa4174f9cf83faa

Download Submit
C:\Windows\system\TxfGcFx.exe

Filesize
2.0MB

MD5
04461a7cf784139427b11706ef619a3c

SHA1
f49b593a64e1a3563e69ce75d0e72ca8cc9a5244

SHA256
d7d523aec3ee666cb1552298f2f2343e30d1234404b1db7791622d15a946f7e0

SHA512
5fb0dd51a6716bc5549bc429917bc824bd22130f521d5947c77e34a59cc82d259dc8d722fde1f42012bb71eea410c6881a5c2e022930cb2d036d2e411c030844

Download Submit
C:\Windows\system\UatVPeC.exe

Filesize
2.0MB

MD5
a49d0ecbc2d27f96dd17dd04d752f006

SHA1
a9bd02dc64265d2e8a8e8cb2eadb66d28b162299

SHA256
f44c94b38e2f1f14c479bf0af70e3c1441b321506f152658b9251a1e30c8c927

SHA512
a449c9416a47db5c67d977bfc5e45dbcfc84b88c1b665fafded43f1d88ca03085d3c056eb97ffe93fa56c577406af84e7cbdc51e342b03df37ee63bbd6ad4d24

Download Submit
C:\Windows\system\VAxzekX.exe

Filesize
2.0MB

MD5
5d1f6057fc163a111e47ef8607ac8cbe

SHA1
128260f41eb9f820b5aa4aafd6b9eecffb23e412

SHA256
74bb6af7ae69345c7aa751d47f3cdb2cce4463f5648c7b37bac5239a5a6148cb

SHA512
d6bd149dbbdd382fa1896282aced8582c7c923c066547ab5f2b4f9658c82b619e0cf3dc5121bdcadec4386098d5b323e9ae864e7f0a36e8f2f5f4c3cfe31444e

Download Submit
C:\Windows\system\WyfeLIL.exe

Filesize
2.0MB

MD5
353a0b146c589d794736687bab48a6fa

SHA1
e7373ffc0c82cce9589ce0df72ca10399bda741d

SHA256
6d41529ece2bb681e2541593b4ebb0ef7dfac80177ff0be68b85851f9dd66b97

SHA512
fd751e8d218c15e70b6f26b4f37ca37869840891f21427e6f91e6f695a56a6658d4109ddf160413e389d54ae6f274363f62e0712235ce40273522b233d387d6c

Download Submit
C:\Windows\system\bfDPtcy.exe

Filesize
2.0MB

MD5
1c84bbb1246f1132e9a0d3ecb48cae1c

SHA1
d80ee42f471e0317b260dfd368071bbf2b7f1b3c

SHA256
d5fc62939c62adf6fc5bcb77c847a62239a12f05d0fa99ba13f35ce0aef78a82

SHA512
160d0d851d383e6bc3ba09592c6f7fe21f569286b22029911dbe2ce87292ad1211bed3ad0f945bb6e2890b6dab0641731d1d6a57b3749dc9515ac7321b3885ac

Download Submit
C:\Windows\system\cCYDQHT.exe

Filesize
2.0MB

MD5
3fb191136eb2fe88d30ef3cd39c26a11

SHA1
536aeda1e5d2c8510d13f25daeb30ae0c1886ac5

SHA256
9dc9bb7b5bbfc5ba0d570dc4f3c69ddfdc57481d63b030d601b616153c3eda5a

SHA512
12a1b9a913a46e876f57a8192f542351589b44084e831a5c16c1fee4fc8d613cec174ee1510c0773b1b2264d1cd7972e289db76e4f3f9db1efea135b61f06302

Download Submit
C:\Windows\system\cDADCgU.exe

Filesize
2.0MB

MD5
f6509754470a8abe8f8f247bd9ddcefc

SHA1
96af7a3317e629ac17c424aa1fba0c790c39c19c

SHA256
7a6f3d727a7b44c198cb7b8dedc7f521fe645d316a19923df426f1a143f68c08

SHA512
0eabd3eadc4a7d84aca2a9aae95db238969fabf35d8f7762ceb8f082c21c27347da60b37f09aee11f035eca71bfe784fef2bbf04bfb5ab2e5c852eb04f4267b0

Download Submit
C:\Windows\system\cTEzCxy.exe

Filesize
2.0MB

MD5
7fdc6c47e460c5bea25c71039d046be1

SHA1
629721e71e4e8d6a3764e1a524cf060184b16e73

SHA256
07190192a8820d37c5b18ff13f2bff3999b8ac226c2464448a6880b95dacfea2

SHA512
fde7600d3b3e555cd33bce31416959da770e465250a1be8a2834509d57c8ecf487c358b5a11e011ac5be72b8f86b998f9f884982edfde8994111e816e5c3ded8

Download Submit
C:\Windows\system\efMEJwd.exe

Filesize
2.0MB

MD5
49c855d245516ac5ce84a90f4f70da1d

SHA1
a494d8fd88929e4538fbd0fe1106bfc2ce5b7e56

SHA256
b472afca005eb555f8c05a46307e07168f79da39a9581cabf52baa0f990f0015

SHA512
e3668e3c51f2139c05bdda262c1e88d40466b0a8e3f117fa4335092a6e4e414bfd976cd1ff4903623dcdf6f30e4cf97123ae122eb4420a7852f012fe3598a63f

Download Submit
C:\Windows\system\emiSjLd.exe

Filesize
2.0MB

MD5
d58a133312dfd86e35c4a442bb077917

SHA1
a2d847ac2cc02683e30fb768a394275bf1b8721e

SHA256
6c31816d1f11ee2166ad8abc2053e1a801ae165828f3dc3669fcc16bb46278a3

SHA512
0fbfdeee0ca661b78187b96b24a51a9c9587243595b034a1f20b61bda2c8a8d698baff90b7d9c67dcc5238b0ed7b69d7ae49f1760372ec989f57c4703abe4f95

Download Submit
C:\Windows\system\hoRPcOK.exe

Filesize
2.0MB

MD5
c560e04fcf3393de1860e0485cd2406a

SHA1
1f4f51d55099666b2b815bb13439ecf6b03f8d69

SHA256
e4b0699871c131e6d7e8f9118aa7b0def3256fef8cbe95c2e483c48e05f4eecd

SHA512
7a3686c242afaac601868cd4c4a406dc1a97033609daddb68908038c33c53c5e7976cbe57991920cb8838535c67177b125347d94f7c58223e64bf00d4edc3c15

Download Submit
C:\Windows\system\jaNAvPR.exe

Filesize
2.0MB

MD5
0e1a98b24372ba662a73251f10f2f3dd

SHA1
6632283bc8a6ffe8215fa03986ff72ffdfacc406

SHA256
697b8af26e54449ee82244f586c6ed59660f010eafcd1d7cc1530fe676c3e3d1

SHA512
0dd388452a12144863a8381026d7479b112164df307ea906d08756aa5ae2920c917cb357d2b3f34884d675c1b0717a4198aa52df141f46bda63280e5f65a0e09

Download Submit
C:\Windows\system\kdasutJ.exe

Filesize
2.0MB

MD5
e2f45e64db19e36bcf41f59a2df21cb5

SHA1
2eb2605829a8b2322ba3fc357d9c1a2e343b07f3

SHA256
f96fdb4dbbfb637e5106f4267bc5fea3ca1a9896c6741bdc1ef73161f0e292eb

SHA512
cda0c69239de61e358068404deb7f7865f789516879d7c7c0cf4f45cd3e62220b322be108e0d90af19fc424f7ac4427c916281f169c365e8c4b18311bcc516e8

Download Submit
C:\Windows\system\kkVeHNl.exe

Filesize
2.0MB

MD5
3108513d925f99325696385613e11578

SHA1
4d4392edbf43f0ab3eb49517cf2114048c4560c5

SHA256
00e1fec57a1be0b97cba937f97e939efa3b6e7a21e2aa866194e1ab063d23b33

SHA512
5bd6e56de526f0c97f8a57990d12fc57cb6b3e1868a38140faf61e1eb3de9993b3566535695f41bc49eed8ae3326d7cb335d8bed8ca3a7ef41f4966828cfa651

Download Submit
C:\Windows\system\tYXitlb.exe

Filesize
2.0MB

MD5
c90cf540c67dd65b02c2b7e8255ca673

SHA1
cba6015e6e412aaabf6679912bcbb58a9387ed64

SHA256
de5fe6bc8ad6ea3b6b4ebf341b1ab2a30f9b9a5c65ac94d1ebc26268f302e2e5

SHA512
c9d984f481d248fd68155487a4ce29744ee4dd6a8d83f5de377bc2674747919a2afdbf1fdec66a3605a6d920ee632ef29a6c9a7f5b0265b5cd1ff27fdfb36138

Download Submit
C:\Windows\system\tvqmHPG.exe

Filesize
2.0MB

MD5
ba4b0241604404f251908866122136c7

SHA1
95108e2e368d5731d14865ff255aefa444d5ce29

SHA256
8f0681e97555ff03c22e634702fc2b295a74dc14cc2833e9c65517c4ba8a73bb

SHA512
fbff598c35b3ab373dc18bc1eb882c6cd7a586db4d39a67edeb59fca15f4bb7623f97e2c79f4692a2429b29a13b244476a731bb6713bc2a133f4b5dc3e2fe303

Download Submit
C:\Windows\system\wLvHAkd.exe

Filesize
2.0MB

MD5
55fd9ef95cbf6de0157ebcab140bdb17

SHA1
fa607a8bb251489de362c37f26226b8b08f960a0

SHA256
501fb0656ae7901c0f69dc7faf8296332c57a26f265ed4d563cd8e49fe64ff2d

SHA512
9e74333beb0af0365b0db055545c4f546531ae6d5cae9c0712a49679d9ac572946b3919860612bb5613c2638c9b4263e6e5cc46591a11796cf314056bd8516f5

Download Submit
C:\Windows\system\wwRbyUU.exe

Filesize
2.0MB

MD5
fc80cf4e73c1b22bbfbce6f316ea354a

SHA1
79a1998eb7c74b2bf2c84f944a5afca3b21b99bb

SHA256
9590ca1aea55566d6829cc0a2479763508b71e5963c04971ef5a7146e58f06b8

SHA512
5c604c4cec73087cdd8ada5fe5bf085494604f37e29813436971264505d205f98466d71b97d2b29647bd76df728308010fc6a917bf4501b3f6d84d25ab2fd61f

Download Submit
C:\Windows\system\xNpMpZY.exe

Filesize
2.0MB

MD5
4fd3ce89f41633ef6cd6739765ec1a63

SHA1
8a21639c59d6a071a6aeb5dcc9f6666e7a0a677e

SHA256
e076d3ec4c48760c4d001f88ffb98cd28a6626ce526f34f454357d028d82e773

SHA512
601ae9744ed1a596be04e4c3707df7622f9ee6a3fad11d17c8e5733b46b760d6abb8296b2750cc90dbc25e3ed3ed2acc2bf7556c8513cfa34c15abbf077bd878

Download Submit
C:\Windows\system\ztBXbiR.exe

Filesize
2.0MB

MD5
02ecd3c3e9b1fcc1a0cbc968adf9c698

SHA1
bcd81576daf124d565ccd824a6df654154643608

SHA256
bcf30448227ee3d3bd9762bf76f051a86dad03d3d975499f15cc97724b69ccac

SHA512
f47691a43551b6d11125c0960ef716117f8e886456355ae9accf6d8f008f5584d2547470294f152a41d59a20f10c13e712b71d25e0399c6e603a57ab96ff2e84

Download Submit
\Windows\system\DhiqhCb.exe

Filesize
2.0MB

MD5
eed4defe2ba19f3688bab8cdb89cc55e

SHA1
093d371be43eeee0600753e7c7d4433c56e5648f

SHA256
ff8889209924aa26c6421ed3aa359fd8110dfbd99661b5df554dd456c1ac885e

SHA512
ac325b6ee92b72d807b636ea2544821cb7e7b4d25e853caabe8f553943ed1a3253cc49de9f1d6033e1967f54c5e6e7e2bca1ec314173ca5b05fd2b7aaf27dfd0

Download Submit
\Windows\system\UbEiXLb.exe

Filesize
2.0MB

MD5
eb5bf42c75c3dd8ca7eff0abe5cf0c19

SHA1
fc171275789869f1b33872b4b21bb82ecd31fc91

SHA256
2c360c0708bbb67c9528f76de5dbaf4545863b778ad99d9467b019069145ea20

SHA512
1d72fc7042ff93b22bfd78181307d1d22df184ea3d89665ef07fc164a971124517efce2375a18d2c661ffe2f7975b85a6fcf09a6256d41bb293d8280c8c1b01f

Download Submit
\Windows\system\ZHGpqKV.exe

Filesize
2.0MB

MD5
76b295ff5e0bfa323dcedae3dec97ce9

SHA1
90eb68752a73c6db75d0164b80c6466372af06fc

SHA256
5c75a91e7527b0d264b290da0d8dc537be5f43c3b66cc484e17d5d7fc0a3dc1e

SHA512
9b5b0725b950470d3650775bce15375256afefd9e445fcc749b759c73eee7e55ffed41ceb5f7712eb9f070dd253b93f9c3f68e88d3957161ae3538d4e54c8be0

Download Submit
\Windows\system\ohbpXfZ.exe

Filesize
2.0MB

MD5
8099ab13f3d775143c3e350239a78c64

SHA1
c42ec0817e99bff155193ddde998f0eefd5c387e

SHA256
5ad25291cfdcd5fe95fd04c0e00302d5ca90062591a14f4a8133c9cf8619d2ab

SHA512
e268722802e126d429311e614fb699c7f5897c167ed59d962bfa172e8919d15299d7d186bd93d6ba555ed9c45b00ed5f1bec220a0e4ec7ce88d463c47463d76d

Download Submit
\Windows\system\vuFiOJa.exe

Filesize
2.0MB

MD5
ef25789d24ac7ac5dcce3515de2cee83

SHA1
efc66eba937fb7719399b119c7cdb04bbec62d69

SHA256
4e9dcc6a0efca0fe83a597efc290e269f9fc86ddd073b92f3c9433eafe4ff458

SHA512
1ab4548fb8edd103223be434a24a936b9d311d6ccfb7f7a74389235618e4830367bf2dd49d9462c3a618ee4445448d705e78d4815f8c2e48ad260fee2df4125d

Download Submit
memory/1212-4034-0x000000013FF20000-0x0000000140274000-memory.dmp

Filesize
3.3MB

Download
memory/1212-89-0x000000013FF20000-0x0000000140274000-memory.dmp

Filesize
3.3MB

Download
memory/1564-88-0x000000013FAF0000-0x000000013FE44000-memory.dmp

Filesize
3.3MB

Download
memory/1564-4033-0x000000013FAF0000-0x000000013FE44000-memory.dmp

Filesize
3.3MB

Download
memory/2208-43-0x000000013F2F0000-0x000000013F644000-memory.dmp

Filesize
3.3MB

Download
memory/2208-4029-0x000000013F2F0000-0x000000013F644000-memory.dmp

Filesize
3.3MB

Download
memory/2424-56-0x000000013F8B0000-0x000000013FC04000-memory.dmp

Filesize
3.3MB

Download
memory/2424-2481-0x000000013F8B0000-0x000000013FC04000-memory.dmp

Filesize
3.3MB

Download
memory/2424-4031-0x000000013F8B0000-0x000000013FC04000-memory.dmp

Filesize
3.3MB

Download
memory/2472-4036-0x000000013F120000-0x000000013F474000-memory.dmp

Filesize
3.3MB

Download
memory/2472-96-0x000000013F120000-0x000000013F474000-memory.dmp

Filesize
3.3MB

Download
memory/2536-4027-0x000000013FCD0000-0x0000000140024000-memory.dmp

Filesize
3.3MB

Download
memory/2536-36-0x000000013FCD0000-0x0000000140024000-memory.dmp

Filesize
3.3MB

Download
memory/2548-28-0x000000013F6B0000-0x000000013FA04000-memory.dmp

Filesize
3.3MB

Download
memory/2548-4025-0x000000013F6B0000-0x000000013FA04000-memory.dmp

Filesize
3.3MB

Download
memory/2608-38-0x000000013FC60000-0x000000013FFB4000-memory.dmp

Filesize
3.3MB

Download
memory/2608-4028-0x000000013FC60000-0x000000013FFB4000-memory.dmp

Filesize
3.3MB

Download
memory/2608-110-0x000000013FC60000-0x000000013FFB4000-memory.dmp

Filesize
3.3MB

Download
memory/2624-33-0x000000013F6A0000-0x000000013F9F4000-memory.dmp

Filesize
3.3MB

Download
memory/2624-4026-0x000000013F6A0000-0x000000013F9F4000-memory.dmp

Filesize
3.3MB

Download
memory/2676-4030-0x000000013F9A0000-0x000000013FCF4000-memory.dmp

Filesize
3.3MB

Download
memory/2676-52-0x000000013F9A0000-0x000000013FCF4000-memory.dmp

Filesize
3.3MB

Download
memory/2712-100-0x000000013FF00000-0x0000000140254000-memory.dmp

Filesize
3.3MB

Download
memory/2712-4035-0x000000013FF00000-0x0000000140254000-memory.dmp

Filesize
3.3MB

Download
memory/2732-104-0x000000013F230000-0x000000013F584000-memory.dmp

Filesize
3.3MB

Download
memory/2732-4037-0x000000013F230000-0x000000013F584000-memory.dmp

Filesize
3.3MB

Download
memory/2832-2857-0x000000013F210000-0x000000013F564000-memory.dmp

Filesize
3.3MB

Download
memory/2832-4032-0x000000013F210000-0x000000013F564000-memory.dmp

Filesize
3.3MB

Download
memory/2832-62-0x000000013F210000-0x000000013F564000-memory.dmp

Filesize
3.3MB

Download
memory/2848-4024-0x000000013F1B0000-0x000000013F504000-memory.dmp

Filesize
3.3MB

Download
memory/2848-9-0x000000013F1B0000-0x000000013F504000-memory.dmp

Filesize
3.3MB

Download
memory/2876-95-0x0000000001F50000-0x00000000022A4000-memory.dmp

Filesize
3.3MB

Download
memory/2876-109-0x000000013F6B0000-0x000000013FA04000-memory.dmp

Filesize
3.3MB

Download
memory/2876-91-0x000000013F120000-0x000000013F474000-memory.dmp

Filesize
3.3MB

Download
memory/2876-2858-0x0000000001F50000-0x00000000022A4000-memory.dmp

Filesize
3.3MB

Download
memory/2876-3243-0x0000000001F50000-0x00000000022A4000-memory.dmp

Filesize
3.3MB

Download
memory/2876-3247-0x0000000001F50000-0x00000000022A4000-memory.dmp

Filesize
3.3MB

Download
memory/2876-3458-0x0000000001F50000-0x00000000022A4000-memory.dmp

Filesize
3.3MB

Download
memory/2876-92-0x000000013F230000-0x000000013F584000-memory.dmp

Filesize
3.3MB

Download
memory/2876-93-0x0000000001F50000-0x00000000022A4000-memory.dmp

Filesize
3.3MB

Download
memory/2876-1-0x0000000000080000-0x0000000000090000-memory.dmp

Filesize
64KB

Download
memory/2876-8-0x000000013F1B0000-0x000000013F504000-memory.dmp

Filesize
3.3MB

Download
memory/2876-40-0x000000013F6A0000-0x000000013F9F4000-memory.dmp

Filesize
3.3MB

Download
memory/2876-0-0x000000013FD60000-0x00000001400B4000-memory.dmp

Filesize
3.3MB

Download
memory/2876-42-0x000000013F2F0000-0x000000013F644000-memory.dmp

Filesize
3.3MB

Download
memory/2876-41-0x0000000001F50000-0x00000000022A4000-memory.dmp

Filesize
3.3MB

Download
memory/2876-34-0x0000000001F50000-0x00000000022A4000-memory.dmp

Filesize
3.3MB

Download
memory/2876-655-0x0000000001F50000-0x00000000022A4000-memory.dmp

Filesize
3.3MB

Download
memory/2876-60-0x000000013F210000-0x000000013F564000-memory.dmp

Filesize
3.3MB

Download
memory/2876-53-0x000000013F8B0000-0x000000013FC04000-memory.dmp

Filesize
3.3MB

Download
memory/2876-111-0x0000000001F50000-0x00000000022A4000-memory.dmp

Filesize
3.3MB

Download
memory/2876-74-0x000000013FD60000-0x00000001400B4000-memory.dmp

Filesize
3.3MB

Download