xmrig | 7d091fb2ff88c5c3fd6e814b6fd134f20490b63ca2d80e8b3453f8c61dd0bd7f

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
03-06-2024 22:19

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
Size

2.4MB
MD5

0a598457c2d098acb330506cf9b81e60
SHA1

aa9e88e4e4621c2735c3b6f4fce4a57daa410308
SHA256

7d091fb2ff88c5c3fd6e814b6fd134f20490b63ca2d80e8b3453f8c61dd0bd7f
SHA512

62e9bcacb1ffff74105cc6decbfa0240d609a59349ec4df768eb0207668b50d3a2c267d9ffd4a5206a7a50f35592aa136965eed99039636ebaa340ada6d160bc
SSDEEP

49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+ABcYHM0NaLL1DUr:BemTLkNdfE0pZr8

Score

10^/10

xmrig miner upx

Malware Config

Signatures

xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
miner xmrig

XMRig Miner payload 64 IoCs

miner

resource	yara_rule
behavioral1/memory/2948-0-0x000000013F920000-0x000000013FC74000-memory.dmp	xmrig
behavioral1/files/0x000c000000012674-3.dat	xmrig
behavioral1/files/0x0037000000014b4c-10.dat	xmrig
behavioral1/memory/2036-14-0x000000013FBD0000-0x000000013FF24000-memory.dmp	xmrig
behavioral1/files/0x000800000001564f-20.dat	xmrig
behavioral1/memory/2572-23-0x000000013F850000-0x000000013FBA4000-memory.dmp	xmrig
behavioral1/memory/2696-38-0x000000013FE40000-0x0000000140194000-memory.dmp	xmrig
behavioral1/files/0x0007000000015684-46.dat	xmrig
behavioral1/files/0x0008000000015d7f-50.dat	xmrig
behavioral1/files/0x0006000000015d87-53.dat	xmrig
behavioral1/files/0x0006000000015d93-69.dat	xmrig
behavioral1/memory/2908-79-0x000000013F2E0000-0x000000013F634000-memory.dmp	xmrig
behavioral1/files/0x000600000001610f-105.dat	xmrig
behavioral1/files/0x0006000000015fe5-96.dat	xmrig
behavioral1/files/0x0006000000016c64-154.dat	xmrig
behavioral1/files/0x0006000000016cdc-164.dat	xmrig
behavioral1/files/0x0006000000016d20-179.dat	xmrig
behavioral1/memory/2624-2722-0x000000013F520000-0x000000013F874000-memory.dmp	xmrig
behavioral1/memory/2776-357-0x000000013F110000-0x000000013F464000-memory.dmp	xmrig
behavioral1/files/0x0006000000016d3a-190.dat	xmrig
behavioral1/files/0x0006000000016d34-183.dat	xmrig
behavioral1/files/0x0006000000016d18-174.dat	xmrig
behavioral1/files/0x0006000000016d07-169.dat	xmrig
behavioral1/files/0x0006000000016cb0-159.dat	xmrig
behavioral1/files/0x0006000000016c5e-149.dat	xmrig
behavioral1/files/0x0006000000016c44-144.dat	xmrig
behavioral1/files/0x0006000000016adc-139.dat	xmrig
behavioral1/files/0x0006000000016851-133.dat	xmrig
behavioral1/files/0x0006000000016616-129.dat	xmrig
behavioral1/files/0x000600000001658a-124.dat	xmrig
behavioral1/files/0x00060000000164aa-119.dat	xmrig
behavioral1/files/0x000600000001630a-114.dat	xmrig
behavioral1/files/0x000600000001621e-109.dat	xmrig
behavioral1/memory/2948-104-0x0000000001FA0000-0x00000000022F4000-memory.dmp	xmrig
behavioral1/memory/1508-101-0x000000013F440000-0x000000013F794000-memory.dmp	xmrig
behavioral1/memory/1580-93-0x000000013F860000-0x000000013FBB4000-memory.dmp	xmrig
behavioral1/memory/2352-86-0x000000013FA70000-0x000000013FDC4000-memory.dmp	xmrig
behavioral1/files/0x0006000000015f65-89.dat	xmrig
behavioral1/files/0x0006000000015ecc-82.dat	xmrig
behavioral1/memory/2624-70-0x000000013F520000-0x000000013F874000-memory.dmp	xmrig
behavioral1/files/0x0006000000015e32-74.dat	xmrig
behavioral1/memory/2464-68-0x000000013FF40000-0x0000000140294000-memory.dmp	xmrig
behavioral1/memory/2472-67-0x000000013FB70000-0x000000013FEC4000-memory.dmp	xmrig
behavioral1/memory/2948-62-0x000000013F520000-0x000000013F874000-memory.dmp	xmrig
behavioral1/memory/2376-61-0x000000013F2A0000-0x000000013F5F4000-memory.dmp	xmrig
behavioral1/memory/2948-57-0x000000013F2A0000-0x000000013F5F4000-memory.dmp	xmrig
behavioral1/memory/2776-42-0x000000013F110000-0x000000013F464000-memory.dmp	xmrig
behavioral1/memory/2948-49-0x000000013F920000-0x000000013FC74000-memory.dmp	xmrig
behavioral1/files/0x0007000000015677-41.dat	xmrig
behavioral1/memory/2656-40-0x000000013F260000-0x000000013F5B4000-memory.dmp	xmrig
behavioral1/files/0x0007000000015653-37.dat	xmrig
behavioral1/files/0x000700000001565d-34.dat	xmrig
behavioral1/memory/2932-15-0x000000013FFE0000-0x0000000140334000-memory.dmp	xmrig
behavioral1/memory/2036-4033-0x000000013FBD0000-0x000000013FF24000-memory.dmp	xmrig
behavioral1/memory/2932-4034-0x000000013FFE0000-0x0000000140334000-memory.dmp	xmrig
behavioral1/memory/2572-4035-0x000000013F850000-0x000000013FBA4000-memory.dmp	xmrig
behavioral1/memory/2696-4036-0x000000013FE40000-0x0000000140194000-memory.dmp	xmrig
behavioral1/memory/2656-4037-0x000000013F260000-0x000000013F5B4000-memory.dmp	xmrig
behavioral1/memory/2376-4038-0x000000013F2A0000-0x000000013F5F4000-memory.dmp	xmrig
behavioral1/memory/2776-4039-0x000000013F110000-0x000000013F464000-memory.dmp	xmrig
behavioral1/memory/2472-4040-0x000000013FB70000-0x000000013FEC4000-memory.dmp	xmrig
behavioral1/memory/2464-4041-0x000000013FF40000-0x0000000140294000-memory.dmp	xmrig
behavioral1/memory/2908-4042-0x000000013F2E0000-0x000000013F634000-memory.dmp	xmrig
behavioral1/memory/2624-4043-0x000000013F520000-0x000000013F874000-memory.dmp	xmrig

Executes dropped EXE 64 IoCs

pid	Process
2036	IgQqkfH.exe
2932	kbdkppM.exe
2572	PxCVclZ.exe
2696	hBGlIEs.exe
2656	ZCUQPRk.exe
2776	nLYddQE.exe
2376	mMkGGAK.exe
2472	pmMWlYI.exe
2464	YVmrIqe.exe
2624	uPgjwHb.exe
2908	KzeSBzn.exe
2352	QfWQObk.exe
1580	JqPCOzX.exe
1508	piCpYAo.exe
2728	LcTiRap.exe
1740	FIFzEZz.exe
2208	TxMSfnp.exe
2196	UWhwSoS.exe
2044	ONIRrkL.exe
1036	drRKbVD.exe
2844	enDuCBh.exe
1396	IrhGSqo.exe
3048	QSgstNL.exe
2968	VisxJTs.exe
2404	PXYQqDk.exe
1688	nBgRvpt.exe
2796	lyUhHwV.exe
2140	DsUTOBf.exe
480	nVEhzYF.exe
1488	nlOWoFv.exe
1472	xWpBjQS.exe
912	CzfczMa.exe
1528	jTDdfVT.exe
452	NUIKhsD.exe
2392	BWMiJrh.exe
3028	xDLTmdE.exe
3020	NkOwshI.exe
1548	LOEWWpR.exe
1764	bRjAKtx.exe
1364	sgjdWhG.exe
988	SqUZnVE.exe
1644	RjsZvOa.exe
1872	DNFLRoh.exe
920	WtrnFLZ.exe
2116	nnmWbHn.exe
1248	GOyPrxb.exe
2236	biEKqJx.exe
1952	RRdGezy.exe
2812	yUlDwHF.exe
2192	zVScjLW.exe
2292	TlnJrUI.exe
1304	dYDodjb.exe
2936	YFpYLzl.exe
2820	vNztYZA.exe
2816	EcJPYPa.exe
1600	umUmkOR.exe
1588	qeZRAae.exe
2944	MjKGBhO.exe
2692	vhxpjNC.exe
2432	XLtglXd.exe
2636	HQyTiDm.exe
2680	zjItdex.exe
2000	HwoAiEp.exe
2596	nfqniva.exe

Loads dropped DLL 64 IoCs

pid	Process
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe

UPX packed file 64 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral1/memory/2948-0-0x000000013F920000-0x000000013FC74000-memory.dmp	upx
behavioral1/files/0x000c000000012674-3.dat	upx
behavioral1/files/0x0037000000014b4c-10.dat	upx
behavioral1/memory/2036-14-0x000000013FBD0000-0x000000013FF24000-memory.dmp	upx
behavioral1/files/0x000800000001564f-20.dat	upx
behavioral1/memory/2572-23-0x000000013F850000-0x000000013FBA4000-memory.dmp	upx
behavioral1/memory/2696-38-0x000000013FE40000-0x0000000140194000-memory.dmp	upx
behavioral1/files/0x0007000000015684-46.dat	upx
behavioral1/files/0x0008000000015d7f-50.dat	upx
behavioral1/files/0x0006000000015d87-53.dat	upx
behavioral1/files/0x0006000000015d93-69.dat	upx
behavioral1/memory/2908-79-0x000000013F2E0000-0x000000013F634000-memory.dmp	upx
behavioral1/files/0x000600000001610f-105.dat	upx
behavioral1/files/0x0006000000015fe5-96.dat	upx
behavioral1/files/0x0006000000016c64-154.dat	upx
behavioral1/files/0x0006000000016cdc-164.dat	upx
behavioral1/files/0x0006000000016d20-179.dat	upx
behavioral1/memory/2624-2722-0x000000013F520000-0x000000013F874000-memory.dmp	upx
behavioral1/memory/2776-357-0x000000013F110000-0x000000013F464000-memory.dmp	upx
behavioral1/files/0x0006000000016d3a-190.dat	upx
behavioral1/files/0x0006000000016d34-183.dat	upx
behavioral1/files/0x0006000000016d18-174.dat	upx
behavioral1/files/0x0006000000016d07-169.dat	upx
behavioral1/files/0x0006000000016cb0-159.dat	upx
behavioral1/files/0x0006000000016c5e-149.dat	upx
behavioral1/files/0x0006000000016c44-144.dat	upx
behavioral1/files/0x0006000000016adc-139.dat	upx
behavioral1/files/0x0006000000016851-133.dat	upx
behavioral1/files/0x0006000000016616-129.dat	upx
behavioral1/files/0x000600000001658a-124.dat	upx
behavioral1/files/0x00060000000164aa-119.dat	upx
behavioral1/files/0x000600000001630a-114.dat	upx
behavioral1/files/0x000600000001621e-109.dat	upx
behavioral1/memory/1508-101-0x000000013F440000-0x000000013F794000-memory.dmp	upx
behavioral1/memory/1580-93-0x000000013F860000-0x000000013FBB4000-memory.dmp	upx
behavioral1/memory/2352-86-0x000000013FA70000-0x000000013FDC4000-memory.dmp	upx
behavioral1/files/0x0006000000015f65-89.dat	upx
behavioral1/files/0x0006000000015ecc-82.dat	upx
behavioral1/memory/2624-70-0x000000013F520000-0x000000013F874000-memory.dmp	upx
behavioral1/files/0x0006000000015e32-74.dat	upx
behavioral1/memory/2464-68-0x000000013FF40000-0x0000000140294000-memory.dmp	upx
behavioral1/memory/2472-67-0x000000013FB70000-0x000000013FEC4000-memory.dmp	upx
behavioral1/memory/2376-61-0x000000013F2A0000-0x000000013F5F4000-memory.dmp	upx
behavioral1/memory/2776-42-0x000000013F110000-0x000000013F464000-memory.dmp	upx
behavioral1/memory/2948-49-0x000000013F920000-0x000000013FC74000-memory.dmp	upx
behavioral1/files/0x0007000000015677-41.dat	upx
behavioral1/memory/2656-40-0x000000013F260000-0x000000013F5B4000-memory.dmp	upx
behavioral1/files/0x0007000000015653-37.dat	upx
behavioral1/files/0x000700000001565d-34.dat	upx
behavioral1/memory/2932-15-0x000000013FFE0000-0x0000000140334000-memory.dmp	upx
behavioral1/memory/2036-4033-0x000000013FBD0000-0x000000013FF24000-memory.dmp	upx
behavioral1/memory/2932-4034-0x000000013FFE0000-0x0000000140334000-memory.dmp	upx
behavioral1/memory/2572-4035-0x000000013F850000-0x000000013FBA4000-memory.dmp	upx
behavioral1/memory/2696-4036-0x000000013FE40000-0x0000000140194000-memory.dmp	upx
behavioral1/memory/2656-4037-0x000000013F260000-0x000000013F5B4000-memory.dmp	upx
behavioral1/memory/2376-4038-0x000000013F2A0000-0x000000013F5F4000-memory.dmp	upx
behavioral1/memory/2776-4039-0x000000013F110000-0x000000013F464000-memory.dmp	upx
behavioral1/memory/2472-4040-0x000000013FB70000-0x000000013FEC4000-memory.dmp	upx
behavioral1/memory/2464-4041-0x000000013FF40000-0x0000000140294000-memory.dmp	upx
behavioral1/memory/2908-4042-0x000000013F2E0000-0x000000013F634000-memory.dmp	upx
behavioral1/memory/2624-4043-0x000000013F520000-0x000000013F874000-memory.dmp	upx
behavioral1/memory/2352-4044-0x000000013FA70000-0x000000013FDC4000-memory.dmp	upx
behavioral1/memory/1580-4045-0x000000013F860000-0x000000013FBB4000-memory.dmp	upx
behavioral1/memory/1508-4046-0x000000013F440000-0x000000013F794000-memory.dmp	upx

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\System\XMnjrqi.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\ojaElHH.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\bujUwOV.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\iiELyfJ.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\Ectilam.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\YwskbMP.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\ZPpiFIM.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\bxBEVmp.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\YGJdwec.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\mmreKCJ.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\xkZbYuq.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\rksRyzS.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\LPbrVER.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\IggVTJV.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\vLeAxyl.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\nNEEQsp.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\deoNcYa.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\tIWzvbD.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\nNnGJxh.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\nglbvYs.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\GvpYvsD.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\fpHpNLs.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\qKAqzXD.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\bQfGDsa.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\DZBbuKx.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\NwniXlk.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\UDeRhVL.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\xufnBPa.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\wKfAtcY.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\nlOWoFv.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\lmaGnPG.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\ylThniz.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\FpMYbMJ.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\OjUbGBn.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\NUIKhsD.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\SZBMJzz.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\inXWcOX.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\gDjHiyp.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\AJafhdU.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\tdUqFmw.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\PkrJWkC.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\uGBtzkR.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\TaKKnxN.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\zCyLnZx.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\bxRqSCD.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\XlBBPbk.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\MKZhBvU.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\sOzhigS.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\smesPru.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\JBeNWNg.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\FIFzEZz.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\xLCKhfb.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\JFdSQBe.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\QoABuQX.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\huRuxDt.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\lBcYJKL.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\WncWBsa.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\zEKLlNz.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\GtgOqxb.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\oGOVqUC.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\DIDShrq.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\bOiGpLt.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\wyOSJRz.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
File created	C:\Windows\System\NbWgyZZ.exe	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2948 wrote to memory of 2036	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	29
PID 2948 wrote to memory of 2036	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	29
PID 2948 wrote to memory of 2036	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	29
PID 2948 wrote to memory of 2932	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	30
PID 2948 wrote to memory of 2932	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	30
PID 2948 wrote to memory of 2932	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	30
PID 2948 wrote to memory of 2572	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	31
PID 2948 wrote to memory of 2572	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	31
PID 2948 wrote to memory of 2572	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	31
PID 2948 wrote to memory of 2656	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	32
PID 2948 wrote to memory of 2656	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	32
PID 2948 wrote to memory of 2656	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	32
PID 2948 wrote to memory of 2696	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	33
PID 2948 wrote to memory of 2696	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	33
PID 2948 wrote to memory of 2696	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	33
PID 2948 wrote to memory of 2776	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	34
PID 2948 wrote to memory of 2776	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	34
PID 2948 wrote to memory of 2776	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	34
PID 2948 wrote to memory of 2376	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	35
PID 2948 wrote to memory of 2376	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	35
PID 2948 wrote to memory of 2376	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	35
PID 2948 wrote to memory of 2464	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	36
PID 2948 wrote to memory of 2464	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	36
PID 2948 wrote to memory of 2464	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	36
PID 2948 wrote to memory of 2472	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	37
PID 2948 wrote to memory of 2472	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	37
PID 2948 wrote to memory of 2472	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	37
PID 2948 wrote to memory of 2624	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	38
PID 2948 wrote to memory of 2624	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	38
PID 2948 wrote to memory of 2624	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	38
PID 2948 wrote to memory of 2908	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	39
PID 2948 wrote to memory of 2908	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	39
PID 2948 wrote to memory of 2908	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	39
PID 2948 wrote to memory of 2352	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	40
PID 2948 wrote to memory of 2352	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	40
PID 2948 wrote to memory of 2352	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	40
PID 2948 wrote to memory of 1580	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	41
PID 2948 wrote to memory of 1580	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	41
PID 2948 wrote to memory of 1580	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	41
PID 2948 wrote to memory of 1508	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	42
PID 2948 wrote to memory of 1508	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	42
PID 2948 wrote to memory of 1508	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	42
PID 2948 wrote to memory of 2728	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	43
PID 2948 wrote to memory of 2728	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	43
PID 2948 wrote to memory of 2728	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	43
PID 2948 wrote to memory of 1740	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	44
PID 2948 wrote to memory of 1740	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	44
PID 2948 wrote to memory of 1740	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	44
PID 2948 wrote to memory of 2208	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	45
PID 2948 wrote to memory of 2208	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	45
PID 2948 wrote to memory of 2208	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	45
PID 2948 wrote to memory of 2196	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	46
PID 2948 wrote to memory of 2196	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	46
PID 2948 wrote to memory of 2196	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	46
PID 2948 wrote to memory of 2044	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	47
PID 2948 wrote to memory of 2044	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	47
PID 2948 wrote to memory of 2044	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	47
PID 2948 wrote to memory of 1036	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	48
PID 2948 wrote to memory of 1036	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	48
PID 2948 wrote to memory of 1036	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	48
PID 2948 wrote to memory of 2844	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	49
PID 2948 wrote to memory of 2844	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	49
PID 2948 wrote to memory of 2844	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	49
PID 2948 wrote to memory of 1396	2948	0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe	50

C:\Users\Admin\AppData\Local\Temp\0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\0a598457c2d098acb330506cf9b81e60_NeikiAnalytics.exe"
1⤵
- Loads dropped DLL
- Drops file in Windows directory
- Suspicious use of WriteProcessMemory
PID:2948
- C:\Windows\System\IgQqkfH.exe
  C:\Windows\System\IgQqkfH.exe
  2⤵
  - Executes dropped EXE
  PID:2036
- C:\Windows\System\kbdkppM.exe
  C:\Windows\System\kbdkppM.exe
  2⤵
  - Executes dropped EXE
  PID:2932
- C:\Windows\System\PxCVclZ.exe
  C:\Windows\System\PxCVclZ.exe
  2⤵
  - Executes dropped EXE
  PID:2572
- C:\Windows\System\ZCUQPRk.exe
  C:\Windows\System\ZCUQPRk.exe
  2⤵
  - Executes dropped EXE
  PID:2656
- C:\Windows\System\hBGlIEs.exe
  C:\Windows\System\hBGlIEs.exe
  2⤵
  - Executes dropped EXE
  PID:2696
- C:\Windows\System\nLYddQE.exe
  C:\Windows\System\nLYddQE.exe
  2⤵
  - Executes dropped EXE
  PID:2776
- C:\Windows\System\mMkGGAK.exe
  C:\Windows\System\mMkGGAK.exe
  2⤵
  - Executes dropped EXE
  PID:2376
- C:\Windows\System\YVmrIqe.exe
  C:\Windows\System\YVmrIqe.exe
  2⤵
  - Executes dropped EXE
  PID:2464
- C:\Windows\System\pmMWlYI.exe
  C:\Windows\System\pmMWlYI.exe
  2⤵
  - Executes dropped EXE
  PID:2472
- C:\Windows\System\uPgjwHb.exe
  C:\Windows\System\uPgjwHb.exe
  2⤵
  - Executes dropped EXE
  PID:2624
- C:\Windows\System\KzeSBzn.exe
  C:\Windows\System\KzeSBzn.exe
  2⤵
  - Executes dropped EXE
  PID:2908
- C:\Windows\System\QfWQObk.exe
  C:\Windows\System\QfWQObk.exe
  2⤵
  - Executes dropped EXE
  PID:2352
- C:\Windows\System\JqPCOzX.exe
  C:\Windows\System\JqPCOzX.exe
  2⤵
  - Executes dropped EXE
  PID:1580
- C:\Windows\System\piCpYAo.exe
  C:\Windows\System\piCpYAo.exe
  2⤵
  - Executes dropped EXE
  PID:1508
- C:\Windows\System\LcTiRap.exe
  C:\Windows\System\LcTiRap.exe
  2⤵
  - Executes dropped EXE
  PID:2728
- C:\Windows\System\FIFzEZz.exe
  C:\Windows\System\FIFzEZz.exe
  2⤵
  - Executes dropped EXE
  PID:1740
- C:\Windows\System\TxMSfnp.exe
  C:\Windows\System\TxMSfnp.exe
  2⤵
  - Executes dropped EXE
  PID:2208
- C:\Windows\System\UWhwSoS.exe
  C:\Windows\System\UWhwSoS.exe
  2⤵
  - Executes dropped EXE
  PID:2196
- C:\Windows\System\ONIRrkL.exe
  C:\Windows\System\ONIRrkL.exe
  2⤵
  - Executes dropped EXE
  PID:2044
- C:\Windows\System\drRKbVD.exe
  C:\Windows\System\drRKbVD.exe
  2⤵
  - Executes dropped EXE
  PID:1036
- C:\Windows\System\enDuCBh.exe
  C:\Windows\System\enDuCBh.exe
  2⤵
  - Executes dropped EXE
  PID:2844
- C:\Windows\System\IrhGSqo.exe
  C:\Windows\System\IrhGSqo.exe
  2⤵
  - Executes dropped EXE
  PID:1396
- C:\Windows\System\QSgstNL.exe
  C:\Windows\System\QSgstNL.exe
  2⤵
  - Executes dropped EXE
  PID:3048
- C:\Windows\System\VisxJTs.exe
  C:\Windows\System\VisxJTs.exe
  2⤵
  - Executes dropped EXE
  PID:2968
- C:\Windows\System\PXYQqDk.exe
  C:\Windows\System\PXYQqDk.exe
  2⤵
  - Executes dropped EXE
  PID:2404
- C:\Windows\System\nBgRvpt.exe
  C:\Windows\System\nBgRvpt.exe
  2⤵
  - Executes dropped EXE
  PID:1688
- C:\Windows\System\lyUhHwV.exe
  C:\Windows\System\lyUhHwV.exe
  2⤵
  - Executes dropped EXE
  PID:2796
- C:\Windows\System\DsUTOBf.exe
  C:\Windows\System\DsUTOBf.exe
  2⤵
  - Executes dropped EXE
  PID:2140
- C:\Windows\System\nVEhzYF.exe
  C:\Windows\System\nVEhzYF.exe
  2⤵
  - Executes dropped EXE
  PID:480
- C:\Windows\System\nlOWoFv.exe
  C:\Windows\System\nlOWoFv.exe
  2⤵
  - Executes dropped EXE
  PID:1488
- C:\Windows\System\xWpBjQS.exe
  C:\Windows\System\xWpBjQS.exe
  2⤵
  - Executes dropped EXE
  PID:1472
- C:\Windows\System\CzfczMa.exe
  C:\Windows\System\CzfczMa.exe
  2⤵
  - Executes dropped EXE
  PID:912
- C:\Windows\System\jTDdfVT.exe
  C:\Windows\System\jTDdfVT.exe
  2⤵
  - Executes dropped EXE
  PID:1528
- C:\Windows\System\NUIKhsD.exe
  C:\Windows\System\NUIKhsD.exe
  2⤵
  - Executes dropped EXE
  PID:452
- C:\Windows\System\BWMiJrh.exe
  C:\Windows\System\BWMiJrh.exe
  2⤵
  - Executes dropped EXE
  PID:2392
- C:\Windows\System\xDLTmdE.exe
  C:\Windows\System\xDLTmdE.exe
  2⤵
  - Executes dropped EXE
  PID:3028
- C:\Windows\System\NkOwshI.exe
  C:\Windows\System\NkOwshI.exe
  2⤵
  - Executes dropped EXE
  PID:3020
- C:\Windows\System\LOEWWpR.exe
  C:\Windows\System\LOEWWpR.exe
  2⤵
  - Executes dropped EXE
  PID:1548
- C:\Windows\System\bRjAKtx.exe
  C:\Windows\System\bRjAKtx.exe
  2⤵
  - Executes dropped EXE
  PID:1764
- C:\Windows\System\sgjdWhG.exe
  C:\Windows\System\sgjdWhG.exe
  2⤵
  - Executes dropped EXE
  PID:1364
- C:\Windows\System\SqUZnVE.exe
  C:\Windows\System\SqUZnVE.exe
  2⤵
  - Executes dropped EXE
  PID:988
- C:\Windows\System\RjsZvOa.exe
  C:\Windows\System\RjsZvOa.exe
  2⤵
  - Executes dropped EXE
  PID:1644
- C:\Windows\System\DNFLRoh.exe
  C:\Windows\System\DNFLRoh.exe
  2⤵
  - Executes dropped EXE
  PID:1872
- C:\Windows\System\WtrnFLZ.exe
  C:\Windows\System\WtrnFLZ.exe
  2⤵
  - Executes dropped EXE
  PID:920
- C:\Windows\System\nnmWbHn.exe
  C:\Windows\System\nnmWbHn.exe
  2⤵
  - Executes dropped EXE
  PID:2116
- C:\Windows\System\GOyPrxb.exe
  C:\Windows\System\GOyPrxb.exe
  2⤵
  - Executes dropped EXE
  PID:1248
- C:\Windows\System\biEKqJx.exe
  C:\Windows\System\biEKqJx.exe
  2⤵
  - Executes dropped EXE
  PID:2236
- C:\Windows\System\RRdGezy.exe
  C:\Windows\System\RRdGezy.exe
  2⤵
  - Executes dropped EXE
  PID:1952
- C:\Windows\System\yUlDwHF.exe
  C:\Windows\System\yUlDwHF.exe
  2⤵
  - Executes dropped EXE
  PID:2812
- C:\Windows\System\zVScjLW.exe
  C:\Windows\System\zVScjLW.exe
  2⤵
  - Executes dropped EXE
  PID:2192
- C:\Windows\System\TlnJrUI.exe
  C:\Windows\System\TlnJrUI.exe
  2⤵
  - Executes dropped EXE
  PID:2292
- C:\Windows\System\dYDodjb.exe
  C:\Windows\System\dYDodjb.exe
  2⤵
  - Executes dropped EXE
  PID:1304
- C:\Windows\System\YFpYLzl.exe
  C:\Windows\System\YFpYLzl.exe
  2⤵
  - Executes dropped EXE
  PID:2936
- C:\Windows\System\vNztYZA.exe
  C:\Windows\System\vNztYZA.exe
  2⤵
  - Executes dropped EXE
  PID:2820
- C:\Windows\System\EcJPYPa.exe
  C:\Windows\System\EcJPYPa.exe
  2⤵
  - Executes dropped EXE
  PID:2816
- C:\Windows\System\qeZRAae.exe
  C:\Windows\System\qeZRAae.exe
  2⤵
  - Executes dropped EXE
  PID:1588
- C:\Windows\System\umUmkOR.exe
  C:\Windows\System\umUmkOR.exe
  2⤵
  - Executes dropped EXE
  PID:1600
- C:\Windows\System\MjKGBhO.exe
  C:\Windows\System\MjKGBhO.exe
  2⤵
  - Executes dropped EXE
  PID:2944
- C:\Windows\System\vhxpjNC.exe
  C:\Windows\System\vhxpjNC.exe
  2⤵
  - Executes dropped EXE
  PID:2692
- C:\Windows\System\XLtglXd.exe
  C:\Windows\System\XLtglXd.exe
  2⤵
  - Executes dropped EXE
  PID:2432
- C:\Windows\System\HQyTiDm.exe
  C:\Windows\System\HQyTiDm.exe
  2⤵
  - Executes dropped EXE
  PID:2636
- C:\Windows\System\zjItdex.exe
  C:\Windows\System\zjItdex.exe
  2⤵
  - Executes dropped EXE
  PID:2680
- C:\Windows\System\HwoAiEp.exe
  C:\Windows\System\HwoAiEp.exe
  2⤵
  - Executes dropped EXE
  PID:2000
- C:\Windows\System\nfqniva.exe
  C:\Windows\System\nfqniva.exe
  2⤵
  - Executes dropped EXE
  PID:2596
- C:\Windows\System\evYlzDg.exe
  C:\Windows\System\evYlzDg.exe
  2⤵
  PID:1524
- C:\Windows\System\XsBlxXU.exe
  C:\Windows\System\XsBlxXU.exe
  2⤵
  PID:1796
- C:\Windows\System\ojaElHH.exe
  C:\Windows\System\ojaElHH.exe
  2⤵
  PID:2720
- C:\Windows\System\MwjzXwz.exe
  C:\Windows\System\MwjzXwz.exe
  2⤵
  PID:1732
- C:\Windows\System\BbITaZk.exe
  C:\Windows\System\BbITaZk.exe
  2⤵
  PID:2320
- C:\Windows\System\xkZbYuq.exe
  C:\Windows\System\xkZbYuq.exe
  2⤵
  PID:296
- C:\Windows\System\JkyqOmP.exe
  C:\Windows\System\JkyqOmP.exe
  2⤵
  PID:2864
- C:\Windows\System\yVWKxvn.exe
  C:\Windows\System\yVWKxvn.exe
  2⤵
  PID:1916
- C:\Windows\System\rWxLzzb.exe
  C:\Windows\System\rWxLzzb.exe
  2⤵
  PID:2788
- C:\Windows\System\vfuyOXn.exe
  C:\Windows\System\vfuyOXn.exe
  2⤵
  PID:676
- C:\Windows\System\BhTUMYU.exe
  C:\Windows\System\BhTUMYU.exe
  2⤵
  PID:692
- C:\Windows\System\SvpSUfM.exe
  C:\Windows\System\SvpSUfM.exe
  2⤵
  PID:1856
- C:\Windows\System\WgpDwnV.exe
  C:\Windows\System\WgpDwnV.exe
  2⤵
  PID:1860
- C:\Windows\System\OrvUhky.exe
  C:\Windows\System\OrvUhky.exe
  2⤵
  PID:2996
- C:\Windows\System\DSUSKmz.exe
  C:\Windows\System\DSUSKmz.exe
  2⤵
  PID:880
- C:\Windows\System\Lixbpjh.exe
  C:\Windows\System\Lixbpjh.exe
  2⤵
  PID:1340
- C:\Windows\System\NNSHxsn.exe
  C:\Windows\System\NNSHxsn.exe
  2⤵
  PID:956
- C:\Windows\System\BZFbSQy.exe
  C:\Windows\System\BZFbSQy.exe
  2⤵
  PID:740
- C:\Windows\System\bujUwOV.exe
  C:\Windows\System\bujUwOV.exe
  2⤵
  PID:332
- C:\Windows\System\WvTlXzA.exe
  C:\Windows\System\WvTlXzA.exe
  2⤵
  PID:2916
- C:\Windows\System\kdsOYTM.exe
  C:\Windows\System\kdsOYTM.exe
  2⤵
  PID:1752
- C:\Windows\System\HgwOmWt.exe
  C:\Windows\System\HgwOmWt.exe
  2⤵
  PID:784
- C:\Windows\System\vTlfxeG.exe
  C:\Windows\System\vTlfxeG.exe
  2⤵
  PID:1924
- C:\Windows\System\JjlnrCd.exe
  C:\Windows\System\JjlnrCd.exe
  2⤵
  PID:1984
- C:\Windows\System\aUEvboY.exe
  C:\Windows\System\aUEvboY.exe
  2⤵
  PID:2244
- C:\Windows\System\MnzkCQl.exe
  C:\Windows\System\MnzkCQl.exe
  2⤵
  PID:2980
- C:\Windows\System\zmHDAYC.exe
  C:\Windows\System\zmHDAYC.exe
  2⤵
  PID:1604
- C:\Windows\System\ealUzvt.exe
  C:\Windows\System\ealUzvt.exe
  2⤵
  PID:2644
- C:\Windows\System\qdiUmRm.exe
  C:\Windows\System\qdiUmRm.exe
  2⤵
  PID:2612
- C:\Windows\System\NrOEPjP.exe
  C:\Windows\System\NrOEPjP.exe
  2⤵
  PID:2620
- C:\Windows\System\RtADuVU.exe
  C:\Windows\System\RtADuVU.exe
  2⤵
  PID:2676
- C:\Windows\System\JyPaMeu.exe
  C:\Windows\System\JyPaMeu.exe
  2⤵
  PID:2504
- C:\Windows\System\UOluhZL.exe
  C:\Windows\System\UOluhZL.exe
  2⤵
  PID:1628
- C:\Windows\System\atvqMwI.exe
  C:\Windows\System\atvqMwI.exe
  2⤵
  PID:1696
- C:\Windows\System\oYojKfb.exe
  C:\Windows\System\oYojKfb.exe
  2⤵
  PID:2672
- C:\Windows\System\ukvLUUi.exe
  C:\Windows\System\ukvLUUi.exe
  2⤵
  PID:1328
- C:\Windows\System\ixEzjtK.exe
  C:\Windows\System\ixEzjtK.exe
  2⤵
  PID:996
- C:\Windows\System\fmLNbHF.exe
  C:\Windows\System\fmLNbHF.exe
  2⤵
  PID:1756
- C:\Windows\System\NhmoaOw.exe
  C:\Windows\System\NhmoaOw.exe
  2⤵
  PID:2848
- C:\Windows\System\wIjnfzE.exe
  C:\Windows\System\wIjnfzE.exe
  2⤵
  PID:2804
- C:\Windows\System\gnEaWHE.exe
  C:\Windows\System\gnEaWHE.exe
  2⤵
  PID:328
- C:\Windows\System\YpoFCBr.exe
  C:\Windows\System\YpoFCBr.exe
  2⤵
  PID:2372
- C:\Windows\System\GtgOqxb.exe
  C:\Windows\System\GtgOqxb.exe
  2⤵
  PID:1776
- C:\Windows\System\TPasvtv.exe
  C:\Windows\System\TPasvtv.exe
  2⤵
  PID:1828
- C:\Windows\System\fVrhZjd.exe
  C:\Windows\System\fVrhZjd.exe
  2⤵
  PID:1292
- C:\Windows\System\PRziwoG.exe
  C:\Windows\System\PRziwoG.exe
  2⤵
  PID:1072
- C:\Windows\System\MMbAdFe.exe
  C:\Windows\System\MMbAdFe.exe
  2⤵
  PID:2492
- C:\Windows\System\QRCvdgf.exe
  C:\Windows\System\QRCvdgf.exe
  2⤵
  PID:1324
- C:\Windows\System\STxKhky.exe
  C:\Windows\System\STxKhky.exe
  2⤵
  PID:2176
- C:\Windows\System\KjOurgq.exe
  C:\Windows\System\KjOurgq.exe
  2⤵
  PID:2088
- C:\Windows\System\qucmejv.exe
  C:\Windows\System\qucmejv.exe
  2⤵
  PID:1012
- C:\Windows\System\PYDwnNo.exe
  C:\Windows\System\PYDwnNo.exe
  2⤵
  PID:3040
- C:\Windows\System\WOPRqhV.exe
  C:\Windows\System\WOPRqhV.exe
  2⤵
  PID:2684
- C:\Windows\System\UOYKwYp.exe
  C:\Windows\System\UOYKwYp.exe
  2⤵
  PID:496
- C:\Windows\System\SPeaoOK.exe
  C:\Windows\System\SPeaoOK.exe
  2⤵
  PID:3044
- C:\Windows\System\lrZmaCK.exe
  C:\Windows\System\lrZmaCK.exe
  2⤵
  PID:2564
- C:\Windows\System\hVXVzlC.exe
  C:\Windows\System\hVXVzlC.exe
  2⤵
  PID:2316
- C:\Windows\System\VADCqKo.exe
  C:\Windows\System\VADCqKo.exe
  2⤵
  PID:2584
- C:\Windows\System\mcVXdsY.exe
  C:\Windows\System\mcVXdsY.exe
  2⤵
  PID:2604
- C:\Windows\System\xqXxfEl.exe
  C:\Windows\System\xqXxfEl.exe
  2⤵
  PID:3076
- C:\Windows\System\NfsQgyX.exe
  C:\Windows\System\NfsQgyX.exe
  2⤵
  PID:3100
- C:\Windows\System\FfASOnO.exe
  C:\Windows\System\FfASOnO.exe
  2⤵
  PID:3116
- C:\Windows\System\FSxrYNi.exe
  C:\Windows\System\FSxrYNi.exe
  2⤵
  PID:3132
- C:\Windows\System\UMbWhFg.exe
  C:\Windows\System\UMbWhFg.exe
  2⤵
  PID:3148
- C:\Windows\System\sIzUoLL.exe
  C:\Windows\System\sIzUoLL.exe
  2⤵
  PID:3164
- C:\Windows\System\DugswoF.exe
  C:\Windows\System\DugswoF.exe
  2⤵
  PID:3180
- C:\Windows\System\FBMgekh.exe
  C:\Windows\System\FBMgekh.exe
  2⤵
  PID:3200
- C:\Windows\System\qQNFjvM.exe
  C:\Windows\System\qQNFjvM.exe
  2⤵
  PID:3216
- C:\Windows\System\GOHrjdA.exe
  C:\Windows\System\GOHrjdA.exe
  2⤵
  PID:3244
- C:\Windows\System\foGYvlh.exe
  C:\Windows\System\foGYvlh.exe
  2⤵
  PID:3260
- C:\Windows\System\WyJqjND.exe
  C:\Windows\System\WyJqjND.exe
  2⤵
  PID:3276
- C:\Windows\System\hNJnuyB.exe
  C:\Windows\System\hNJnuyB.exe
  2⤵
  PID:3292
- C:\Windows\System\dhivXPM.exe
  C:\Windows\System\dhivXPM.exe
  2⤵
  PID:3308
- C:\Windows\System\aoyrrpP.exe
  C:\Windows\System\aoyrrpP.exe
  2⤵
  PID:3324
- C:\Windows\System\UYjUGwI.exe
  C:\Windows\System\UYjUGwI.exe
  2⤵
  PID:3340
- C:\Windows\System\CSnHDPD.exe
  C:\Windows\System\CSnHDPD.exe
  2⤵
  PID:3356
- C:\Windows\System\NjNNOFD.exe
  C:\Windows\System\NjNNOFD.exe
  2⤵
  PID:3372
- C:\Windows\System\rTMCuxm.exe
  C:\Windows\System\rTMCuxm.exe
  2⤵
  PID:3388
- C:\Windows\System\yThNAaq.exe
  C:\Windows\System\yThNAaq.exe
  2⤵
  PID:3404
- C:\Windows\System\LBEWtnL.exe
  C:\Windows\System\LBEWtnL.exe
  2⤵
  PID:3420
- C:\Windows\System\PbwrsaK.exe
  C:\Windows\System\PbwrsaK.exe
  2⤵
  PID:3436
- C:\Windows\System\rksRyzS.exe
  C:\Windows\System\rksRyzS.exe
  2⤵
  PID:3452
- C:\Windows\System\oXvUDzw.exe
  C:\Windows\System\oXvUDzw.exe
  2⤵
  PID:3468
- C:\Windows\System\dOuLohY.exe
  C:\Windows\System\dOuLohY.exe
  2⤵
  PID:3484
- C:\Windows\System\iAfHQMq.exe
  C:\Windows\System\iAfHQMq.exe
  2⤵
  PID:3500
- C:\Windows\System\tMIJwdV.exe
  C:\Windows\System\tMIJwdV.exe
  2⤵
  PID:3516
- C:\Windows\System\xLCKhfb.exe
  C:\Windows\System\xLCKhfb.exe
  2⤵
  PID:3532
- C:\Windows\System\eYBWlvt.exe
  C:\Windows\System\eYBWlvt.exe
  2⤵
  PID:3548
- C:\Windows\System\JlTXWWL.exe
  C:\Windows\System\JlTXWWL.exe
  2⤵
  PID:3564
- C:\Windows\System\ODFMhpJ.exe
  C:\Windows\System\ODFMhpJ.exe
  2⤵
  PID:3580
- C:\Windows\System\mbIWsyi.exe
  C:\Windows\System\mbIWsyi.exe
  2⤵
  PID:3596
- C:\Windows\System\zTDcSxd.exe
  C:\Windows\System\zTDcSxd.exe
  2⤵
  PID:3612
- C:\Windows\System\XQXlUpP.exe
  C:\Windows\System\XQXlUpP.exe
  2⤵
  PID:3736
- C:\Windows\System\HFiIUyh.exe
  C:\Windows\System\HFiIUyh.exe
  2⤵
  PID:3804
- C:\Windows\System\bHvdTGI.exe
  C:\Windows\System\bHvdTGI.exe
  2⤵
  PID:3820
- C:\Windows\System\qVZmAPm.exe
  C:\Windows\System\qVZmAPm.exe
  2⤵
  PID:3840
- C:\Windows\System\zLPHAuR.exe
  C:\Windows\System\zLPHAuR.exe
  2⤵
  PID:3856
- C:\Windows\System\dHQjfeY.exe
  C:\Windows\System\dHQjfeY.exe
  2⤵
  PID:3884
- C:\Windows\System\IqdOedx.exe
  C:\Windows\System\IqdOedx.exe
  2⤵
  PID:3904
- C:\Windows\System\pwUDoLW.exe
  C:\Windows\System\pwUDoLW.exe
  2⤵
  PID:3920
- C:\Windows\System\PqVopRc.exe
  C:\Windows\System\PqVopRc.exe
  2⤵
  PID:3944
- C:\Windows\System\LlzAhew.exe
  C:\Windows\System\LlzAhew.exe
  2⤵
  PID:3964
- C:\Windows\System\mNkwwfk.exe
  C:\Windows\System\mNkwwfk.exe
  2⤵
  PID:3980
- C:\Windows\System\SsVrfsJ.exe
  C:\Windows\System\SsVrfsJ.exe
  2⤵
  PID:3996
- C:\Windows\System\dfVqCpu.exe
  C:\Windows\System\dfVqCpu.exe
  2⤵
  PID:4016
- C:\Windows\System\LJNvhTB.exe
  C:\Windows\System\LJNvhTB.exe
  2⤵
  PID:4040
- C:\Windows\System\zKNCmIi.exe
  C:\Windows\System\zKNCmIi.exe
  2⤵
  PID:4060
- C:\Windows\System\nPlqPca.exe
  C:\Windows\System\nPlqPca.exe
  2⤵
  PID:4080
- C:\Windows\System\chOTGfj.exe
  C:\Windows\System\chOTGfj.exe
  2⤵
  PID:1736
- C:\Windows\System\vZMfybj.exe
  C:\Windows\System\vZMfybj.exe
  2⤵
  PID:2104
- C:\Windows\System\tcixiZg.exe
  C:\Windows\System\tcixiZg.exe
  2⤵
  PID:2168
- C:\Windows\System\IrpLXUT.exe
  C:\Windows\System\IrpLXUT.exe
  2⤵
  PID:2960
- C:\Windows\System\ZxVcSGQ.exe
  C:\Windows\System\ZxVcSGQ.exe
  2⤵
  PID:1356
- C:\Windows\System\PqseOwB.exe
  C:\Windows\System\PqseOwB.exe
  2⤵
  PID:1748
- C:\Windows\System\inECJJa.exe
  C:\Windows\System\inECJJa.exe
  2⤵
  PID:2008
- C:\Windows\System\cuvAzQX.exe
  C:\Windows\System\cuvAzQX.exe
  2⤵
  PID:3140
- C:\Windows\System\dkHLste.exe
  C:\Windows\System\dkHLste.exe
  2⤵
  PID:3208
- C:\Windows\System\DlSHIhL.exe
  C:\Windows\System\DlSHIhL.exe
  2⤵
  PID:2616
- C:\Windows\System\cgwAJJE.exe
  C:\Windows\System\cgwAJJE.exe
  2⤵
  PID:3096
- C:\Windows\System\xdEQjoe.exe
  C:\Windows\System\xdEQjoe.exe
  2⤵
  PID:3160
- C:\Windows\System\aDzwWaW.exe
  C:\Windows\System\aDzwWaW.exe
  2⤵
  PID:3224
- C:\Windows\System\EBajzPS.exe
  C:\Windows\System\EBajzPS.exe
  2⤵
  PID:3236
- C:\Windows\System\FvsnPaL.exe
  C:\Windows\System\FvsnPaL.exe
  2⤵
  PID:3256
- C:\Windows\System\OgZJmIy.exe
  C:\Windows\System\OgZJmIy.exe
  2⤵
  PID:3272
- C:\Windows\System\JMMgiHo.exe
  C:\Windows\System\JMMgiHo.exe
  2⤵
  PID:2940
- C:\Windows\System\SdUDPhR.exe
  C:\Windows\System\SdUDPhR.exe
  2⤵
  PID:3336
- C:\Windows\System\lzeHnPB.exe
  C:\Windows\System\lzeHnPB.exe
  2⤵
  PID:2928
- C:\Windows\System\lJWHvFm.exe
  C:\Windows\System\lJWHvFm.exe
  2⤵
  PID:3384
- C:\Windows\System\dQQqCow.exe
  C:\Windows\System\dQQqCow.exe
  2⤵
  PID:3400
- C:\Windows\System\MgcoxQG.exe
  C:\Windows\System\MgcoxQG.exe
  2⤵
  PID:3432
- C:\Windows\System\ocFFdDX.exe
  C:\Windows\System\ocFFdDX.exe
  2⤵
  PID:3464
- C:\Windows\System\jrMHdrw.exe
  C:\Windows\System\jrMHdrw.exe
  2⤵
  PID:3496
- C:\Windows\System\FBxBLUF.exe
  C:\Windows\System\FBxBLUF.exe
  2⤵
  PID:2540
- C:\Windows\System\deoNcYa.exe
  C:\Windows\System\deoNcYa.exe
  2⤵
  PID:3556
- C:\Windows\System\TbLiNNE.exe
  C:\Windows\System\TbLiNNE.exe
  2⤵
  PID:3604
- C:\Windows\System\aaWeuMe.exe
  C:\Windows\System\aaWeuMe.exe
  2⤵
  PID:3620
- C:\Windows\System\pOqbzLg.exe
  C:\Windows\System\pOqbzLg.exe
  2⤵
  PID:3660
- C:\Windows\System\qKAqzXD.exe
  C:\Windows\System\qKAqzXD.exe
  2⤵
  PID:3684
- C:\Windows\System\lodFMfZ.exe
  C:\Windows\System\lodFMfZ.exe
  2⤵
  PID:3700
- C:\Windows\System\CDikXkY.exe
  C:\Windows\System\CDikXkY.exe
  2⤵
  PID:3716
- C:\Windows\System\ImLlmih.exe
  C:\Windows\System\ImLlmih.exe
  2⤵
  PID:3732
- C:\Windows\System\PNGHVjx.exe
  C:\Windows\System\PNGHVjx.exe
  2⤵
  PID:2552
- C:\Windows\System\JnbYfHc.exe
  C:\Windows\System\JnbYfHc.exe
  2⤵
  PID:3744
- C:\Windows\System\jdAihOu.exe
  C:\Windows\System\jdAihOu.exe
  2⤵
  PID:3784
- C:\Windows\System\bsCUsME.exe
  C:\Windows\System\bsCUsME.exe
  2⤵
  PID:3800
- C:\Windows\System\bTlkxgF.exe
  C:\Windows\System\bTlkxgF.exe
  2⤵
  PID:3828
- C:\Windows\System\XlWaReP.exe
  C:\Windows\System\XlWaReP.exe
  2⤵
  PID:3832
- C:\Windows\System\kYAlaMK.exe
  C:\Windows\System\kYAlaMK.exe
  2⤵
  PID:3872
- C:\Windows\System\OUouAbk.exe
  C:\Windows\System\OUouAbk.exe
  2⤵
  PID:592
- C:\Windows\System\GPbQrOb.exe
  C:\Windows\System\GPbQrOb.exe
  2⤵
  PID:3912
- C:\Windows\System\HlrcrhC.exe
  C:\Windows\System\HlrcrhC.exe
  2⤵
  PID:2064
- C:\Windows\System\xyiLViW.exe
  C:\Windows\System\xyiLViW.exe
  2⤵
  PID:3932
- C:\Windows\System\CrjlGxz.exe
  C:\Windows\System\CrjlGxz.exe
  2⤵
  PID:3960
- C:\Windows\System\SvJWTVx.exe
  C:\Windows\System\SvJWTVx.exe
  2⤵
  PID:4008
- C:\Windows\System\blgWnQn.exe
  C:\Windows\System\blgWnQn.exe
  2⤵
  PID:4004
- C:\Windows\System\AWZsNQY.exe
  C:\Windows\System\AWZsNQY.exe
  2⤵
  PID:4036
- C:\Windows\System\hBGzykV.exe
  C:\Windows\System\hBGzykV.exe
  2⤵
  PID:4052
- C:\Windows\System\nsThWKp.exe
  C:\Windows\System\nsThWKp.exe
  2⤵
  PID:4048
- C:\Windows\System\lPmKswO.exe
  C:\Windows\System\lPmKswO.exe
  2⤵
  PID:1960
- C:\Windows\System\QRJjgrv.exe
  C:\Windows\System\QRJjgrv.exe
  2⤵
  PID:1336
- C:\Windows\System\ZahLlvG.exe
  C:\Windows\System\ZahLlvG.exe
  2⤵
  PID:3112
- C:\Windows\System\YCDXMnd.exe
  C:\Windows\System\YCDXMnd.exe
  2⤵
  PID:2096
- C:\Windows\System\hJQuxaP.exe
  C:\Windows\System\hJQuxaP.exe
  2⤵
  PID:3196
- C:\Windows\System\vGJjkgd.exe
  C:\Windows\System\vGJjkgd.exe
  2⤵
  PID:3304
- C:\Windows\System\SUvSzDe.exe
  C:\Windows\System\SUvSzDe.exe
  2⤵
  PID:2688
- C:\Windows\System\xqiTUSd.exe
  C:\Windows\System\xqiTUSd.exe
  2⤵
  PID:2744
- C:\Windows\System\qzCLPRr.exe
  C:\Windows\System\qzCLPRr.exe
  2⤵
  PID:1216
- C:\Windows\System\pGVwHnb.exe
  C:\Windows\System\pGVwHnb.exe
  2⤵
  PID:3268
- C:\Windows\System\lmaGnPG.exe
  C:\Windows\System\lmaGnPG.exe
  2⤵
  PID:3444
- C:\Windows\System\nFcmSIP.exe
  C:\Windows\System\nFcmSIP.exe
  2⤵
  PID:2568
- C:\Windows\System\cIQoEqt.exe
  C:\Windows\System\cIQoEqt.exe
  2⤵
  PID:2700
- C:\Windows\System\LysGAbx.exe
  C:\Windows\System\LysGAbx.exe
  2⤵
  PID:2220
- C:\Windows\System\aIrtaVJ.exe
  C:\Windows\System\aIrtaVJ.exe
  2⤵
  PID:3512
- C:\Windows\System\GRtpZPj.exe
  C:\Windows\System\GRtpZPj.exe
  2⤵
  PID:2232
- C:\Windows\System\tDqeLnB.exe
  C:\Windows\System\tDqeLnB.exe
  2⤵
  PID:3676
- C:\Windows\System\NlDroKb.exe
  C:\Windows\System\NlDroKb.exe
  2⤵
  PID:3724
- C:\Windows\System\jlGaJEF.exe
  C:\Windows\System\jlGaJEF.exe
  2⤵
  PID:2136
- C:\Windows\System\lWUIBnx.exe
  C:\Windows\System\lWUIBnx.exe
  2⤵
  PID:1420
- C:\Windows\System\oNCevtV.exe
  C:\Windows\System\oNCevtV.exe
  2⤵
  PID:3776
- C:\Windows\System\gDMYErs.exe
  C:\Windows\System\gDMYErs.exe
  2⤵
  PID:2724
- C:\Windows\System\hOJHVjW.exe
  C:\Windows\System\hOJHVjW.exe
  2⤵
  PID:300
- C:\Windows\System\WHgseRR.exe
  C:\Windows\System\WHgseRR.exe
  2⤵
  PID:3792
- C:\Windows\System\BHxCvZk.exe
  C:\Windows\System\BHxCvZk.exe
  2⤵
  PID:2216
- C:\Windows\System\aTEcPZj.exe
  C:\Windows\System\aTEcPZj.exe
  2⤵
  PID:1164
- C:\Windows\System\Dfbzffc.exe
  C:\Windows\System\Dfbzffc.exe
  2⤵
  PID:3992
- C:\Windows\System\UzrhKuk.exe
  C:\Windows\System\UzrhKuk.exe
  2⤵
  PID:4076
- C:\Windows\System\yvgksnW.exe
  C:\Windows\System\yvgksnW.exe
  2⤵
  PID:2364
- C:\Windows\System\OxDtWOe.exe
  C:\Windows\System\OxDtWOe.exe
  2⤵
  PID:352
- C:\Windows\System\FtVtjLR.exe
  C:\Windows\System\FtVtjLR.exe
  2⤵
  PID:2420
- C:\Windows\System\GqpjdDu.exe
  C:\Windows\System\GqpjdDu.exe
  2⤵
  PID:1300
- C:\Windows\System\dLzePRi.exe
  C:\Windows\System\dLzePRi.exe
  2⤵
  PID:3156
- C:\Windows\System\HMDRfEM.exe
  C:\Windows\System\HMDRfEM.exe
  2⤵
  PID:876
- C:\Windows\System\xXcUhSr.exe
  C:\Windows\System\xXcUhSr.exe
  2⤵
  PID:3460
- C:\Windows\System\SLqizmK.exe
  C:\Windows\System\SLqizmK.exe
  2⤵
  PID:3864
- C:\Windows\System\znDdsGZ.exe
  C:\Windows\System\znDdsGZ.exe
  2⤵
  PID:2412
- C:\Windows\System\HpuIYwW.exe
  C:\Windows\System\HpuIYwW.exe
  2⤵
  PID:2084
- C:\Windows\System\MyNAWtF.exe
  C:\Windows\System\MyNAWtF.exe
  2⤵
  PID:2648
- C:\Windows\System\NKaWmgm.exe
  C:\Windows\System\NKaWmgm.exe
  2⤵
  PID:4056
- C:\Windows\System\ymOBFZs.exe
  C:\Windows\System\ymOBFZs.exe
  2⤵
  PID:3540
- C:\Windows\System\nLVuhtM.exe
  C:\Windows\System\nLVuhtM.exe
  2⤵
  PID:3588
- C:\Windows\System\xufrJFd.exe
  C:\Windows\System\xufrJFd.exe
  2⤵
  PID:540
- C:\Windows\System\bxRKiKv.exe
  C:\Windows\System\bxRKiKv.exe
  2⤵
  PID:2444
- C:\Windows\System\PkNLYkK.exe
  C:\Windows\System\PkNLYkK.exe
  2⤵
  PID:812
- C:\Windows\System\hgVVkhD.exe
  C:\Windows\System\hgVVkhD.exe
  2⤵
  PID:3088
- C:\Windows\System\FyLPeJv.exe
  C:\Windows\System\FyLPeJv.exe
  2⤵
  PID:3128
- C:\Windows\System\OBTsMFy.exe
  C:\Windows\System\OBTsMFy.exe
  2⤵
  PID:3900
- C:\Windows\System\aeMbXUL.exe
  C:\Windows\System\aeMbXUL.exe
  2⤵
  PID:4032
- C:\Windows\System\BFrjQco.exe
  C:\Windows\System\BFrjQco.exe
  2⤵
  PID:1536
- C:\Windows\System\ffsnJLs.exe
  C:\Windows\System\ffsnJLs.exe
  2⤵
  PID:1624
- C:\Windows\System\PHQcOEZ.exe
  C:\Windows\System\PHQcOEZ.exe
  2⤵
  PID:2632
- C:\Windows\System\bQfGDsa.exe
  C:\Windows\System\bQfGDsa.exe
  2⤵
  PID:3316
- C:\Windows\System\CIbWhwu.exe
  C:\Windows\System\CIbWhwu.exe
  2⤵
  PID:3728
- C:\Windows\System\mlDSfpv.exe
  C:\Windows\System\mlDSfpv.exe
  2⤵
  PID:3780
- C:\Windows\System\OgjiXPL.exe
  C:\Windows\System\OgjiXPL.exe
  2⤵
  PID:2388
- C:\Windows\System\HSVGpDz.exe
  C:\Windows\System\HSVGpDz.exe
  2⤵
  PID:3868
- C:\Windows\System\ZpOihdi.exe
  C:\Windows\System\ZpOihdi.exe
  2⤵
  PID:4024
- C:\Windows\System\atnAnsq.exe
  C:\Windows\System\atnAnsq.exe
  2⤵
  PID:3084
- C:\Windows\System\efnBkjJ.exe
  C:\Windows\System\efnBkjJ.exe
  2⤵
  PID:3764
- C:\Windows\System\UTxUZQg.exe
  C:\Windows\System\UTxUZQg.exe
  2⤵
  PID:1476
- C:\Windows\System\oYPIyoM.exe
  C:\Windows\System\oYPIyoM.exe
  2⤵
  PID:2356
- C:\Windows\System\AuDvSFC.exe
  C:\Windows\System\AuDvSFC.exe
  2⤵
  PID:3172
- C:\Windows\System\zDrFVjX.exe
  C:\Windows\System\zDrFVjX.exe
  2⤵
  PID:2124
- C:\Windows\System\juNyHDu.exe
  C:\Windows\System\juNyHDu.exe
  2⤵
  PID:2328
- C:\Windows\System\rFvPeZj.exe
  C:\Windows\System\rFvPeZj.exe
  2⤵
  PID:3176
- C:\Windows\System\nQTOmRI.exe
  C:\Windows\System\nQTOmRI.exe
  2⤵
  PID:2732
- C:\Windows\System\xtJwRmu.exe
  C:\Windows\System\xtJwRmu.exe
  2⤵
  PID:3288
- C:\Windows\System\rhKErSd.exe
  C:\Windows\System\rhKErSd.exe
  2⤵
  PID:2600
- C:\Windows\System\pzBKWNy.exe
  C:\Windows\System\pzBKWNy.exe
  2⤵
  PID:4092
- C:\Windows\System\mnIybLN.exe
  C:\Windows\System\mnIybLN.exe
  2⤵
  PID:4100
- C:\Windows\System\bmaBZWH.exe
  C:\Windows\System\bmaBZWH.exe
  2⤵
  PID:4128
- C:\Windows\System\xQpynEU.exe
  C:\Windows\System\xQpynEU.exe
  2⤵
  PID:4144
- C:\Windows\System\crrjRpJ.exe
  C:\Windows\System\crrjRpJ.exe
  2⤵
  PID:4160
- C:\Windows\System\YTPduLg.exe
  C:\Windows\System\YTPduLg.exe
  2⤵
  PID:4180
- C:\Windows\System\JdajLXS.exe
  C:\Windows\System\JdajLXS.exe
  2⤵
  PID:4200
- C:\Windows\System\HPVfeGI.exe
  C:\Windows\System\HPVfeGI.exe
  2⤵
  PID:4216
- C:\Windows\System\eULvWnd.exe
  C:\Windows\System\eULvWnd.exe
  2⤵
  PID:4236
- C:\Windows\System\ptryBKb.exe
  C:\Windows\System\ptryBKb.exe
  2⤵
  PID:4252
- C:\Windows\System\dvvyiwN.exe
  C:\Windows\System\dvvyiwN.exe
  2⤵
  PID:4276
- C:\Windows\System\ARhzmQk.exe
  C:\Windows\System\ARhzmQk.exe
  2⤵
  PID:4300
- C:\Windows\System\HHnWAbQ.exe
  C:\Windows\System\HHnWAbQ.exe
  2⤵
  PID:4320
- C:\Windows\System\QsuAhos.exe
  C:\Windows\System\QsuAhos.exe
  2⤵
  PID:4336
- C:\Windows\System\IzaPKkJ.exe
  C:\Windows\System\IzaPKkJ.exe
  2⤵
  PID:4356
- C:\Windows\System\KAGRUBA.exe
  C:\Windows\System\KAGRUBA.exe
  2⤵
  PID:4372
- C:\Windows\System\ADNPBzL.exe
  C:\Windows\System\ADNPBzL.exe
  2⤵
  PID:4392
- C:\Windows\System\iEmghxv.exe
  C:\Windows\System\iEmghxv.exe
  2⤵
  PID:4408
- C:\Windows\System\vUZIQnY.exe
  C:\Windows\System\vUZIQnY.exe
  2⤵
  PID:4428
- C:\Windows\System\pKzYSSb.exe
  C:\Windows\System\pKzYSSb.exe
  2⤵
  PID:4448
- C:\Windows\System\sOTlbtg.exe
  C:\Windows\System\sOTlbtg.exe
  2⤵
  PID:4468
- C:\Windows\System\vOTRUYr.exe
  C:\Windows\System\vOTRUYr.exe
  2⤵
  PID:4496
- C:\Windows\System\ByyitsG.exe
  C:\Windows\System\ByyitsG.exe
  2⤵
  PID:4520
- C:\Windows\System\EkXLfet.exe
  C:\Windows\System\EkXLfet.exe
  2⤵
  PID:4536
- C:\Windows\System\qcdcjTs.exe
  C:\Windows\System\qcdcjTs.exe
  2⤵
  PID:4552
- C:\Windows\System\LulAnBy.exe
  C:\Windows\System\LulAnBy.exe
  2⤵
  PID:4568
- C:\Windows\System\eCZvJZq.exe
  C:\Windows\System\eCZvJZq.exe
  2⤵
  PID:4584
- C:\Windows\System\PJUkQsG.exe
  C:\Windows\System\PJUkQsG.exe
  2⤵
  PID:4600
- C:\Windows\System\nSOVLmD.exe
  C:\Windows\System\nSOVLmD.exe
  2⤵
  PID:4616
- C:\Windows\System\oVwuNVZ.exe
  C:\Windows\System\oVwuNVZ.exe
  2⤵
  PID:4632
- C:\Windows\System\RTfuznD.exe
  C:\Windows\System\RTfuznD.exe
  2⤵
  PID:4648
- C:\Windows\System\AfQlyar.exe
  C:\Windows\System\AfQlyar.exe
  2⤵
  PID:4664
- C:\Windows\System\yVJNEJR.exe
  C:\Windows\System\yVJNEJR.exe
  2⤵
  PID:4680
- C:\Windows\System\FffRAdC.exe
  C:\Windows\System\FffRAdC.exe
  2⤵
  PID:4696
- C:\Windows\System\QhHitdI.exe
  C:\Windows\System\QhHitdI.exe
  2⤵
  PID:4712
- C:\Windows\System\JgcXtKm.exe
  C:\Windows\System\JgcXtKm.exe
  2⤵
  PID:4728
- C:\Windows\System\FBucLcS.exe
  C:\Windows\System\FBucLcS.exe
  2⤵
  PID:4744
- C:\Windows\System\TAIyESU.exe
  C:\Windows\System\TAIyESU.exe
  2⤵
  PID:4760
- C:\Windows\System\lEzTBJb.exe
  C:\Windows\System\lEzTBJb.exe
  2⤵
  PID:4776
- C:\Windows\System\XNnUIoD.exe
  C:\Windows\System\XNnUIoD.exe
  2⤵
  PID:4792
- C:\Windows\System\sCcljPB.exe
  C:\Windows\System\sCcljPB.exe
  2⤵
  PID:4808
- C:\Windows\System\PvaihLa.exe
  C:\Windows\System\PvaihLa.exe
  2⤵
  PID:4824
- C:\Windows\System\wtdVZss.exe
  C:\Windows\System\wtdVZss.exe
  2⤵
  PID:4840
- C:\Windows\System\jbhRBPB.exe
  C:\Windows\System\jbhRBPB.exe
  2⤵
  PID:4856
- C:\Windows\System\cOvzlcm.exe
  C:\Windows\System\cOvzlcm.exe
  2⤵
  PID:4872
- C:\Windows\System\ehzrDfW.exe
  C:\Windows\System\ehzrDfW.exe
  2⤵
  PID:4888
- C:\Windows\System\hgVOrfJ.exe
  C:\Windows\System\hgVOrfJ.exe
  2⤵
  PID:4904
- C:\Windows\System\APWDMMd.exe
  C:\Windows\System\APWDMMd.exe
  2⤵
  PID:4924
- C:\Windows\System\GTOHBRJ.exe
  C:\Windows\System\GTOHBRJ.exe
  2⤵
  PID:4964
- C:\Windows\System\EapsZWd.exe
  C:\Windows\System\EapsZWd.exe
  2⤵
  PID:5100
- C:\Windows\System\RAfMxJO.exe
  C:\Windows\System\RAfMxJO.exe
  2⤵
  PID:3412
- C:\Windows\System\PSnUBCf.exe
  C:\Windows\System\PSnUBCf.exe
  2⤵
  PID:4140
- C:\Windows\System\RYvOABL.exe
  C:\Windows\System\RYvOABL.exe
  2⤵
  PID:4208
- C:\Windows\System\KJXuSsH.exe
  C:\Windows\System\KJXuSsH.exe
  2⤵
  PID:4284
- C:\Windows\System\LAzKowR.exe
  C:\Windows\System\LAzKowR.exe
  2⤵
  PID:4288
- C:\Windows\System\aWFkSiJ.exe
  C:\Windows\System\aWFkSiJ.exe
  2⤵
  PID:3492
- C:\Windows\System\jUVLTkT.exe
  C:\Windows\System\jUVLTkT.exe
  2⤵
  PID:3368
- C:\Windows\System\dsiRWob.exe
  C:\Windows\System\dsiRWob.exe
  2⤵
  PID:2876
- C:\Windows\System\GwoJhYv.exe
  C:\Windows\System\GwoJhYv.exe
  2⤵
  PID:4112
- C:\Windows\System\fkZPWil.exe
  C:\Windows\System\fkZPWil.exe
  2⤵
  PID:2252
- C:\Windows\System\XicvLKw.exe
  C:\Windows\System\XicvLKw.exe
  2⤵
  PID:4260
- C:\Windows\System\XdKWhgd.exe
  C:\Windows\System\XdKWhgd.exe
  2⤵
  PID:4348
- C:\Windows\System\bRxKBJD.exe
  C:\Windows\System\bRxKBJD.exe
  2⤵
  PID:4272
- C:\Windows\System\yVpAhML.exe
  C:\Windows\System\yVpAhML.exe
  2⤵
  PID:4444
- C:\Windows\System\hjaRYyQ.exe
  C:\Windows\System\hjaRYyQ.exe
  2⤵
  PID:4488
- C:\Windows\System\XKbYnjo.exe
  C:\Windows\System\XKbYnjo.exe
  2⤵
  PID:1320
- C:\Windows\System\oheLWfw.exe
  C:\Windows\System\oheLWfw.exe
  2⤵
  PID:3524
- C:\Windows\System\LDshUzb.exe
  C:\Windows\System\LDshUzb.exe
  2⤵
  PID:4188
- C:\Windows\System\uuDAPVu.exe
  C:\Windows\System\uuDAPVu.exe
  2⤵
  PID:4388
- C:\Windows\System\KqogVbt.exe
  C:\Windows\System\KqogVbt.exe
  2⤵
  PID:4460
- C:\Windows\System\UnGWrhQ.exe
  C:\Windows\System\UnGWrhQ.exe
  2⤵
  PID:4512
- C:\Windows\System\XSghARH.exe
  C:\Windows\System\XSghARH.exe
  2⤵
  PID:4656
- C:\Windows\System\PEKfRXj.exe
  C:\Windows\System\PEKfRXj.exe
  2⤵
  PID:4456
- C:\Windows\System\SqcAIdi.exe
  C:\Windows\System\SqcAIdi.exe
  2⤵
  PID:4576
- C:\Windows\System\jfNnfRF.exe
  C:\Windows\System\jfNnfRF.exe
  2⤵
  PID:4756
- C:\Windows\System\iiELyfJ.exe
  C:\Windows\System\iiELyfJ.exe
  2⤵
  PID:4676
- C:\Windows\System\vyFujDY.exe
  C:\Windows\System\vyFujDY.exe
  2⤵
  PID:4772
- C:\Windows\System\UNWRhot.exe
  C:\Windows\System\UNWRhot.exe
  2⤵
  PID:4816
- C:\Windows\System\AgGUvMJ.exe
  C:\Windows\System\AgGUvMJ.exe
  2⤵
  PID:4820
- C:\Windows\System\OwgZlWj.exe
  C:\Windows\System\OwgZlWj.exe
  2⤵
  PID:4920
- C:\Windows\System\ixGCckc.exe
  C:\Windows\System\ixGCckc.exe
  2⤵
  PID:4900
- C:\Windows\System\EsQHZdD.exe
  C:\Windows\System\EsQHZdD.exe
  2⤵
  PID:4868
- C:\Windows\System\QzfwUpV.exe
  C:\Windows\System\QzfwUpV.exe
  2⤵
  PID:4952
- C:\Windows\System\YbNZTDz.exe
  C:\Windows\System\YbNZTDz.exe
  2⤵
  PID:4976
- C:\Windows\System\kqgMVPt.exe
  C:\Windows\System\kqgMVPt.exe
  2⤵
  PID:4996
- C:\Windows\System\qfffvSV.exe
  C:\Windows\System\qfffvSV.exe
  2⤵
  PID:5028
- C:\Windows\System\DCzIuAd.exe
  C:\Windows\System\DCzIuAd.exe
  2⤵
  PID:5040
- C:\Windows\System\XNXzico.exe
  C:\Windows\System\XNXzico.exe
  2⤵
  PID:5060
- C:\Windows\System\UqXzSib.exe
  C:\Windows\System\UqXzSib.exe
  2⤵
  PID:5076
- C:\Windows\System\uofNCqA.exe
  C:\Windows\System\uofNCqA.exe
  2⤵
  PID:5096
- C:\Windows\System\IQuPapf.exe
  C:\Windows\System\IQuPapf.exe
  2⤵
  PID:4248
- C:\Windows\System\VqmKCkn.exe
  C:\Windows\System\VqmKCkn.exe
  2⤵
  PID:4176
- C:\Windows\System\gGYmmGy.exe
  C:\Windows\System\gGYmmGy.exe
  2⤵
  PID:4156
- C:\Windows\System\aBRXWIo.exe
  C:\Windows\System\aBRXWIo.exe
  2⤵
  PID:4344
- C:\Windows\System\uLagiXc.exe
  C:\Windows\System\uLagiXc.exe
  2⤵
  PID:4028
- C:\Windows\System\yQmQjaJ.exe
  C:\Windows\System\yQmQjaJ.exe
  2⤵
  PID:4592
- C:\Windows\System\AoEmZnf.exe
  C:\Windows\System\AoEmZnf.exe
  2⤵
  PID:4688
- C:\Windows\System\OsDHpID.exe
  C:\Windows\System\OsDHpID.exe
  2⤵
  PID:4672
- C:\Windows\System\rbVCpes.exe
  C:\Windows\System\rbVCpes.exe
  2⤵
  PID:4416
- C:\Windows\System\vEPSPjG.exe
  C:\Windows\System\vEPSPjG.exe
  2⤵
  PID:4960
- C:\Windows\System\JYKjAaL.exe
  C:\Windows\System\JYKjAaL.exe
  2⤵
  PID:5020
- C:\Windows\System\RFShYVC.exe
  C:\Windows\System\RFShYVC.exe
  2⤵
  PID:5052
- C:\Windows\System\dTUTmmM.exe
  C:\Windows\System\dTUTmmM.exe
  2⤵
  PID:4172
- C:\Windows\System\TeDyifM.exe
  C:\Windows\System\TeDyifM.exe
  2⤵
  PID:3972
- C:\Windows\System\pUzxbqo.exe
  C:\Windows\System\pUzxbqo.exe
  2⤵
  PID:4136
- C:\Windows\System\KoOPHAs.exe
  C:\Windows\System\KoOPHAs.exe
  2⤵
  PID:4948
- C:\Windows\System\ZreijHZ.exe
  C:\Windows\System\ZreijHZ.exe
  2⤵
  PID:4988
- C:\Windows\System\WinrjtZ.exe
  C:\Windows\System\WinrjtZ.exe
  2⤵
  PID:4464
- C:\Windows\System\gcCfyrF.exe
  C:\Windows\System\gcCfyrF.exe
  2⤵
  PID:4612
- C:\Windows\System\wqFKnPa.exe
  C:\Windows\System\wqFKnPa.exe
  2⤵
  PID:4788
- C:\Windows\System\TqMKMcB.exe
  C:\Windows\System\TqMKMcB.exe
  2⤵
  PID:2476
- C:\Windows\System\HrTWnLV.exe
  C:\Windows\System\HrTWnLV.exe
  2⤵
  PID:5068
- C:\Windows\System\udtAbuN.exe
  C:\Windows\System\udtAbuN.exe
  2⤵
  PID:4072
- C:\Windows\System\jTgcGRk.exe
  C:\Windows\System\jTgcGRk.exe
  2⤵
  PID:4116
- C:\Windows\System\YrrenTO.exe
  C:\Windows\System\YrrenTO.exe
  2⤵
  PID:3000
- C:\Windows\System\CAEpeiE.exe
  C:\Windows\System\CAEpeiE.exe
  2⤵
  PID:4400
- C:\Windows\System\XMvkmFE.exe
  C:\Windows\System\XMvkmFE.exe
  2⤵
  PID:4736
- C:\Windows\System\soMctEy.exe
  C:\Windows\System\soMctEy.exe
  2⤵
  PID:4548
- C:\Windows\System\uGBtzkR.exe
  C:\Windows\System\uGBtzkR.exe
  2⤵
  PID:4836
- C:\Windows\System\mGORnny.exe
  C:\Windows\System\mGORnny.exe
  2⤵
  PID:5024
- C:\Windows\System\VYjqWZU.exe
  C:\Windows\System\VYjqWZU.exe
  2⤵
  PID:4944
- C:\Windows\System\mbzAgnt.exe
  C:\Windows\System\mbzAgnt.exe
  2⤵
  PID:3952
- C:\Windows\System\gfkQmdK.exe
  C:\Windows\System\gfkQmdK.exe
  2⤵
  PID:4228
- C:\Windows\System\CEMaXqp.exe
  C:\Windows\System\CEMaXqp.exe
  2⤵
  PID:3252
- C:\Windows\System\AIWFQCg.exe
  C:\Windows\System\AIWFQCg.exe
  2⤵
  PID:4832
- C:\Windows\System\HgMtwXP.exe
  C:\Windows\System\HgMtwXP.exe
  2⤵
  PID:4752
- C:\Windows\System\qGWaLJI.exe
  C:\Windows\System\qGWaLJI.exe
  2⤵
  PID:5124
- C:\Windows\System\XeDlpwl.exe
  C:\Windows\System\XeDlpwl.exe
  2⤵
  PID:5140
- C:\Windows\System\lxnsoUN.exe
  C:\Windows\System\lxnsoUN.exe
  2⤵
  PID:5160
- C:\Windows\System\WyUriRC.exe
  C:\Windows\System\WyUriRC.exe
  2⤵
  PID:5180
- C:\Windows\System\kmCZVlr.exe
  C:\Windows\System\kmCZVlr.exe
  2⤵
  PID:5200
- C:\Windows\System\Vlyjyjw.exe
  C:\Windows\System\Vlyjyjw.exe
  2⤵
  PID:5216
- C:\Windows\System\wpyGQJY.exe
  C:\Windows\System\wpyGQJY.exe
  2⤵
  PID:5236
- C:\Windows\System\AdJLSLv.exe
  C:\Windows\System\AdJLSLv.exe
  2⤵
  PID:5256
- C:\Windows\System\ERrOSFa.exe
  C:\Windows\System\ERrOSFa.exe
  2⤵
  PID:5276
- C:\Windows\System\UGJjoTm.exe
  C:\Windows\System\UGJjoTm.exe
  2⤵
  PID:5296
- C:\Windows\System\UKpvZQL.exe
  C:\Windows\System\UKpvZQL.exe
  2⤵
  PID:5320
- C:\Windows\System\kfAMdLk.exe
  C:\Windows\System\kfAMdLk.exe
  2⤵
  PID:5336
- C:\Windows\System\jDiXOLz.exe
  C:\Windows\System\jDiXOLz.exe
  2⤵
  PID:5352
- C:\Windows\System\TNYDXuA.exe
  C:\Windows\System\TNYDXuA.exe
  2⤵
  PID:5372
- C:\Windows\System\DyAYGlx.exe
  C:\Windows\System\DyAYGlx.exe
  2⤵
  PID:5396
- C:\Windows\System\QZfSPAk.exe
  C:\Windows\System\QZfSPAk.exe
  2⤵
  PID:5412
- C:\Windows\System\lqormiB.exe
  C:\Windows\System\lqormiB.exe
  2⤵
  PID:5428
- C:\Windows\System\HIsjwTG.exe
  C:\Windows\System\HIsjwTG.exe
  2⤵
  PID:5448
- C:\Windows\System\EWvYQBX.exe
  C:\Windows\System\EWvYQBX.exe
  2⤵
  PID:5464
- C:\Windows\System\gExgwzk.exe
  C:\Windows\System\gExgwzk.exe
  2⤵
  PID:5488
- C:\Windows\System\QhNHlnR.exe
  C:\Windows\System\QhNHlnR.exe
  2⤵
  PID:5508
- C:\Windows\System\riqaEJi.exe
  C:\Windows\System\riqaEJi.exe
  2⤵
  PID:5524
- C:\Windows\System\QmTRjEm.exe
  C:\Windows\System\QmTRjEm.exe
  2⤵
  PID:5544
- C:\Windows\System\cfcIDRe.exe
  C:\Windows\System\cfcIDRe.exe
  2⤵
  PID:5560
- C:\Windows\System\qyWLHvn.exe
  C:\Windows\System\qyWLHvn.exe
  2⤵
  PID:5580
- C:\Windows\System\XXyhsIb.exe
  C:\Windows\System\XXyhsIb.exe
  2⤵
  PID:5596
- C:\Windows\System\WGFSFBh.exe
  C:\Windows\System\WGFSFBh.exe
  2⤵
  PID:5612
- C:\Windows\System\FjDPwaW.exe
  C:\Windows\System\FjDPwaW.exe
  2⤵
  PID:5628
- C:\Windows\System\iBvCUNn.exe
  C:\Windows\System\iBvCUNn.exe
  2⤵
  PID:5644
- C:\Windows\System\iOPQiAT.exe
  C:\Windows\System\iOPQiAT.exe
  2⤵
  PID:5660
- C:\Windows\System\aWzBZdI.exe
  C:\Windows\System\aWzBZdI.exe
  2⤵
  PID:5676
- C:\Windows\System\vvhXAHG.exe
  C:\Windows\System\vvhXAHG.exe
  2⤵
  PID:5692
- C:\Windows\System\rIfvpRq.exe
  C:\Windows\System\rIfvpRq.exe
  2⤵
  PID:5708
- C:\Windows\System\lxXEPgM.exe
  C:\Windows\System\lxXEPgM.exe
  2⤵
  PID:5724
- C:\Windows\System\VuTPoeT.exe
  C:\Windows\System\VuTPoeT.exe
  2⤵
  PID:5740
- C:\Windows\System\lmJXCNr.exe
  C:\Windows\System\lmJXCNr.exe
  2⤵
  PID:5760
- C:\Windows\System\RsLxyEO.exe
  C:\Windows\System\RsLxyEO.exe
  2⤵
  PID:5776
- C:\Windows\System\UYawiRQ.exe
  C:\Windows\System\UYawiRQ.exe
  2⤵
  PID:5796
- C:\Windows\System\qnDohCp.exe
  C:\Windows\System\qnDohCp.exe
  2⤵
  PID:5816
- C:\Windows\System\KhHDdPB.exe
  C:\Windows\System\KhHDdPB.exe
  2⤵
  PID:5836
- C:\Windows\System\tnvMXGY.exe
  C:\Windows\System\tnvMXGY.exe
  2⤵
  PID:5852
- C:\Windows\System\sUxNMUN.exe
  C:\Windows\System\sUxNMUN.exe
  2⤵
  PID:5872
- C:\Windows\System\ZYHRfNt.exe
  C:\Windows\System\ZYHRfNt.exe
  2⤵
  PID:5888
- C:\Windows\System\CWpxgHX.exe
  C:\Windows\System\CWpxgHX.exe
  2⤵
  PID:5912
- C:\Windows\System\JvgaqAs.exe
  C:\Windows\System\JvgaqAs.exe
  2⤵
  PID:5928
- C:\Windows\System\VdgFjVU.exe
  C:\Windows\System\VdgFjVU.exe
  2⤵
  PID:5948
- C:\Windows\System\NmPGeJM.exe
  C:\Windows\System\NmPGeJM.exe
  2⤵
  PID:5964
- C:\Windows\System\FlsgzDI.exe
  C:\Windows\System\FlsgzDI.exe
  2⤵
  PID:6112
- C:\Windows\System\vASbnHR.exe
  C:\Windows\System\vASbnHR.exe
  2⤵
  PID:6128
- C:\Windows\System\KbvvWFo.exe
  C:\Windows\System\KbvvWFo.exe
  2⤵
  PID:4352
- C:\Windows\System\ehkURPo.exe
  C:\Windows\System\ehkURPo.exe
  2⤵
  PID:5168
- C:\Windows\System\TZGauTz.exe
  C:\Windows\System\TZGauTz.exe
  2⤵
  PID:5244
- C:\Windows\System\xkrriWN.exe
  C:\Windows\System\xkrriWN.exe
  2⤵
  PID:5288
- C:\Windows\System\QdmakeY.exe
  C:\Windows\System\QdmakeY.exe
  2⤵
  PID:5328
- C:\Windows\System\ictDzzd.exe
  C:\Windows\System\ictDzzd.exe
  2⤵
  PID:5368
- C:\Windows\System\GZoJJtX.exe
  C:\Windows\System\GZoJJtX.exe
  2⤵
  PID:5436
- C:\Windows\System\mgqmGaO.exe
  C:\Windows\System\mgqmGaO.exe
  2⤵
  PID:5480
- C:\Windows\System\zCKcWXT.exe
  C:\Windows\System\zCKcWXT.exe
  2⤵
  PID:5520
- C:\Windows\System\SplQezX.exe
  C:\Windows\System\SplQezX.exe
  2⤵
  PID:5588
- C:\Windows\System\oGOVqUC.exe
  C:\Windows\System\oGOVqUC.exe
  2⤵
  PID:5656
- C:\Windows\System\VZprpwy.exe
  C:\Windows\System\VZprpwy.exe
  2⤵
  PID:5720
- C:\Windows\System\dbICRTA.exe
  C:\Windows\System\dbICRTA.exe
  2⤵
  PID:5784
- C:\Windows\System\fGrtIsZ.exe
  C:\Windows\System\fGrtIsZ.exe
  2⤵
  PID:5832
- C:\Windows\System\amnXJTg.exe
  C:\Windows\System\amnXJTg.exe
  2⤵
  PID:5868
- C:\Windows\System\GnmYdNV.exe
  C:\Windows\System\GnmYdNV.exe
  2⤵
  PID:5936
- C:\Windows\System\NELcBYg.exe
  C:\Windows\System\NELcBYg.exe
  2⤵
  PID:5980
- C:\Windows\System\wmQKdXQ.exe
  C:\Windows\System\wmQKdXQ.exe
  2⤵
  PID:4424
- C:\Windows\System\ROkckZd.exe
  C:\Windows\System\ROkckZd.exe
  2⤵
  PID:5264
- C:\Windows\System\MSemlLI.exe
  C:\Windows\System\MSemlLI.exe
  2⤵
  PID:5072
- C:\Windows\System\SZBMJzz.exe
  C:\Windows\System\SZBMJzz.exe
  2⤵
  PID:5112
- C:\Windows\System\vQmuHOb.exe
  C:\Windows\System\vQmuHOb.exe
  2⤵
  PID:5384
- C:\Windows\System\MCvNTxM.exe
  C:\Windows\System\MCvNTxM.exe
  2⤵
  PID:6048
- C:\Windows\System\FzfwooB.exe
  C:\Windows\System\FzfwooB.exe
  2⤵
  PID:5536
- C:\Windows\System\eioUfQR.exe
  C:\Windows\System\eioUfQR.exe
  2⤵
  PID:5604
- C:\Windows\System\cwomiSS.exe
  C:\Windows\System\cwomiSS.exe
  2⤵
  PID:6068
- C:\Windows\System\mWZpOUP.exe
  C:\Windows\System\mWZpOUP.exe
  2⤵
  PID:6076
- C:\Windows\System\PYsLtBD.exe
  C:\Windows\System\PYsLtBD.exe
  2⤵
  PID:5804
- C:\Windows\System\HGYWmOh.exe
  C:\Windows\System\HGYWmOh.exe
  2⤵
  PID:6100
- C:\Windows\System\NnPbTqa.exe
  C:\Windows\System\NnPbTqa.exe
  2⤵
  PID:6104
- C:\Windows\System\fMYqjdR.exe
  C:\Windows\System\fMYqjdR.exe
  2⤵
  PID:4640
- C:\Windows\System\YMJTlHe.exe
  C:\Windows\System\YMJTlHe.exe
  2⤵
  PID:4420
- C:\Windows\System\lJvyLKi.exe
  C:\Windows\System\lJvyLKi.exe
  2⤵
  PID:5156
- C:\Windows\System\EaomCDp.exe
  C:\Windows\System\EaomCDp.exe
  2⤵
  PID:4884
- C:\Windows\System\VkIqlol.exe
  C:\Windows\System\VkIqlol.exe
  2⤵
  PID:5568
- C:\Windows\System\PNjSTPu.exe
  C:\Windows\System\PNjSTPu.exe
  2⤵
  PID:4628
- C:\Windows\System\oUAfzAW.exe
  C:\Windows\System\oUAfzAW.exe
  2⤵
  PID:5212
- C:\Windows\System\yLsjvTD.exe
  C:\Windows\System\yLsjvTD.exe
  2⤵
  PID:2868
- C:\Windows\System\tWEWgEM.exe
  C:\Windows\System\tWEWgEM.exe
  2⤵
  PID:5844
- C:\Windows\System\ySYAXNG.exe
  C:\Windows\System\ySYAXNG.exe
  2⤵
  PID:5424
- C:\Windows\System\tyDltrG.exe
  C:\Windows\System\tyDltrG.exe
  2⤵
  PID:5420
- C:\Windows\System\Phbkidh.exe
  C:\Windows\System\Phbkidh.exe
  2⤵
  PID:5516
- C:\Windows\System\biyqOwv.exe
  C:\Windows\System\biyqOwv.exe
  2⤵
  PID:5752
- C:\Windows\System\yFsVGNU.exe
  C:\Windows\System\yFsVGNU.exe
  2⤵
  PID:5864
- C:\Windows\System\yQZVGRg.exe
  C:\Windows\System\yQZVGRg.exe
  2⤵
  PID:5360
- C:\Windows\System\QWNmqnr.exe
  C:\Windows\System\QWNmqnr.exe
  2⤵
  PID:5908
- C:\Windows\System\PkWsELy.exe
  C:\Windows\System\PkWsELy.exe
  2⤵
  PID:5136
- C:\Windows\System\imGfqRX.exe
  C:\Windows\System\imGfqRX.exe
  2⤵
  PID:5364
- C:\Windows\System\BzyWTwO.exe
  C:\Windows\System\BzyWTwO.exe
  2⤵
  PID:4916
- C:\Windows\System\SmmbzVd.exe
  C:\Windows\System\SmmbzVd.exe
  2⤵
  PID:5228
- C:\Windows\System\lNtJttE.exe
  C:\Windows\System\lNtJttE.exe
  2⤵
  PID:848
- C:\Windows\System\RvtgAmW.exe
  C:\Windows\System\RvtgAmW.exe
  2⤵
  PID:6008
- C:\Windows\System\ZBBNmAA.exe
  C:\Windows\System\ZBBNmAA.exe
  2⤵
  PID:5460
- C:\Windows\System\YbrXYJc.exe
  C:\Windows\System\YbrXYJc.exe
  2⤵
  PID:6072
- C:\Windows\System\mjplsvH.exe
  C:\Windows\System\mjplsvH.exe
  2⤵
  PID:5960
- C:\Windows\System\ussyvEZ.exe
  C:\Windows\System\ussyvEZ.exe
  2⤵
  PID:5976
- C:\Windows\System\vTKaRva.exe
  C:\Windows\System\vTKaRva.exe
  2⤵
  PID:5308
- C:\Windows\System\pLWghlx.exe
  C:\Windows\System\pLWghlx.exe
  2⤵
  PID:4484
- C:\Windows\System\stymIRl.exe
  C:\Windows\System\stymIRl.exe
  2⤵
  PID:5920
- C:\Windows\System\BeKiTgV.exe
  C:\Windows\System\BeKiTgV.exe
  2⤵
  PID:5636
- C:\Windows\System\jhWesxY.exe
  C:\Windows\System\jhWesxY.exe
  2⤵
  PID:5504
- C:\Windows\System\ThGCRdz.exe
  C:\Windows\System\ThGCRdz.exe
  2⤵
  PID:2860
- C:\Windows\System\VPWbthw.exe
  C:\Windows\System\VPWbthw.exe
  2⤵
  PID:888
- C:\Windows\System\sKtexam.exe
  C:\Windows\System\sKtexam.exe
  2⤵
  PID:5088
- C:\Windows\System\KkUVERU.exe
  C:\Windows\System\KkUVERU.exe
  2⤵
  PID:5284
- C:\Windows\System\EkTERyY.exe
  C:\Windows\System\EkTERyY.exe
  2⤵
  PID:6124
- C:\Windows\System\EUGFpDy.exe
  C:\Windows\System\EUGFpDy.exe
  2⤵
  PID:5196
- C:\Windows\System\usDMvaN.exe
  C:\Windows\System\usDMvaN.exe
  2⤵
  PID:6080
- C:\Windows\System\hAASTvW.exe
  C:\Windows\System\hAASTvW.exe
  2⤵
  PID:5576
- C:\Windows\System\eWFgrQa.exe
  C:\Windows\System\eWFgrQa.exe
  2⤵
  PID:5860
- C:\Windows\System\fFcmrXP.exe
  C:\Windows\System\fFcmrXP.exe
  2⤵
  PID:5312
- C:\Windows\System\XLMMPny.exe
  C:\Windows\System\XLMMPny.exe
  2⤵
  PID:5824
- C:\Windows\System\trsJlhl.exe
  C:\Windows\System\trsJlhl.exe
  2⤵
  PID:5792
- C:\Windows\System\nOcGnhg.exe
  C:\Windows\System\nOcGnhg.exe
  2⤵
  PID:1432
- C:\Windows\System\QtPDPHo.exe
  C:\Windows\System\QtPDPHo.exe
  2⤵
  PID:5148
- C:\Windows\System\BWKuQLl.exe
  C:\Windows\System\BWKuQLl.exe
  2⤵
  PID:5972
- C:\Windows\System\mNkNUMZ.exe
  C:\Windows\System\mNkNUMZ.exe
  2⤵
  PID:5500
- C:\Windows\System\eZxjbJC.exe
  C:\Windows\System\eZxjbJC.exe
  2⤵
  PID:6096
- C:\Windows\System\oDKtfUL.exe
  C:\Windows\System\oDKtfUL.exe
  2⤵
  PID:5344
- C:\Windows\System\rxUYLTr.exe
  C:\Windows\System\rxUYLTr.exe
  2⤵
  PID:5224
- C:\Windows\System\bSNNsOy.exe
  C:\Windows\System\bSNNsOy.exe
  2⤵
  PID:5208
- C:\Windows\System\CFtwfDx.exe
  C:\Windows\System\CFtwfDx.exe
  2⤵
  PID:4896
- C:\Windows\System\ZPpiFIM.exe
  C:\Windows\System\ZPpiFIM.exe
  2⤵
  PID:5132
- C:\Windows\System\OcyDOiP.exe
  C:\Windows\System\OcyDOiP.exe
  2⤵
  PID:6044
- C:\Windows\System\tsMSmMs.exe
  C:\Windows\System\tsMSmMs.exe
  2⤵
  PID:4224
- C:\Windows\System\jxpPqLR.exe
  C:\Windows\System\jxpPqLR.exe
  2⤵
  PID:5348
- C:\Windows\System\casvKnv.exe
  C:\Windows\System\casvKnv.exe
  2⤵
  PID:5272
- C:\Windows\System\vWZbuef.exe
  C:\Windows\System\vWZbuef.exe
  2⤵
  PID:6120
- C:\Windows\System\lPmeWnQ.exe
  C:\Windows\System\lPmeWnQ.exe
  2⤵
  PID:6152
- C:\Windows\System\gAQtQsr.exe
  C:\Windows\System\gAQtQsr.exe
  2⤵
  PID:6168
- C:\Windows\System\uglsaje.exe
  C:\Windows\System\uglsaje.exe
  2⤵
  PID:6184
- C:\Windows\System\SRSaiYB.exe
  C:\Windows\System\SRSaiYB.exe
  2⤵
  PID:6200
- C:\Windows\System\HaPxhuE.exe
  C:\Windows\System\HaPxhuE.exe
  2⤵
  PID:6260
- C:\Windows\System\kAjUoaf.exe
  C:\Windows\System\kAjUoaf.exe
  2⤵
  PID:6284
- C:\Windows\System\YJsKTPB.exe
  C:\Windows\System\YJsKTPB.exe
  2⤵
  PID:6300
- C:\Windows\System\XLftvbS.exe
  C:\Windows\System\XLftvbS.exe
  2⤵
  PID:6316
- C:\Windows\System\oOzjMzm.exe
  C:\Windows\System\oOzjMzm.exe
  2⤵
  PID:6344
- C:\Windows\System\UgJUoyR.exe
  C:\Windows\System\UgJUoyR.exe
  2⤵
  PID:6360
- C:\Windows\System\ymZOOQe.exe
  C:\Windows\System\ymZOOQe.exe
  2⤵
  PID:6376
- C:\Windows\System\dcqNevm.exe
  C:\Windows\System\dcqNevm.exe
  2⤵
  PID:6392
- C:\Windows\System\BFajHvh.exe
  C:\Windows\System\BFajHvh.exe
  2⤵
  PID:6412
- C:\Windows\System\owffrds.exe
  C:\Windows\System\owffrds.exe
  2⤵
  PID:6432
- C:\Windows\System\qHFaSpw.exe
  C:\Windows\System\qHFaSpw.exe
  2⤵
  PID:6452
- C:\Windows\System\vkLnONg.exe
  C:\Windows\System\vkLnONg.exe
  2⤵
  PID:6472
- C:\Windows\System\rRqTahe.exe
  C:\Windows\System\rRqTahe.exe
  2⤵
  PID:6488
- C:\Windows\System\LTqObpU.exe
  C:\Windows\System\LTqObpU.exe
  2⤵
  PID:6512
- C:\Windows\System\NbWgyZZ.exe
  C:\Windows\System\NbWgyZZ.exe
  2⤵
  PID:6528
- C:\Windows\System\qvNnbjE.exe
  C:\Windows\System\qvNnbjE.exe
  2⤵
  PID:6544
- C:\Windows\System\tZTeMrE.exe
  C:\Windows\System\tZTeMrE.exe
  2⤵
  PID:6564
- C:\Windows\System\VsQAKDu.exe
  C:\Windows\System\VsQAKDu.exe
  2⤵
  PID:6588
- C:\Windows\System\zYXosUj.exe
  C:\Windows\System\zYXosUj.exe
  2⤵
  PID:6608
- C:\Windows\System\igvhPlU.exe
  C:\Windows\System\igvhPlU.exe
  2⤵
  PID:6624
- C:\Windows\System\bZHhxsN.exe
  C:\Windows\System\bZHhxsN.exe
  2⤵
  PID:6644
- C:\Windows\System\RoiSwhJ.exe
  C:\Windows\System\RoiSwhJ.exe
  2⤵
  PID:6664
- C:\Windows\System\SALMwbZ.exe
  C:\Windows\System\SALMwbZ.exe
  2⤵
  PID:6680
- C:\Windows\System\RFwrshk.exe
  C:\Windows\System\RFwrshk.exe
  2⤵
  PID:6700
- C:\Windows\System\IygOXwX.exe
  C:\Windows\System\IygOXwX.exe
  2⤵
  PID:6720
- C:\Windows\System\SgpTrru.exe
  C:\Windows\System\SgpTrru.exe
  2⤵
  PID:6736
- C:\Windows\System\tIWzvbD.exe
  C:\Windows\System\tIWzvbD.exe
  2⤵
  PID:6752
- C:\Windows\System\xObChlZ.exe
  C:\Windows\System\xObChlZ.exe
  2⤵
  PID:6772
- C:\Windows\System\DKIBZqk.exe
  C:\Windows\System\DKIBZqk.exe
  2⤵
  PID:6792
- C:\Windows\System\UMyHImD.exe
  C:\Windows\System\UMyHImD.exe
  2⤵
  PID:6812
- C:\Windows\System\qIczrqs.exe
  C:\Windows\System\qIczrqs.exe
  2⤵
  PID:6832
- C:\Windows\System\jAMtomp.exe
  C:\Windows\System\jAMtomp.exe
  2⤵
  PID:6852
- C:\Windows\System\wRIDSWy.exe
  C:\Windows\System\wRIDSWy.exe
  2⤵
  PID:6868
- C:\Windows\System\zIQAncm.exe
  C:\Windows\System\zIQAncm.exe
  2⤵
  PID:6884
- C:\Windows\System\YoZFAjP.exe
  C:\Windows\System\YoZFAjP.exe
  2⤵
  PID:6904
- C:\Windows\System\SOzHDrO.exe
  C:\Windows\System\SOzHDrO.exe
  2⤵
  PID:6928
- C:\Windows\System\UaMJGog.exe
  C:\Windows\System\UaMJGog.exe
  2⤵
  PID:6944
- C:\Windows\System\BNybWkj.exe
  C:\Windows\System\BNybWkj.exe
  2⤵
  PID:6964
- C:\Windows\System\TkAtESZ.exe
  C:\Windows\System\TkAtESZ.exe
  2⤵
  PID:6984
- C:\Windows\System\ROvZRiw.exe
  C:\Windows\System\ROvZRiw.exe
  2⤵
  PID:7004
- C:\Windows\System\dGGigJB.exe
  C:\Windows\System\dGGigJB.exe
  2⤵
  PID:7020
- C:\Windows\System\wvwnfTo.exe
  C:\Windows\System\wvwnfTo.exe
  2⤵
  PID:7036
- C:\Windows\System\XUpLilY.exe
  C:\Windows\System\XUpLilY.exe
  2⤵
  PID:7056
- C:\Windows\System\ZXJvEHH.exe
  C:\Windows\System\ZXJvEHH.exe
  2⤵
  PID:7072
- C:\Windows\System\wwkHHmW.exe
  C:\Windows\System\wwkHHmW.exe
  2⤵
  PID:7088
- C:\Windows\System\qROkyDD.exe
  C:\Windows\System\qROkyDD.exe
  2⤵
  PID:7104
- C:\Windows\System\VGrTPZe.exe
  C:\Windows\System\VGrTPZe.exe
  2⤵
  PID:7128
- C:\Windows\System\tSHYtCu.exe
  C:\Windows\System\tSHYtCu.exe
  2⤵
  PID:7144
- C:\Windows\System\DVMwUyz.exe
  C:\Windows\System\DVMwUyz.exe
  2⤵
  PID:7160
- C:\Windows\System\nVuGxoz.exe
  C:\Windows\System\nVuGxoz.exe
  2⤵
  PID:6148
- C:\Windows\System\JCRLWps.exe
  C:\Windows\System\JCRLWps.exe
  2⤵
  PID:6176
- C:\Windows\System\tDMZbTU.exe
  C:\Windows\System\tDMZbTU.exe
  2⤵
  PID:5848
- C:\Windows\System\DZBbuKx.exe
  C:\Windows\System\DZBbuKx.exe
  2⤵
  PID:5828
- C:\Windows\System\HvjNqDN.exe
  C:\Windows\System\HvjNqDN.exe
  2⤵
  PID:5904
- C:\Windows\System\flQORWU.exe
  C:\Windows\System\flQORWU.exe
  2⤵
  PID:6256
- C:\Windows\System\DticYRR.exe
  C:\Windows\System\DticYRR.exe
  2⤵
  PID:6292
- C:\Windows\System\Ieczoqk.exe
  C:\Windows\System\Ieczoqk.exe
  2⤵
  PID:6308
- C:\Windows\System\BKSqxGb.exe
  C:\Windows\System\BKSqxGb.exe
  2⤵
  PID:6332
- C:\Windows\System\yQWcaBo.exe
  C:\Windows\System\yQWcaBo.exe
  2⤵
  PID:6404
- C:\Windows\System\yCJYGWO.exe
  C:\Windows\System\yCJYGWO.exe
  2⤵
  PID:6388
- C:\Windows\System\thZlzgs.exe
  C:\Windows\System\thZlzgs.exe
  2⤵
  PID:6484
- C:\Windows\System\OjrAwfZ.exe
  C:\Windows\System\OjrAwfZ.exe
  2⤵
  PID:6552
- C:\Windows\System\fkjINxl.exe
  C:\Windows\System\fkjINxl.exe
  2⤵
  PID:6640
- C:\Windows\System\QUYKosx.exe
  C:\Windows\System\QUYKosx.exe
  2⤵
  PID:6716
- C:\Windows\System\NxXUaTu.exe
  C:\Windows\System\NxXUaTu.exe
  2⤵
  PID:6788
- C:\Windows\System\kqZCEkk.exe
  C:\Windows\System\kqZCEkk.exe
  2⤵
  PID:6464
- C:\Windows\System\JFdSQBe.exe
  C:\Windows\System\JFdSQBe.exe
  2⤵
  PID:6504
- C:\Windows\System\YXMZMFr.exe
  C:\Windows\System\YXMZMFr.exe
  2⤵
  PID:6892
- C:\Windows\System\IYqeFsV.exe
  C:\Windows\System\IYqeFsV.exe
  2⤵
  PID:6572
- C:\Windows\System\zcOSDdP.exe
  C:\Windows\System\zcOSDdP.exe
  2⤵
  PID:7012
- C:\Windows\System\ZjYzSCn.exe
  C:\Windows\System\ZjYzSCn.exe
  2⤵
  PID:7080
- C:\Windows\System\eOowLTY.exe
  C:\Windows\System\eOowLTY.exe
  2⤵
  PID:7156
- C:\Windows\System\UxFrnDy.exe
  C:\Windows\System\UxFrnDy.exe
  2⤵
  PID:2456
- C:\Windows\System\sikdmWx.exe
  C:\Windows\System\sikdmWx.exe
  2⤵
  PID:6536
- C:\Windows\System\xbRfVtf.exe
  C:\Windows\System\xbRfVtf.exe
  2⤵
  PID:6960
- C:\Windows\System\ymZYEQP.exe
  C:\Windows\System\ymZYEQP.exe
  2⤵
  PID:7000
- C:\Windows\System\nNnGJxh.exe
  C:\Windows\System\nNnGJxh.exe
  2⤵
  PID:6616
- C:\Windows\System\WLFEGOI.exe
  C:\Windows\System\WLFEGOI.exe
  2⤵
  PID:6688
- C:\Windows\System\gbBPeET.exe
  C:\Windows\System\gbBPeET.exe
  2⤵
  PID:6760
- C:\Windows\System\JgKtIBm.exe
  C:\Windows\System\JgKtIBm.exe
  2⤵
  PID:6808
- C:\Windows\System\MdNnmda.exe
  C:\Windows\System\MdNnmda.exe
  2⤵
  PID:6876
- C:\Windows\System\qmGEexh.exe
  C:\Windows\System\qmGEexh.exe
  2⤵
  PID:6140
- C:\Windows\System\GvwDmmX.exe
  C:\Windows\System\GvwDmmX.exe
  2⤵
  PID:7100
- C:\Windows\System\anGVHLu.exe
  C:\Windows\System\anGVHLu.exe
  2⤵
  PID:6216
- C:\Windows\System\BwOyCGw.exe
  C:\Windows\System\BwOyCGw.exe
  2⤵
  PID:6324
- C:\Windows\System\UyZBRFc.exe
  C:\Windows\System\UyZBRFc.exe
  2⤵
  PID:6240
- C:\Windows\System\QoABuQX.exe
  C:\Windows\System\QoABuQX.exe
  2⤵
  PID:6248
- C:\Windows\System\oBeZthV.exe
  C:\Windows\System\oBeZthV.exe
  2⤵
  PID:5476
- C:\Windows\System\CVnDJgD.exe
  C:\Windows\System\CVnDJgD.exe
  2⤵
  PID:5988
- C:\Windows\System\jVwxwnI.exe
  C:\Windows\System\jVwxwnI.exe
  2⤵
  PID:6336
- C:\Windows\System\TMIcUYx.exe
  C:\Windows\System\TMIcUYx.exe
  2⤵
  PID:6600
- C:\Windows\System\tQkYfgS.exe
  C:\Windows\System\tQkYfgS.exe
  2⤵
  PID:6748
- C:\Windows\System\MGdWwrx.exe
  C:\Windows\System\MGdWwrx.exe
  2⤵
  PID:6280
- C:\Windows\System\qEJVcPb.exe
  C:\Windows\System\qEJVcPb.exe
  2⤵
  PID:6940
- C:\Windows\System\aYRneZr.exe
  C:\Windows\System\aYRneZr.exe
  2⤵
  PID:6784
- C:\Windows\System\FRSMPMa.exe
  C:\Windows\System\FRSMPMa.exe
  2⤵
  PID:6440
- C:\Windows\System\ADuApfX.exe
  C:\Windows\System\ADuApfX.exe
  2⤵
  PID:7084
- C:\Windows\System\jkPzJtB.exe
  C:\Windows\System\jkPzJtB.exe
  2⤵
  PID:6212
- C:\Windows\System\Hbwqsaf.exe
  C:\Windows\System\Hbwqsaf.exe
  2⤵
  PID:7152
- C:\Windows\System\huPRTmb.exe
  C:\Windows\System\huPRTmb.exe
  2⤵
  PID:6996
- C:\Windows\System\bwNqyWn.exe
  C:\Windows\System\bwNqyWn.exe
  2⤵
  PID:6916
- C:\Windows\System\SZiHQIQ.exe
  C:\Windows\System\SZiHQIQ.exe
  2⤵
  PID:6732
- C:\Windows\System\ykAseMo.exe
  C:\Windows\System\ykAseMo.exe
  2⤵
  PID:5700
- C:\Windows\System\QLQhoDN.exe
  C:\Windows\System\QLQhoDN.exe
  2⤵
  PID:6480
- C:\Windows\System\MvtOlzY.exe
  C:\Windows\System\MvtOlzY.exe
  2⤵
  PID:6824
- C:\Windows\System\yqIzlNR.exe
  C:\Windows\System\yqIzlNR.exe
  2⤵
  PID:6520
- C:\Windows\System\GdiPCcU.exe
  C:\Windows\System\GdiPCcU.exe
  2⤵
  PID:6164
- C:\Windows\System\QTQMkVM.exe
  C:\Windows\System\QTQMkVM.exe
  2⤵
  PID:6768
- C:\Windows\System\kyaroiA.exe
  C:\Windows\System\kyaroiA.exe
  2⤵
  PID:4528
- C:\Windows\System\huRuxDt.exe
  C:\Windows\System\huRuxDt.exe
  2⤵
  PID:3680
- C:\Windows\System\LrgRGqI.exe
  C:\Windows\System\LrgRGqI.exe
  2⤵
  PID:6400
- C:\Windows\System\TwUenql.exe
  C:\Windows\System\TwUenql.exe
  2⤵
  PID:6220
- C:\Windows\System\foIGeAt.exe
  C:\Windows\System\foIGeAt.exe
  2⤵
  PID:992
- C:\Windows\System\ZtdXKyV.exe
  C:\Windows\System\ZtdXKyV.exe
  2⤵
  PID:7124
- C:\Windows\System\pAIZnjL.exe
  C:\Windows\System\pAIZnjL.exe
  2⤵
  PID:6460
- C:\Windows\System\dCfvyPe.exe
  C:\Windows\System\dCfvyPe.exe
  2⤵
  PID:6848
- C:\Windows\System\YgrHzNc.exe
  C:\Windows\System\YgrHzNc.exe
  2⤵
  PID:4740
- C:\Windows\System\jAcaqXa.exe
  C:\Windows\System\jAcaqXa.exe
  2⤵
  PID:6384
- C:\Windows\System\ynKEhuf.exe
  C:\Windows\System\ynKEhuf.exe
  2⤵
  PID:6804
- C:\Windows\System\YVbwjZk.exe
  C:\Windows\System\YVbwjZk.exe
  2⤵
  PID:6580
- C:\Windows\System\GzvruAV.exe
  C:\Windows\System\GzvruAV.exe
  2⤵
  PID:6952
- C:\Windows\System\grZDKvG.exe
  C:\Windows\System\grZDKvG.exe
  2⤵
  PID:7112
- C:\Windows\System\IhoGbQv.exe
  C:\Windows\System\IhoGbQv.exe
  2⤵
  PID:6676
- C:\Windows\System\aLsfSxd.exe
  C:\Windows\System\aLsfSxd.exe
  2⤵
  PID:7068
- C:\Windows\System\jHrLkFU.exe
  C:\Windows\System\jHrLkFU.exe
  2⤵
  PID:6864
- C:\Windows\System\DIDShrq.exe
  C:\Windows\System\DIDShrq.exe
  2⤵
  PID:6672
- C:\Windows\System\NwniXlk.exe
  C:\Windows\System\NwniXlk.exe
  2⤵
  PID:6108
- C:\Windows\System\aGaMTFI.exe
  C:\Windows\System\aGaMTFI.exe
  2⤵
  PID:6860
- C:\Windows\System\fLnmTdh.exe
  C:\Windows\System\fLnmTdh.exe
  2⤵
  PID:7180
- C:\Windows\System\hgZfHIF.exe
  C:\Windows\System\hgZfHIF.exe
  2⤵
  PID:7204
- C:\Windows\System\xfGRjMy.exe
  C:\Windows\System\xfGRjMy.exe
  2⤵
  PID:7224
- C:\Windows\System\inXWcOX.exe
  C:\Windows\System\inXWcOX.exe
  2⤵
  PID:7244
- C:\Windows\System\NuTixax.exe
  C:\Windows\System\NuTixax.exe
  2⤵
  PID:7268
- C:\Windows\System\dUMnspG.exe
  C:\Windows\System\dUMnspG.exe
  2⤵
  PID:7288
- C:\Windows\System\laJHRkl.exe
  C:\Windows\System\laJHRkl.exe
  2⤵
  PID:7312
- C:\Windows\System\HiOmkMg.exe
  C:\Windows\System\HiOmkMg.exe
  2⤵
  PID:7332
- C:\Windows\System\LPbrVER.exe
  C:\Windows\System\LPbrVER.exe
  2⤵
  PID:7352
- C:\Windows\System\BtEQApD.exe
  C:\Windows\System\BtEQApD.exe
  2⤵
  PID:7372
- C:\Windows\System\QOSfeyv.exe
  C:\Windows\System\QOSfeyv.exe
  2⤵
  PID:7388
- C:\Windows\System\GQReeam.exe
  C:\Windows\System\GQReeam.exe
  2⤵
  PID:7412
- C:\Windows\System\jpuqgkV.exe
  C:\Windows\System\jpuqgkV.exe
  2⤵
  PID:7432
- C:\Windows\System\sOzhigS.exe
  C:\Windows\System\sOzhigS.exe
  2⤵
  PID:7456
- C:\Windows\System\IodvBDN.exe
  C:\Windows\System\IodvBDN.exe
  2⤵
  PID:7476
- C:\Windows\System\DfzrerS.exe
  C:\Windows\System\DfzrerS.exe
  2⤵
  PID:7496
- C:\Windows\System\BnrzKcu.exe
  C:\Windows\System\BnrzKcu.exe
  2⤵
  PID:7512
- C:\Windows\System\MMeSNPV.exe
  C:\Windows\System\MMeSNPV.exe
  2⤵
  PID:7532
- C:\Windows\System\rkZjZkS.exe
  C:\Windows\System\rkZjZkS.exe
  2⤵
  PID:7548
- C:\Windows\System\IiLjGXw.exe
  C:\Windows\System\IiLjGXw.exe
  2⤵
  PID:7568
- C:\Windows\System\hoAdrir.exe
  C:\Windows\System\hoAdrir.exe
  2⤵
  PID:7588
- C:\Windows\System\ualEsyg.exe
  C:\Windows\System\ualEsyg.exe
  2⤵
  PID:7608
- C:\Windows\System\TxzcbEI.exe
  C:\Windows\System\TxzcbEI.exe
  2⤵
  PID:7628
- C:\Windows\System\foJbCRr.exe
  C:\Windows\System\foJbCRr.exe
  2⤵
  PID:7644
- C:\Windows\System\wDPLosu.exe
  C:\Windows\System\wDPLosu.exe
  2⤵
  PID:7664
- C:\Windows\System\obWBhyT.exe
  C:\Windows\System\obWBhyT.exe
  2⤵
  PID:7684
- C:\Windows\System\JeaddpR.exe
  C:\Windows\System\JeaddpR.exe
  2⤵
  PID:7712
- C:\Windows\System\KGYcVfL.exe
  C:\Windows\System\KGYcVfL.exe
  2⤵
  PID:7728
- C:\Windows\System\WbUkHOD.exe
  C:\Windows\System\WbUkHOD.exe
  2⤵
  PID:7752
- C:\Windows\System\XGtLBld.exe
  C:\Windows\System\XGtLBld.exe
  2⤵
  PID:7768
- C:\Windows\System\qoxIXTi.exe
  C:\Windows\System\qoxIXTi.exe
  2⤵
  PID:7788
- C:\Windows\System\mExbOiq.exe
  C:\Windows\System\mExbOiq.exe
  2⤵
  PID:7808
- C:\Windows\System\DoMkFNt.exe
  C:\Windows\System\DoMkFNt.exe
  2⤵
  PID:7828
- C:\Windows\System\BpUUptw.exe
  C:\Windows\System\BpUUptw.exe
  2⤵
  PID:7848
- C:\Windows\System\UlDbJdK.exe
  C:\Windows\System\UlDbJdK.exe
  2⤵
  PID:7872
- C:\Windows\System\imIhXBI.exe
  C:\Windows\System\imIhXBI.exe
  2⤵
  PID:7892
- C:\Windows\System\fzplxyX.exe
  C:\Windows\System\fzplxyX.exe
  2⤵
  PID:7912
- C:\Windows\System\hcZFnED.exe
  C:\Windows\System\hcZFnED.exe
  2⤵
  PID:7932
- C:\Windows\System\HFSQCNM.exe
  C:\Windows\System\HFSQCNM.exe
  2⤵
  PID:7948
- C:\Windows\System\abUFcYo.exe
  C:\Windows\System\abUFcYo.exe
  2⤵
  PID:7972
- C:\Windows\System\yjDdomk.exe
  C:\Windows\System\yjDdomk.exe
  2⤵
  PID:7992
- C:\Windows\System\NFHhTun.exe
  C:\Windows\System\NFHhTun.exe
  2⤵
  PID:8012
- C:\Windows\System\gZDfLgm.exe
  C:\Windows\System\gZDfLgm.exe
  2⤵
  PID:8036
- C:\Windows\System\QcxXzGB.exe
  C:\Windows\System\QcxXzGB.exe
  2⤵
  PID:8052
- C:\Windows\System\hFbAwgx.exe
  C:\Windows\System\hFbAwgx.exe
  2⤵
  PID:8072
- C:\Windows\System\zSIveXU.exe
  C:\Windows\System\zSIveXU.exe
  2⤵
  PID:8096
- C:\Windows\System\hoYNduu.exe
  C:\Windows\System\hoYNduu.exe
  2⤵
  PID:8112
- C:\Windows\System\dFyMeHO.exe
  C:\Windows\System\dFyMeHO.exe
  2⤵
  PID:8136
- C:\Windows\System\mZYoQoM.exe
  C:\Windows\System\mZYoQoM.exe
  2⤵
  PID:8156
- C:\Windows\System\EiuJiXi.exe
  C:\Windows\System\EiuJiXi.exe
  2⤵
  PID:8176
- C:\Windows\System\kYXiYFg.exe
  C:\Windows\System\kYXiYFg.exe
  2⤵
  PID:7176
- C:\Windows\System\VOLYtZY.exe
  C:\Windows\System\VOLYtZY.exe
  2⤵
  PID:6900
- C:\Windows\System\eMvgjHT.exe
  C:\Windows\System\eMvgjHT.exe
  2⤵
  PID:7256
- C:\Windows\System\PzGjUNi.exe
  C:\Windows\System\PzGjUNi.exe
  2⤵
  PID:6192
- C:\Windows\System\amKvjNC.exe
  C:\Windows\System\amKvjNC.exe
  2⤵
  PID:6500
- C:\Windows\System\obfzvOq.exe
  C:\Windows\System\obfzvOq.exe
  2⤵
  PID:7276
- C:\Windows\System\ciefKDp.exe
  C:\Windows\System\ciefKDp.exe
  2⤵
  PID:7348
- C:\Windows\System\vZyWmUE.exe
  C:\Windows\System\vZyWmUE.exe
  2⤵
  PID:6656
- C:\Windows\System\lgeuqos.exe
  C:\Windows\System\lgeuqos.exe
  2⤵
  PID:7220
- C:\Windows\System\oIYHgeM.exe
  C:\Windows\System\oIYHgeM.exe
  2⤵
  PID:7096
- C:\Windows\System\FyzJEwj.exe
  C:\Windows\System\FyzJEwj.exe
  2⤵
  PID:7384
- C:\Windows\System\MgXcuvZ.exe
  C:\Windows\System\MgXcuvZ.exe
  2⤵
  PID:7428
- C:\Windows\System\Btimogb.exe
  C:\Windows\System\Btimogb.exe
  2⤵
  PID:7472
- C:\Windows\System\GytTDhQ.exe
  C:\Windows\System\GytTDhQ.exe
  2⤵
  PID:7408
- C:\Windows\System\cHYgKDj.exe
  C:\Windows\System\cHYgKDj.exe
  2⤵
  PID:7544
- C:\Windows\System\TnkodgP.exe
  C:\Windows\System\TnkodgP.exe
  2⤵
  PID:7404
- C:\Windows\System\cwAoCks.exe
  C:\Windows\System\cwAoCks.exe
  2⤵
  PID:7616
- C:\Windows\System\VUAQcCQ.exe
  C:\Windows\System\VUAQcCQ.exe
  2⤵
  PID:7452
- C:\Windows\System\kOGkgoJ.exe
  C:\Windows\System\kOGkgoJ.exe
  2⤵
  PID:7696
- C:\Windows\System\KimPSNF.exe
  C:\Windows\System\KimPSNF.exe
  2⤵
  PID:7640
- C:\Windows\System\qZkzMne.exe
  C:\Windows\System\qZkzMne.exe
  2⤵
  PID:7488
- C:\Windows\System\WJNvTaG.exe
  C:\Windows\System\WJNvTaG.exe
  2⤵
  PID:7824
- C:\Windows\System\xHROVFT.exe
  C:\Windows\System\xHROVFT.exe
  2⤵
  PID:7864
- C:\Windows\System\DUhVpbl.exe
  C:\Windows\System\DUhVpbl.exe
  2⤵
  PID:7900
- C:\Windows\System\KDfGzgu.exe
  C:\Windows\System\KDfGzgu.exe
  2⤵
  PID:7840
- C:\Windows\System\eDzxaCt.exe
  C:\Windows\System\eDzxaCt.exe
  2⤵
  PID:7868
- C:\Windows\System\pKkdliF.exe
  C:\Windows\System\pKkdliF.exe
  2⤵
  PID:7796
- C:\Windows\System\NoKCTGP.exe
  C:\Windows\System\NoKCTGP.exe
  2⤵
  PID:7984
- C:\Windows\System\aaQBbfT.exe
  C:\Windows\System\aaQBbfT.exe
  2⤵
  PID:8028
- C:\Windows\System\EBYMiCo.exe
  C:\Windows\System\EBYMiCo.exe
  2⤵
  PID:8064
- C:\Windows\System\CUJvHbh.exe
  C:\Windows\System\CUJvHbh.exe
  2⤵
  PID:8068
- C:\Windows\System\YLgRyPQ.exe
  C:\Windows\System\YLgRyPQ.exe
  2⤵
  PID:7964
- C:\Windows\System\sQKtJzC.exe
  C:\Windows\System\sQKtJzC.exe
  2⤵
  PID:8048
- C:\Windows\System\oGzigTR.exe
  C:\Windows\System\oGzigTR.exe
  2⤵
  PID:8152
- C:\Windows\System\pJLJDFq.exe
  C:\Windows\System\pJLJDFq.exe
  2⤵
  PID:8188
- C:\Windows\System\TEUjEkf.exe
  C:\Windows\System\TEUjEkf.exe
  2⤵
  PID:8172
- C:\Windows\System\MunoDiC.exe
  C:\Windows\System\MunoDiC.exe
  2⤵
  PID:7296
- C:\Windows\System\ASTNNGM.exe
  C:\Windows\System\ASTNNGM.exe
  2⤵
  PID:7192
- C:\Windows\System\JvOTVRG.exe
  C:\Windows\System\JvOTVRG.exe
  2⤵
  PID:7380
- C:\Windows\System\aqHKtca.exe
  C:\Windows\System\aqHKtca.exe
  2⤵
  PID:7656
- C:\Windows\System\VzMCowM.exe
  C:\Windows\System\VzMCowM.exe
  2⤵
  PID:7484
- C:\Windows\System\MKZhBvU.exe
  C:\Windows\System\MKZhBvU.exe
  2⤵
  PID:7308
- C:\Windows\System\ZgFfEhF.exe
  C:\Windows\System\ZgFfEhF.exe
  2⤵
  PID:7420
- C:\Windows\System\jcBBkgl.exe
  C:\Windows\System\jcBBkgl.exe
  2⤵
  PID:7700
- C:\Windows\System\QJqqgbu.exe
  C:\Windows\System\QJqqgbu.exe
  2⤵
  PID:6540
- C:\Windows\System\ylThniz.exe
  C:\Windows\System\ylThniz.exe
  2⤵
  PID:7400
- C:\Windows\System\BXKXakW.exe
  C:\Windows\System\BXKXakW.exe
  2⤵
  PID:7744
- C:\Windows\System\fmwHpUs.exe
  C:\Windows\System\fmwHpUs.exe
  2⤵
  PID:7908
- C:\Windows\System\FpbQHpP.exe
  C:\Windows\System\FpbQHpP.exe
  2⤵
  PID:7740
- C:\Windows\System\bTsviOQ.exe
  C:\Windows\System\bTsviOQ.exe
  2⤵
  PID:7880
- C:\Windows\System\sSPCQVP.exe
  C:\Windows\System\sSPCQVP.exe
  2⤵
  PID:8044
- C:\Windows\System\ERRYrNc.exe
  C:\Windows\System\ERRYrNc.exe
  2⤵
  PID:7988
- C:\Windows\System\YqOJSgv.exe
  C:\Windows\System\YqOJSgv.exe
  2⤵
  PID:8024
- C:\Windows\System\bxBEVmp.exe
  C:\Windows\System\bxBEVmp.exe
  2⤵
  PID:7188
- C:\Windows\System\kFeUAdq.exe
  C:\Windows\System\kFeUAdq.exe
  2⤵
  PID:7196
- C:\Windows\System\qITtjVM.exe
  C:\Windows\System\qITtjVM.exe
  2⤵
  PID:7804
- C:\Windows\System\xzIedkd.exe
  C:\Windows\System\xzIedkd.exe
  2⤵
  PID:7324
- C:\Windows\System\lCccxte.exe
  C:\Windows\System\lCccxte.exe
  2⤵
  PID:8164
- C:\Windows\System\fgxDPFb.exe
  C:\Windows\System\fgxDPFb.exe
  2⤵
  PID:7464
- C:\Windows\System\oNjbHfe.exe
  C:\Windows\System\oNjbHfe.exe
  2⤵
  PID:7584
- C:\Windows\System\WvSuuAJ.exe
  C:\Windows\System\WvSuuAJ.exe
  2⤵
  PID:7520
- C:\Windows\System\hELpGEt.exe
  C:\Windows\System\hELpGEt.exe
  2⤵
  PID:7300
- C:\Windows\System\AJQSojJ.exe
  C:\Windows\System\AJQSojJ.exe
  2⤵
  PID:7504
- C:\Windows\System\gThJhyz.exe
  C:\Windows\System\gThJhyz.exe
  2⤵
  PID:7636
- C:\Windows\System\bbmaaYn.exe
  C:\Windows\System\bbmaaYn.exe
  2⤵
  PID:7856
- C:\Windows\System\TaKKnxN.exe
  C:\Windows\System\TaKKnxN.exe
  2⤵
  PID:7724
- C:\Windows\System\qpCPmki.exe
  C:\Windows\System\qpCPmki.exe
  2⤵
  PID:7720
- C:\Windows\System\VhEkiTj.exe
  C:\Windows\System\VhEkiTj.exe
  2⤵
  PID:8088
- C:\Windows\System\bhoUlvm.exe
  C:\Windows\System\bhoUlvm.exe
  2⤵
  PID:7692
- C:\Windows\System\HsMvgft.exe
  C:\Windows\System\HsMvgft.exe
  2⤵
  PID:7960
- C:\Windows\System\EPiznrj.exe
  C:\Windows\System\EPiznrj.exe
  2⤵
  PID:7560
- C:\Windows\System\YstWObn.exe
  C:\Windows\System\YstWObn.exe
  2⤵
  PID:7736
- C:\Windows\System\FmcPNAM.exe
  C:\Windows\System\FmcPNAM.exe
  2⤵
  PID:7680
- C:\Windows\System\uxHhWyf.exe
  C:\Windows\System\uxHhWyf.exe
  2⤵
  PID:7928
- C:\Windows\System\NNhCnFr.exe
  C:\Windows\System\NNhCnFr.exe
  2⤵
  PID:1264
- C:\Windows\System\zuTeVjr.exe
  C:\Windows\System\zuTeVjr.exe
  2⤵
  PID:7216
- C:\Windows\System\pOmUsie.exe
  C:\Windows\System\pOmUsie.exe
  2⤵
  PID:7764
- C:\Windows\System\lpHNpHb.exe
  C:\Windows\System\lpHNpHb.exe
  2⤵
  PID:7528
- C:\Windows\System\EuICaWT.exe
  C:\Windows\System\EuICaWT.exe
  2⤵
  PID:7396
- C:\Windows\System\qzNQCWw.exe
  C:\Windows\System\qzNQCWw.exe
  2⤵
  PID:8008
- C:\Windows\System\nglbvYs.exe
  C:\Windows\System\nglbvYs.exe
  2⤵
  PID:7260
- C:\Windows\System\ZBvpqop.exe
  C:\Windows\System\ZBvpqop.exe
  2⤵
  PID:7836
- C:\Windows\System\nNrLKUy.exe
  C:\Windows\System\nNrLKUy.exe
  2⤵
  PID:7884
- C:\Windows\System\nKvLYTJ.exe
  C:\Windows\System\nKvLYTJ.exe
  2⤵
  PID:6780
- C:\Windows\System\dRNyNec.exe
  C:\Windows\System\dRNyNec.exe
  2⤵
  PID:8184
- C:\Windows\System\BDsUGdm.exe
  C:\Windows\System\BDsUGdm.exe
  2⤵
  PID:8196
- C:\Windows\System\qXwgBuu.exe
  C:\Windows\System\qXwgBuu.exe
  2⤵
  PID:8212
- C:\Windows\System\iARTCMO.exe
  C:\Windows\System\iARTCMO.exe
  2⤵
  PID:8228
- C:\Windows\System\HLQKiDT.exe
  C:\Windows\System\HLQKiDT.exe
  2⤵
  PID:8244
- C:\Windows\System\ArfTadw.exe
  C:\Windows\System\ArfTadw.exe
  2⤵
  PID:8264
- C:\Windows\System\gsfRqed.exe
  C:\Windows\System\gsfRqed.exe
  2⤵
  PID:8284
- C:\Windows\System\OkRmBtu.exe
  C:\Windows\System\OkRmBtu.exe
  2⤵
  PID:8300
- C:\Windows\System\ldpZUrG.exe
  C:\Windows\System\ldpZUrG.exe
  2⤵
  PID:8316
- C:\Windows\System\gaelSag.exe
  C:\Windows\System\gaelSag.exe
  2⤵
  PID:8332
- C:\Windows\System\CjwGmTx.exe
  C:\Windows\System\CjwGmTx.exe
  2⤵
  PID:8348
- C:\Windows\System\IvsCXeU.exe
  C:\Windows\System\IvsCXeU.exe
  2⤵
  PID:8364
- C:\Windows\System\AKDUWOg.exe
  C:\Windows\System\AKDUWOg.exe
  2⤵
  PID:8380
- C:\Windows\System\ILgjBMf.exe
  C:\Windows\System\ILgjBMf.exe
  2⤵
  PID:8396
- C:\Windows\System\rdZzKTt.exe
  C:\Windows\System\rdZzKTt.exe
  2⤵
  PID:8412
- C:\Windows\System\LWcxRSz.exe
  C:\Windows\System\LWcxRSz.exe
  2⤵
  PID:8428
- C:\Windows\System\ZEqRGrz.exe
  C:\Windows\System\ZEqRGrz.exe
  2⤵
  PID:8444
- C:\Windows\System\simWNoa.exe
  C:\Windows\System\simWNoa.exe
  2⤵
  PID:8472
- C:\Windows\System\JaCzSTV.exe
  C:\Windows\System\JaCzSTV.exe
  2⤵
  PID:8488
- C:\Windows\System\qFdNQUs.exe
  C:\Windows\System\qFdNQUs.exe
  2⤵
  PID:8504
- C:\Windows\System\dvKSACk.exe
  C:\Windows\System\dvKSACk.exe
  2⤵
  PID:8520
- C:\Windows\System\zKhEUDx.exe
  C:\Windows\System\zKhEUDx.exe
  2⤵
  PID:8536
- C:\Windows\System\RSgdABz.exe
  C:\Windows\System\RSgdABz.exe
  2⤵
  PID:8552
- C:\Windows\System\mndaXLD.exe
  C:\Windows\System\mndaXLD.exe
  2⤵
  PID:8652
- C:\Windows\System\fXFiQCh.exe
  C:\Windows\System\fXFiQCh.exe
  2⤵
  PID:8668
- C:\Windows\System\hSqDden.exe
  C:\Windows\System\hSqDden.exe
  2⤵
  PID:8688
- C:\Windows\System\rRtPtrR.exe
  C:\Windows\System\rRtPtrR.exe
  2⤵
  PID:8704
- C:\Windows\System\bsCLEBj.exe
  C:\Windows\System\bsCLEBj.exe
  2⤵
  PID:8728
- C:\Windows\System\NUOEulm.exe
  C:\Windows\System\NUOEulm.exe
  2⤵
  PID:8744
- C:\Windows\System\qJLWYxh.exe
  C:\Windows\System\qJLWYxh.exe
  2⤵
  PID:8764
- C:\Windows\System\KvjsGGs.exe
  C:\Windows\System\KvjsGGs.exe
  2⤵
  PID:8784
- C:\Windows\System\GhFKRaP.exe
  C:\Windows\System\GhFKRaP.exe
  2⤵
  PID:8800
- C:\Windows\System\LQVkxRv.exe
  C:\Windows\System\LQVkxRv.exe
  2⤵
  PID:8820
- C:\Windows\System\zCyLnZx.exe
  C:\Windows\System\zCyLnZx.exe
  2⤵
  PID:8840
- C:\Windows\System\oZAHwlG.exe
  C:\Windows\System\oZAHwlG.exe
  2⤵
  PID:8856
- C:\Windows\System\khumbba.exe
  C:\Windows\System\khumbba.exe
  2⤵
  PID:8876
- C:\Windows\System\yddxANn.exe
  C:\Windows\System\yddxANn.exe
  2⤵
  PID:8892
- C:\Windows\System\coReanP.exe
  C:\Windows\System\coReanP.exe
  2⤵
  PID:8908
- C:\Windows\System\zMyYyBB.exe
  C:\Windows\System\zMyYyBB.exe
  2⤵
  PID:8928
- C:\Windows\System\gfCnaBq.exe
  C:\Windows\System\gfCnaBq.exe
  2⤵
  PID:8948
- C:\Windows\System\XluAfkv.exe
  C:\Windows\System\XluAfkv.exe
  2⤵
  PID:8964
- C:\Windows\System\daFGnrC.exe
  C:\Windows\System\daFGnrC.exe
  2⤵
  PID:8984
- C:\Windows\System\ucYfxsA.exe
  C:\Windows\System\ucYfxsA.exe
  2⤵
  PID:9004
- C:\Windows\System\VuGfcsJ.exe
  C:\Windows\System\VuGfcsJ.exe
  2⤵
  PID:9024
- C:\Windows\System\JRiraoZ.exe
  C:\Windows\System\JRiraoZ.exe
  2⤵
  PID:9044
- C:\Windows\System\CrupLob.exe
  C:\Windows\System\CrupLob.exe
  2⤵
  PID:9060
- C:\Windows\System\WOLkRXZ.exe
  C:\Windows\System\WOLkRXZ.exe
  2⤵
  PID:9080
- C:\Windows\System\DKtHGtL.exe
  C:\Windows\System\DKtHGtL.exe
  2⤵
  PID:9144
- C:\Windows\System\xOMzWfx.exe
  C:\Windows\System\xOMzWfx.exe
  2⤵
  PID:9164
- C:\Windows\System\hvVeXRb.exe
  C:\Windows\System\hvVeXRb.exe
  2⤵
  PID:9184
- C:\Windows\System\XsFTdLf.exe
  C:\Windows\System\XsFTdLf.exe
  2⤵
  PID:9200
- C:\Windows\System\erivosq.exe
  C:\Windows\System\erivosq.exe
  2⤵
  PID:8108
- C:\Windows\System\ZDCbGhd.exe
  C:\Windows\System\ZDCbGhd.exe
  2⤵
  PID:8128
- C:\Windows\System\ebfAfNv.exe
  C:\Windows\System\ebfAfNv.exe
  2⤵
  PID:8260
- C:\Windows\System\CJpgNxT.exe
  C:\Windows\System\CJpgNxT.exe
  2⤵
  PID:8276
- C:\Windows\System\mvzzRhu.exe
  C:\Windows\System\mvzzRhu.exe
  2⤵
  PID:8344
- C:\Windows\System\eYMfTSu.exe
  C:\Windows\System\eYMfTSu.exe
  2⤵
  PID:8404
- C:\Windows\System\ATifLlc.exe
  C:\Windows\System\ATifLlc.exe
  2⤵
  PID:8224
- C:\Windows\System\LrkzPyh.exe
  C:\Windows\System\LrkzPyh.exe
  2⤵
  PID:8456
- C:\Windows\System\jTYBCSK.exe
  C:\Windows\System\jTYBCSK.exe
  2⤵
  PID:8468
- C:\Windows\System\YaepFNS.exe
  C:\Windows\System\YaepFNS.exe
  2⤵
  PID:8544
- C:\Windows\System\SDIzstW.exe
  C:\Windows\System\SDIzstW.exe
  2⤵
  PID:8576
- C:\Windows\System\smesPru.exe
  C:\Windows\System\smesPru.exe
  2⤵
  PID:8500
- C:\Windows\System\GZBjswf.exe
  C:\Windows\System\GZBjswf.exe
  2⤵
  PID:8572
- C:\Windows\System\YxhGeWd.exe
  C:\Windows\System\YxhGeWd.exe
  2⤵
  PID:8624
- C:\Windows\System\DXDNTct.exe
  C:\Windows\System\DXDNTct.exe
  2⤵
  PID:8640
- C:\Windows\System\CIfLutz.exe
  C:\Windows\System\CIfLutz.exe
  2⤵
  PID:8664
- C:\Windows\System\PJfLlDQ.exe
  C:\Windows\System\PJfLlDQ.exe
  2⤵
  PID:8740
- C:\Windows\System\PJxJmOC.exe
  C:\Windows\System\PJxJmOC.exe
  2⤵
  PID:8684
- C:\Windows\System\bYJmEGg.exe
  C:\Windows\System\bYJmEGg.exe
  2⤵
  PID:8720
- C:\Windows\System\USBmCNp.exe
  C:\Windows\System\USBmCNp.exe
  2⤵
  PID:8816
- C:\Windows\System\pKoGlFG.exe
  C:\Windows\System\pKoGlFG.exe
  2⤵
  PID:8888
- C:\Windows\System\EoMfAJU.exe
  C:\Windows\System\EoMfAJU.exe
  2⤵
  PID:8920
- C:\Windows\System\oJwuIaj.exe
  C:\Windows\System\oJwuIaj.exe
  2⤵
  PID:9000
- C:\Windows\System\UpeNdcj.exe
  C:\Windows\System\UpeNdcj.exe
  2⤵
  PID:8828
- C:\Windows\System\qffEXXf.exe
  C:\Windows\System\qffEXXf.exe
  2⤵
  PID:8868
- C:\Windows\System\AXJWAep.exe
  C:\Windows\System\AXJWAep.exe
  2⤵
  PID:8836
- C:\Windows\System\NkAFplZ.exe
  C:\Windows\System\NkAFplZ.exe
  2⤵
  PID:8976
- C:\Windows\System\izgeMfg.exe
  C:\Windows\System\izgeMfg.exe
  2⤵
  PID:9052
- C:\Windows\System\aFEHotq.exe
  C:\Windows\System\aFEHotq.exe
  2⤵
  PID:9100
- C:\Windows\System\MSfBoLx.exe
  C:\Windows\System\MSfBoLx.exe
  2⤵
  PID:9104
- C:\Windows\System\IdVTyKb.exe
  C:\Windows\System\IdVTyKb.exe
  2⤵
  PID:9156
- C:\Windows\System\Ectilam.exe
  C:\Windows\System\Ectilam.exe
  2⤵
  PID:9196
- C:\Windows\System\KkdFubj.exe
  C:\Windows\System\KkdFubj.exe
  2⤵
  PID:9208
- C:\Windows\System\ElUGVin.exe
  C:\Windows\System\ElUGVin.exe
  2⤵
  PID:8208
- C:\Windows\System\zOKEHRH.exe
  C:\Windows\System\zOKEHRH.exe
  2⤵
  PID:8376
- C:\Windows\System\OwtIUht.exe
  C:\Windows\System\OwtIUht.exe
  2⤵
  PID:8296
- C:\Windows\System\cetfMmP.exe
  C:\Windows\System\cetfMmP.exe
  2⤵
  PID:8388
- C:\Windows\System\vFPEbwJ.exe
  C:\Windows\System\vFPEbwJ.exe
  2⤵
  PID:8596
- C:\Windows\System\PpUMgeh.exe
  C:\Windows\System\PpUMgeh.exe
  2⤵
  PID:8532
- C:\Windows\System\sqHSIbu.exe
  C:\Windows\System\sqHSIbu.exe
  2⤵
  PID:8604
- C:\Windows\System\UDeRhVL.exe
  C:\Windows\System\UDeRhVL.exe
  2⤵
  PID:8632
- C:\Windows\System\MWGUnuf.exe
  C:\Windows\System\MWGUnuf.exe
  2⤵
  PID:8712
- C:\Windows\System\NUbnlbD.exe
  C:\Windows\System\NUbnlbD.exe
  2⤵
  PID:8756
- C:\Windows\System\priAKig.exe
  C:\Windows\System\priAKig.exe
  2⤵
  PID:8924
- C:\Windows\System\nHJMzcw.exe
  C:\Windows\System\nHJMzcw.exe
  2⤵
  PID:9068
- C:\Windows\System\LHxFTNH.exe
  C:\Windows\System\LHxFTNH.exe
  2⤵
  PID:8936
- C:\Windows\System\HdjejEO.exe
  C:\Windows\System\HdjejEO.exe
  2⤵
  PID:8996
- C:\Windows\System\gMbBWSp.exe
  C:\Windows\System\gMbBWSp.exe
  2⤵
  PID:8944
- C:\Windows\System\DxDRKso.exe
  C:\Windows\System\DxDRKso.exe
  2⤵
  PID:8900
- C:\Windows\System\REyYYan.exe
  C:\Windows\System\REyYYan.exe
  2⤵
  PID:1000
- C:\Windows\System\nicWGMJ.exe
  C:\Windows\System\nicWGMJ.exe
  2⤵
  PID:9140
- C:\Windows\System\UNtybrX.exe
  C:\Windows\System\UNtybrX.exe
  2⤵
  PID:9176
- C:\Windows\System\HjBrayc.exe
  C:\Windows\System\HjBrayc.exe
  2⤵
  PID:8272
- C:\Windows\System\FpMYbMJ.exe
  C:\Windows\System\FpMYbMJ.exe
  2⤵
  PID:8340
- C:\Windows\System\IXmWJNu.exe
  C:\Windows\System\IXmWJNu.exe
  2⤵
  PID:9072
- C:\Windows\System\atlAmFu.exe
  C:\Windows\System\atlAmFu.exe
  2⤵
  PID:8592
- C:\Windows\System\LEyKSFH.exe
  C:\Windows\System\LEyKSFH.exe
  2⤵
  PID:8660
- C:\Windows\System\NllyvYQ.exe
  C:\Windows\System\NllyvYQ.exe
  2⤵
  PID:8904
- C:\Windows\System\GtBmfaW.exe
  C:\Windows\System\GtBmfaW.exe
  2⤵
  PID:9012
- C:\Windows\System\osxizhl.exe
  C:\Windows\System\osxizhl.exe
  2⤵
  PID:8956
- C:\Windows\System\cBvLnRp.exe
  C:\Windows\System\cBvLnRp.exe
  2⤵
  PID:8940
- C:\Windows\System\YiCDNSN.exe
  C:\Windows\System\YiCDNSN.exe
  2⤵
  PID:9076
- C:\Windows\System\amSAXLP.exe
  C:\Windows\System\amSAXLP.exe
  2⤵
  PID:8240
- C:\Windows\System\qahygMJ.exe
  C:\Windows\System\qahygMJ.exe
  2⤵
  PID:1744
- C:\Windows\System\RDyKSsx.exe
  C:\Windows\System\RDyKSsx.exe
  2⤵
  PID:6708
- C:\Windows\System\XzomHDJ.exe
  C:\Windows\System\XzomHDJ.exe
  2⤵
  PID:8612
- C:\Windows\System\vqmqjmi.exe
  C:\Windows\System\vqmqjmi.exe
  2⤵
  PID:8700
- C:\Windows\System\POnkOYH.exe
  C:\Windows\System\POnkOYH.exe
  2⤵
  PID:8676
- C:\Windows\System\UXTMSDH.exe
  C:\Windows\System\UXTMSDH.exe
  2⤵
  PID:9032
- C:\Windows\System\JzVriZp.exe
  C:\Windows\System\JzVriZp.exe
  2⤵
  PID:8220
- C:\Windows\System\GvpYvsD.exe
  C:\Windows\System\GvpYvsD.exe
  2⤵
  PID:8512
- C:\Windows\System\lXpgdCp.exe
  C:\Windows\System\lXpgdCp.exe
  2⤵
  PID:8608
- C:\Windows\System\sgIEiOv.exe
  C:\Windows\System\sgIEiOv.exe
  2⤵
  PID:8420
- C:\Windows\System\ADUToei.exe
  C:\Windows\System\ADUToei.exe
  2⤵
  PID:9020
- C:\Windows\System\Ueviskb.exe
  C:\Windows\System\Ueviskb.exe
  2⤵
  PID:9088
- C:\Windows\System\eDDzgcm.exe
  C:\Windows\System\eDDzgcm.exe
  2⤵
  PID:8440
- C:\Windows\System\dzTjFrD.exe
  C:\Windows\System\dzTjFrD.exe
  2⤵
  PID:9160
- C:\Windows\System\ByeHpeb.exe
  C:\Windows\System\ByeHpeb.exe
  2⤵
  PID:9220
- C:\Windows\System\bOiGpLt.exe
  C:\Windows\System\bOiGpLt.exe
  2⤵
  PID:9236
- C:\Windows\System\ipKhVgH.exe
  C:\Windows\System\ipKhVgH.exe
  2⤵
  PID:9252
- C:\Windows\System\QCLNotm.exe
  C:\Windows\System\QCLNotm.exe
  2⤵
  PID:9268
- C:\Windows\System\KKfrLmX.exe
  C:\Windows\System\KKfrLmX.exe
  2⤵
  PID:9284
- C:\Windows\System\bxRqSCD.exe
  C:\Windows\System\bxRqSCD.exe
  2⤵
  PID:9300
- C:\Windows\System\VxJRJGV.exe
  C:\Windows\System\VxJRJGV.exe
  2⤵
  PID:9320
- C:\Windows\System\IwsWJpx.exe
  C:\Windows\System\IwsWJpx.exe
  2⤵
  PID:9340
- C:\Windows\System\VElybBP.exe
  C:\Windows\System\VElybBP.exe
  2⤵
  PID:9356
- C:\Windows\System\SjZuzfP.exe
  C:\Windows\System\SjZuzfP.exe
  2⤵
  PID:9432
- C:\Windows\System\yidoNdk.exe
  C:\Windows\System\yidoNdk.exe
  2⤵
  PID:9448
- C:\Windows\System\xQXVbzr.exe
  C:\Windows\System\xQXVbzr.exe
  2⤵
  PID:9468
- C:\Windows\System\SXKYLbr.exe
  C:\Windows\System\SXKYLbr.exe
  2⤵
  PID:9484
- C:\Windows\System\cKqhxoc.exe
  C:\Windows\System\cKqhxoc.exe
  2⤵
  PID:9504
- C:\Windows\System\CNabVWA.exe
  C:\Windows\System\CNabVWA.exe
  2⤵
  PID:9524
- C:\Windows\System\YwskbMP.exe
  C:\Windows\System\YwskbMP.exe
  2⤵
  PID:9544
- C:\Windows\System\wyOSJRz.exe
  C:\Windows\System\wyOSJRz.exe
  2⤵
  PID:9564
- C:\Windows\System\KqUDYlG.exe
  C:\Windows\System\KqUDYlG.exe
  2⤵
  PID:9584
- C:\Windows\System\KEdNldp.exe
  C:\Windows\System\KEdNldp.exe
  2⤵
  PID:9604
- C:\Windows\System\gFkPsRG.exe
  C:\Windows\System\gFkPsRG.exe
  2⤵
  PID:9624
- C:\Windows\System\GFaZjCz.exe
  C:\Windows\System\GFaZjCz.exe
  2⤵
  PID:9640
- C:\Windows\System\BIqaUmg.exe
  C:\Windows\System\BIqaUmg.exe
  2⤵
  PID:9656
- C:\Windows\System\BrcgbPX.exe
  C:\Windows\System\BrcgbPX.exe
  2⤵
  PID:9696
- C:\Windows\System\SDeopLu.exe
  C:\Windows\System\SDeopLu.exe
  2⤵
  PID:9712
- C:\Windows\System\UsTotks.exe
  C:\Windows\System\UsTotks.exe
  2⤵
  PID:9728
- C:\Windows\System\kWLhkvp.exe
  C:\Windows\System\kWLhkvp.exe
  2⤵
  PID:9744
- C:\Windows\System\npuQtLF.exe
  C:\Windows\System\npuQtLF.exe
  2⤵
  PID:9760
- C:\Windows\System\yWUNOML.exe
  C:\Windows\System\yWUNOML.exe
  2⤵
  PID:9780
- C:\Windows\System\mmNwcYe.exe
  C:\Windows\System\mmNwcYe.exe
  2⤵
  PID:9796
- C:\Windows\System\SLNthIo.exe
  C:\Windows\System\SLNthIo.exe
  2⤵
  PID:9812
- C:\Windows\System\JBeNWNg.exe
  C:\Windows\System\JBeNWNg.exe
  2⤵
  PID:9828
- C:\Windows\System\XlBBPbk.exe
  C:\Windows\System\XlBBPbk.exe
  2⤵
  PID:9844
- C:\Windows\System\caMcgYb.exe
  C:\Windows\System\caMcgYb.exe
  2⤵
  PID:9896
- C:\Windows\System\hwApXAu.exe
  C:\Windows\System\hwApXAu.exe
  2⤵
  PID:9912
- C:\Windows\System\DayfFTu.exe
  C:\Windows\System\DayfFTu.exe
  2⤵
  PID:9928
- C:\Windows\System\jLWSozy.exe
  C:\Windows\System\jLWSozy.exe
  2⤵
  PID:9944
- C:\Windows\System\obsmCAG.exe
  C:\Windows\System\obsmCAG.exe
  2⤵
  PID:9960
- C:\Windows\System\QSBjhDS.exe
  C:\Windows\System\QSBjhDS.exe
  2⤵
  PID:9976
- C:\Windows\System\FKFCsAl.exe
  C:\Windows\System\FKFCsAl.exe
  2⤵
  PID:9996
- C:\Windows\System\hWQjrVA.exe
  C:\Windows\System\hWQjrVA.exe
  2⤵
  PID:10040
- C:\Windows\System\tdUqFmw.exe
  C:\Windows\System\tdUqFmw.exe
  2⤵
  PID:10056
- C:\Windows\System\GCkGVNr.exe
  C:\Windows\System\GCkGVNr.exe
  2⤵
  PID:10076
- C:\Windows\System\FlutFiC.exe
  C:\Windows\System\FlutFiC.exe
  2⤵
  PID:10092
- C:\Windows\System\mofDGYg.exe
  C:\Windows\System\mofDGYg.exe
  2⤵
  PID:10108
- C:\Windows\System\FYxiRBq.exe
  C:\Windows\System\FYxiRBq.exe
  2⤵
  PID:10124
- C:\Windows\System\bLuVeLE.exe
  C:\Windows\System\bLuVeLE.exe
  2⤵
  PID:10144
- C:\Windows\System\KDmOXpQ.exe
  C:\Windows\System\KDmOXpQ.exe
  2⤵
  PID:10164
- C:\Windows\System\AHZGsUJ.exe
  C:\Windows\System\AHZGsUJ.exe
  2⤵
  PID:10180
- C:\Windows\System\sUStEch.exe
  C:\Windows\System\sUStEch.exe
  2⤵
  PID:10196
- C:\Windows\System\OijbHrd.exe
  C:\Windows\System\OijbHrd.exe
  2⤵
  PID:10212
- C:\Windows\System\fgBBNJd.exe
  C:\Windows\System\fgBBNJd.exe
  2⤵
  PID:10232
- C:\Windows\System\uMTDHrk.exe
  C:\Windows\System\uMTDHrk.exe
  2⤵
  PID:9248
- C:\Windows\System\lRbiOhG.exe
  C:\Windows\System\lRbiOhG.exe
  2⤵
  PID:9308
- C:\Windows\System\JWvYGWV.exe
  C:\Windows\System\JWvYGWV.exe
  2⤵
  PID:8620
- C:\Windows\System\ecYVXZg.exe
  C:\Windows\System\ecYVXZg.exe
  2⤵
  PID:8356
- C:\Windows\System\lBcYJKL.exe
  C:\Windows\System\lBcYJKL.exe
  2⤵
  PID:8360
- C:\Windows\System\NmISoTd.exe
  C:\Windows\System\NmISoTd.exe
  2⤵
  PID:9228
- C:\Windows\System\bCfdzMQ.exe
  C:\Windows\System\bCfdzMQ.exe
  2⤵
  PID:9328
- C:\Windows\System\SZugEaT.exe
  C:\Windows\System\SZugEaT.exe
  2⤵
  PID:9380
- C:\Windows\System\nNEEQsp.exe
  C:\Windows\System\nNEEQsp.exe
  2⤵
  PID:9400
- C:\Windows\System\snOMwEI.exe
  C:\Windows\System\snOMwEI.exe
  2⤵
  PID:9480
- C:\Windows\System\bhNcESc.exe
  C:\Windows\System\bhNcESc.exe
  2⤵
  PID:9500
- C:\Windows\System\VhOnbkn.exe
  C:\Windows\System\VhOnbkn.exe
  2⤵
  PID:9536
- C:\Windows\System\yodGzaK.exe
  C:\Windows\System\yodGzaK.exe
  2⤵
  PID:9576
- C:\Windows\System\mDmKogF.exe
  C:\Windows\System\mDmKogF.exe
  2⤵
  PID:9672
- C:\Windows\System\bTNecYU.exe
  C:\Windows\System\bTNecYU.exe
  2⤵
  PID:9684
- C:\Windows\System\YAMmEbh.exe
  C:\Windows\System\YAMmEbh.exe
  2⤵
  PID:9724
- C:\Windows\System\DUZUlVo.exe
  C:\Windows\System\DUZUlVo.exe
  2⤵
  PID:9824
- C:\Windows\System\USwBhuH.exe
  C:\Windows\System\USwBhuH.exe
  2⤵
  PID:9772
- C:\Windows\System\hyscDNW.exe
  C:\Windows\System\hyscDNW.exe
  2⤵
  PID:9840
- C:\Windows\System\UxDmzaJ.exe
  C:\Windows\System\UxDmzaJ.exe
  2⤵
  PID:9868
- C:\Windows\System\ignFDqv.exe
  C:\Windows\System\ignFDqv.exe
  2⤵
  PID:9888
- C:\Windows\System\rgQiupd.exe
  C:\Windows\System\rgQiupd.exe
  2⤵
  PID:9940
- C:\Windows\System\cjTSvFm.exe
  C:\Windows\System\cjTSvFm.exe
  2⤵
  PID:9924
- C:\Windows\System\fxYiLfv.exe
  C:\Windows\System\fxYiLfv.exe
  2⤵
  PID:10020

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Windows\system\CzfczMa.exe

Filesize
2.4MB

MD5
c0febf90dbe6a311467b9b5268eb5256

SHA1
bd742a0b84ccdb1dc2da4130e956c2758ae22a6a

SHA256
61a44171ad96605880e2fbbb65e5fbac10952d5c6e8c4fb4b14bae2a3fb725f3

SHA512
5c3f5675e9d2e4401a4a51b6392dfd93b63945b0a6276319b6084ca24f7683b8569d131d0d0b02abf8f285827ec60289c15bb071c3e3a1aa161d6fe8bf8c3960

Download Submit
C:\Windows\system\DsUTOBf.exe

Filesize
2.4MB

MD5
d7faafc18ccfa864f7ce71db10e76497

SHA1
29662f0d77c75564bb2f99971a56b431343e5fc2

SHA256
6ee3a4ba8a3be7712b735e77b6897cd7a59acb1d7b6d65fa0cba7ba2489e24f8

SHA512
6c69ebf0bce429c73c1c9eef1ba097fb89509e8c7db550015a156b8b7f038254d14bc936d91e093331ebd8f7cc397b839777035e4a1113db2df7f6210edd19aa

Download Submit
C:\Windows\system\FIFzEZz.exe

Filesize
2.4MB

MD5
a800ff3f091bc52b8f9d5a5058199361

SHA1
22b050bf8ace0b5422c5edde3a6e57599caaca73

SHA256
2d82afc36b41ed8fc90981a6081902ff60ec4793a031e85ae2f41d27926823ec

SHA512
c97242dbcf7e5f53e22e92126c69016922b3d6c63d4b3ec02df2a69719bd7a4abb8620fbcbb852a020e8db3e0dea7174743869efa811e9b4618367461ed0f9eb

Download Submit
C:\Windows\system\IrhGSqo.exe

Filesize
2.4MB

MD5
a96f0ee0b87fe1a55d3dfa6023b41ff7

SHA1
819a107bf89c341d4654077ee7347f7b22264bb4

SHA256
362276df65460ecac4a63fc791fec398a6b1a9e923c1911dfcaec2eea0133e81

SHA512
6de9b32503e39aecfc2df67c0f0d3366445f3ebaa2d013abc49771ae48b839a90ba41538b1b02ebdde39060c07e20e2a87ffbe49338269b56feedb2e66ddc059

Download Submit
C:\Windows\system\JqPCOzX.exe

Filesize
2.4MB

MD5
a682040f583b4a54c5458bef0ac6de74

SHA1
aa9f1283d9267d98635583e7707a28e7a7ed8e6d

SHA256
7fca2e2d866701fb68e7ae2aea0ba1faa00a7fac63f4173d7d7a64ad2ab6643c

SHA512
a53a6e4f8752eec5712b0e02c183df7d6c129967ce58e9be5543a6fc708cc9876358cabfb83bb8765c943568b5b29e12e66972c1839fb70558acf21f4fefc240

Download Submit
C:\Windows\system\KzeSBzn.exe

Filesize
2.4MB

MD5
e13ed60531a77eb9344766c1319b27b9

SHA1
b7763d35bfd436b8724e3256ae8177b035f31b6e

SHA256
46221fe66afa05a7d3c046e42790cfe3bca1f4dd5ef2beec6dc27a96f9b42955

SHA512
a297f613740525bde8111c1b2fc9274c2afaecdc2168fd548eb5e3cffcb6187aa8b80607947dd55594dbd9c8678db7365f846b29e4c2dc2e1d6bba4ec63fc401

Download Submit
C:\Windows\system\LcTiRap.exe

Filesize
2.4MB

MD5
f48cc23f845aa5cc816d0bdf17041c26

SHA1
bfa56507a03ae6b0ddca67883d0df09a970d0eb9

SHA256
6bc94eba15c93ee5a63348034dd458cc43f0685c340ffb043106e0a22544ff91

SHA512
0f5d74afdf7f3cef3a1af8360e6dcf5e9c5d81e1fd7efdecc9f1fbb24cac7f021aee129c690f81b89ebc6e3a1650b3c2a889719e129799bbc13437239f9106a1

Download Submit
C:\Windows\system\ONIRrkL.exe

Filesize
2.4MB

MD5
88d47c4251229cd80a3e93809c9177e6

SHA1
f49c7cffede116e8027449d2c0b0fc1bf1c2f116

SHA256
c4aa1edf1ed60cfce0c970d52ddf9d54afa8f7e04e7008db2b62db49a54cfe29

SHA512
1fc23271ea65e29d5a6f362eb9ddc5e23f499a886e7cea79844f078e1fec173c7146ab97dca61ae4420a902c0f8c56e3871d57de4a01d356a094c7b830409403

Download Submit
C:\Windows\system\PXYQqDk.exe

Filesize
2.4MB

MD5
b157ab018d6eb85950b433cd43a1246c

SHA1
174907aeb5ca10525723f9fc0ef724964920ecbe

SHA256
56274cc864be3bdad26c2a676be62ecabeff7f280afa1058c37fb3da3f7b7fcf

SHA512
b166622aeccef2d60f5314a676c7d99db3eca27027c97aa3b6668fd935b85475f359bd3ef7d5a0bdc1347fd6c19f80c5210eafdce01746ac763d4f1701fff2f2

Download Submit
C:\Windows\system\PxCVclZ.exe

Filesize
2.4MB

MD5
63f4b3dda97d097793104aafd47c08ea

SHA1
4dbfcabfd84ed01db1da2535c17ec66c130be8c1

SHA256
68182815da572bcfc708d432ff9f926e6df9b365a4b800b95a80b074a00828f9

SHA512
a20187da4fb09303cc43f2eab8d9248bd39882568dfa20aa78a734611c342845133d88a8cd9c31a63cdf0b6352956dc320288c990845aafdc5495389ac17d97c

Download Submit
C:\Windows\system\QSgstNL.exe

Filesize
2.4MB

MD5
31a48b873d1cf148beb657cd72c8b526

SHA1
bf0969951ed476dec0a6f1074a153d4c8b15ca04

SHA256
f0e0ddb1fabd44c2d5354f5cbe58124986afbe8315b0536ad1677ab88207cb1b

SHA512
18ef46e63ab139109722b5dfd8c221da2ba4ec1b3df788cd765839a4cb92139a53950a54f99ba7e2c9392cccd03d157bd1a5ed0bba19514076dc588fe1a5c366

Download Submit
C:\Windows\system\QfWQObk.exe

Filesize
2.4MB

MD5
9e95abbbb0e2d477eb46d5bc9b43f190

SHA1
b4c9953239226293269685d424fae913c5b15199

SHA256
89ac1783805ead025e8da6f673db5b9a240d987cbb479e5e88220aa864b3d936

SHA512
bc07b886b1879a933505717546b92c92679627f0358a66b1c813bfd40c6bad702bbe5f0de90cdfb61568bd1d5f7cf2782ff135c50ff9a4876859bcc24a30e312

Download Submit
C:\Windows\system\TxMSfnp.exe

Filesize
2.4MB

MD5
886cc255480f979d1b5e1899f65d3459

SHA1
59fb958c02cfb1e03fe6880cf68f7a32bcc33781

SHA256
36349263f55c67d9d8f6057d8858383c1c018b2b8a94c79f6b00c965cc573395

SHA512
cb858bb2d03f56868364ba310d1d796cb9827efd8dff2f3166231dadcd529314b27bb5ac5e0b61b92a20cb223428c5a46c9c0a2b74997fffa395b7dafd183c1e

Download Submit
C:\Windows\system\UWhwSoS.exe

Filesize
2.4MB

MD5
40319e8536fbc7fc44522b0ddfb3a021

SHA1
0e9558799437fa38b4a666518a1d437cb8fad454

SHA256
b320f21c527294b7d1b9a7a99724505b378e155389fb0a5e9fd9db69f1f1b4bd

SHA512
5efe013898182c6acb31b8b97dcdbc4a1a8a2636fa539cde97b6393d9f174e8b3ceb9ccfb5cfe5e02dd509ca8d1e76599583f487a96e7bf70d6f0a351b69e784

Download Submit
C:\Windows\system\VisxJTs.exe

Filesize
2.4MB

MD5
743cdd7d76db387658f6c5cefa6f0618

SHA1
2fbbef8fbc13e3ee3764a0c1c359105c890da3db

SHA256
f32254f7edd2a802919dd47d501454805868beb29c5fea76311e5b120170f142

SHA512
1fe83d2d568acde69092d5f23435d14c684fc9cf2e03a1918af864bdec56e9d44b82f5ea074ef8c4355f71b10c928e7cc366ecf78c4d03dff5fe7cea74a7f852

Download Submit
C:\Windows\system\ZCUQPRk.exe

Filesize
2.4MB

MD5
d213220d403f17e19eab2fd302a851c7

SHA1
ac659c56a8cdc173af454a5bfae43a130bc98c5f

SHA256
9c5e525b2bb11538f1082683115ebe66275161213db71822c651074208983cca

SHA512
79dc915bfaab9186d63499cf3d4ad36bb308298adb3a6b869c9316ffe47ba06764dee5de5d2bcc7f7d99cf0bf4323f7b20d413f9156aff49f3dc7ac7ef253f53

Download Submit
C:\Windows\system\drRKbVD.exe

Filesize
2.4MB

MD5
c06892f09e65dcf0e10ffb55c754a557

SHA1
7cee5314a377e68ab53e126179f4dd3717b7d5a4

SHA256
6a5d4d37689376441889b20a50dc52483ddaa059bcbb396098dbdce8674afe9d

SHA512
7be82510211b6319b4387278c7f2a1a5d5c434b01b4c7a71f1f9523224bc7114e6f690b49616e2f647b06894a4ef1a0b47247f5a1cecfbe8670e8f7118cd1b11

Download Submit
C:\Windows\system\enDuCBh.exe

Filesize
2.4MB

MD5
be59badfb12fb1dedd4fb0bc1f78513a

SHA1
8cd942d8a5a2713ce1ead7e629ea46866a412809

SHA256
0a6350ffb8d090a0209f4ea62d436aeb578025ab2959d46763e8226625869a05

SHA512
14efd6855e431b2e372a88aff71380b9cfcdea92ee088329ca9430ae2311eeb798d62a39ea135f791ffb9cb5e6b67367942d689af8793e49788f8e919ef5b08b

Download Submit
C:\Windows\system\hBGlIEs.exe

Filesize
2.4MB

MD5
28b63df2ed2e364370d25f5d273871b5

SHA1
2dc6f9bec749cfd4d239924e53c99092cab789c7

SHA256
5481fe138f9817db6c7414aa62acff4a5158eb33b0c1ff935f4546343c00a6f7

SHA512
9636baccf5a83bd4a8845c35803c783e97e3e893b3c059d85a3937683da7ffb8c442c09817a291b0f54a7aa24bbcb6d2c4452736c296594d5adafd568069686a

Download Submit
C:\Windows\system\kbdkppM.exe

Filesize
2.4MB

MD5
bd730b1cb6a6965c4dcde7cd359f4762

SHA1
334710c7bbf6bdfa62b46855c4958e5bcd17db77

SHA256
8aa0d6d8235f7edbf919b2d2f1e7e7486eeddb4e11acdf264059f88190ad97fd

SHA512
e4c91685ad0c4d77609986e235a9b029cbb013e88f36f96ac1e0f126a2b219adcc317c2de0da48a3187762a1d06383862ccdb863eff9e438821882466b223305

Download Submit
C:\Windows\system\lyUhHwV.exe

Filesize
2.4MB

MD5
5e813e720eac95e89e54c0064eba0553

SHA1
8e6056b9743b8eb8fcb649e3ca3316b4508295b0

SHA256
558dcea0b3a3f8e3b6ada7169a144ea8c98b3d163b59cdeeed9fcd92dd9e8c19

SHA512
43edac7224b83796110f717a278bbce77a28923f625bcdf232e48c4585eb3b116e0f908e8a78b684d8e6e4ad43bc187885668022218602081b5e7e35eda58da7

Download Submit
C:\Windows\system\mMkGGAK.exe

Filesize
2.4MB

MD5
27116e5352e01388b7013cf09854a4c3

SHA1
0588808b38e3f4ec9347811d1fb2d34c1adf40c2

SHA256
cbca62c3ded12ec459fd791039208e84c6cbd82534c2ebcfea1b7ec06d2e139f

SHA512
a2135f5e5609eb1f22262e5e2017d3860c2c55e7f7489a141bb0a8626258ec807a7d0626510816405f2735b0fb10c2fd40db1d2131beb9cf935cccc497938727

Download Submit
C:\Windows\system\nBgRvpt.exe

Filesize
2.4MB

MD5
4f2584882e56386f6f782a33b693790b

SHA1
a9f4547d96cdbf58be7afbaeb4455ffd73baa109

SHA256
0184cf5544b224fa2ec997518d7c0c526c68d299e09c402df18ac47614dc5707

SHA512
2e8e04f3de7d513b147932bf238a43f27c3071f8ff4c74ea779c77f4a6432e643da1a6a01dc60047dbf76ae29a901214eb1033eee1695acc8e2bcab7a4fb27f9

Download Submit
C:\Windows\system\nLYddQE.exe

Filesize
2.4MB

MD5
b4ad0951956454997f9caac208c153d4

SHA1
260e49a377228437c9f7a71f50a226d4e6b714f3

SHA256
14113e6b8b3a92e0670fbb52975ee02003710ef9b0981c73110f4144a1a4f8af

SHA512
2d352572c5d5b33c2b745db8fa937c21dbc774d2f4f8ce3cfd21250bf4e9da1ec2df10f0566a508defa84a30c96439ab69e945c3078753c1e5003345b770749b

Download Submit
C:\Windows\system\nVEhzYF.exe

Filesize
2.4MB

MD5
df798aed3d355eceb9649e36c93a8d4d

SHA1
53f1a57ae3c60e52753aad10a9a7a377780cf1cc

SHA256
e9d1a86b58251e4ef5a43ab235a1845fb66a290fd62f0952e402a47abc93762a

SHA512
c242431b316431f4b376cdbe6db3b62221b173be57d6253c7dce3beb7d32c02ea6ea598dc57582c2149534d5cabc7a36840d63708bbeecdbd2c4e26015ab2504

Download Submit
C:\Windows\system\nlOWoFv.exe

Filesize
2.4MB

MD5
db9494f0ac01e09eab4228f4f1828f65

SHA1
2bea911725ab5a5b98faef296e9d18c81aa93b5b

SHA256
46f7a6d7b89999a520b69694fc4752b1947399a6f3a399c3089f19be36868f81

SHA512
d7bbf5a96a057b4085fa8702027d298ad466847e748a083176f2ed779c2c3b4e21c94c372fa4155792b310ea2f306c76fff06a131b3238c2798ed551973f2b8a

Download Submit
C:\Windows\system\piCpYAo.exe

Filesize
2.4MB

MD5
3216c1a86d478751e9722c35c3d06dff

SHA1
d791e65c17b5d36a2512a63effbcebf180f81ca0

SHA256
d8d99f27ba54627b880710b28df4ae6bd86976d569665a035d27802995cf8633

SHA512
1ac2db30b0997ffcee2241b559e527705248abefa85c765a5ea8b2ff62c06f892d71e9bedd984bd6c95878d3d287d5a62dae61aef875d72f6a7a9107aaac0328

Download Submit
C:\Windows\system\uPgjwHb.exe

Filesize
2.4MB

MD5
5902d9ade721501ed33654d23feca1c5

SHA1
a429d79087f91b675a89e8e06e5baf4a3c7144df

SHA256
f01de94d268fe3f5cef28c169d81aec8372f1639d0aa7a7c6cb14ca70169ffb1

SHA512
a7593e1c42ef166c416ed9a751441a7914d55ba658e7a395d0c1630e601183631d6121f5a2dd815aba954e18c2412054ef2a8e08656ef0ef42f74bcb199828bd

Download Submit
C:\Windows\system\xWpBjQS.exe

Filesize
2.4MB

MD5
0089c76381d562c8418bd170db2e02bf

SHA1
e2d26bbd319aec00f31092a2c67ad4aa3fa7cb2e

SHA256
96413aef4d830ba27ec6c2cab6020cbc35593dc7ec135bf58fc2f1c7d108436c

SHA512
d95301c9c5099ce21e63ad51140f0aed7bd9d99cfad3b68cab3cc71c78dbadb8e27ca536f06ea3e63e767561a519c7a9f0fa98bac559bb64cb6c21634146537c

Download Submit
\Windows\system\IgQqkfH.exe

Filesize
2.4MB

MD5
f7316ab5f50140b7e42b792ab43abba1

SHA1
145bb06b4d17084d391de8a090aa773ef0514e7c

SHA256
37f8b68e9b950f3ffb943b5a7c2ea46cc23e07897bfb59f15ed9a68b02fee6ef

SHA512
56a8eee855d0b9a5e8100cf6b5ad7a700c9cea3ccfd65bf7895a145386b705feba7f005c47afc215f3fd8ff028dac419de5c61aa3ef8fe51015243413e07a4e2

Download Submit
\Windows\system\YVmrIqe.exe

Filesize
2.4MB

MD5
ac2cc6db8cbb746b5cb13ce8e54aeb93

SHA1
9f1936c04f674a16beaec94b40963c59bbd013f8

SHA256
63b80fc153a0b27f6dc05559504de4bed26575e79a995f2bfc5cf951ea7b9ef8

SHA512
37aef128452bbe4c3579d4d68885e0d704751089db64c7a7c3450939c419e6a3e45c84cb31199c06681122b57965cc96ad9d78cfee1864d2705b848be55de911

Download Submit
\Windows\system\pmMWlYI.exe

Filesize
2.4MB

MD5
d4dcca409b21ea9b980f0341ff005807

SHA1
fa8b32646e625e9e6e0a2332e0536be3ec9bff09

SHA256
37fba476049786002c6f22787c93f7dfac597e824226eef04ac872433cefd4d4

SHA512
3908e0df443fa0c5b1b4e29c99e3ea3d67ec2218af00d4b92a7be2aff6ed131b49cc4c526eaf8d0476d120ee62cb44f43c982bb095b0b2393f3075d2ac78c2f9

Download Submit
memory/1508-101-0x000000013F440000-0x000000013F794000-memory.dmp

Filesize
3.3MB

Download
memory/1508-4046-0x000000013F440000-0x000000013F794000-memory.dmp

Filesize
3.3MB

Download
memory/1580-93-0x000000013F860000-0x000000013FBB4000-memory.dmp

Filesize
3.3MB

Download
memory/1580-4045-0x000000013F860000-0x000000013FBB4000-memory.dmp

Filesize
3.3MB

Download
memory/2036-14-0x000000013FBD0000-0x000000013FF24000-memory.dmp

Filesize
3.3MB

Download
memory/2036-4033-0x000000013FBD0000-0x000000013FF24000-memory.dmp

Filesize
3.3MB

Download
memory/2352-4044-0x000000013FA70000-0x000000013FDC4000-memory.dmp

Filesize
3.3MB

Download
memory/2352-86-0x000000013FA70000-0x000000013FDC4000-memory.dmp

Filesize
3.3MB

Download
memory/2376-61-0x000000013F2A0000-0x000000013F5F4000-memory.dmp

Filesize
3.3MB

Download
memory/2376-4038-0x000000013F2A0000-0x000000013F5F4000-memory.dmp

Filesize
3.3MB

Download
memory/2464-68-0x000000013FF40000-0x0000000140294000-memory.dmp

Filesize
3.3MB

Download
memory/2464-4041-0x000000013FF40000-0x0000000140294000-memory.dmp

Filesize
3.3MB

Download
memory/2472-67-0x000000013FB70000-0x000000013FEC4000-memory.dmp

Filesize
3.3MB

Download
memory/2472-4040-0x000000013FB70000-0x000000013FEC4000-memory.dmp

Filesize
3.3MB

Download
memory/2572-23-0x000000013F850000-0x000000013FBA4000-memory.dmp

Filesize
3.3MB

Download
memory/2572-4035-0x000000013F850000-0x000000013FBA4000-memory.dmp

Filesize
3.3MB

Download
memory/2624-4043-0x000000013F520000-0x000000013F874000-memory.dmp

Filesize
3.3MB

Download
memory/2624-70-0x000000013F520000-0x000000013F874000-memory.dmp

Filesize
3.3MB

Download
memory/2624-2722-0x000000013F520000-0x000000013F874000-memory.dmp

Filesize
3.3MB

Download
memory/2656-40-0x000000013F260000-0x000000013F5B4000-memory.dmp

Filesize
3.3MB

Download
memory/2656-4037-0x000000013F260000-0x000000013F5B4000-memory.dmp

Filesize
3.3MB

Download
memory/2696-4036-0x000000013FE40000-0x0000000140194000-memory.dmp

Filesize
3.3MB

Download
memory/2696-38-0x000000013FE40000-0x0000000140194000-memory.dmp

Filesize
3.3MB

Download
memory/2776-4039-0x000000013F110000-0x000000013F464000-memory.dmp

Filesize
3.3MB

Download
memory/2776-357-0x000000013F110000-0x000000013F464000-memory.dmp

Filesize
3.3MB

Download
memory/2776-42-0x000000013F110000-0x000000013F464000-memory.dmp

Filesize
3.3MB

Download
memory/2908-4042-0x000000013F2E0000-0x000000013F634000-memory.dmp

Filesize
3.3MB

Download
memory/2908-79-0x000000013F2E0000-0x000000013F634000-memory.dmp

Filesize
3.3MB

Download
memory/2932-4034-0x000000013FFE0000-0x0000000140334000-memory.dmp

Filesize
3.3MB

Download
memory/2932-15-0x000000013FFE0000-0x0000000140334000-memory.dmp

Filesize
3.3MB

Download
memory/2948-66-0x0000000001FA0000-0x00000000022F4000-memory.dmp

Filesize
3.3MB

Download
memory/2948-12-0x0000000001FA0000-0x00000000022F4000-memory.dmp

Filesize
3.3MB

Download
memory/2948-77-0x000000013FE40000-0x0000000140194000-memory.dmp

Filesize
3.3MB

Download
memory/2948-22-0x0000000001FA0000-0x00000000022F4000-memory.dmp

Filesize
3.3MB

Download
memory/2948-78-0x000000013F2E0000-0x000000013F634000-memory.dmp

Filesize
3.3MB

Download
memory/2948-3133-0x0000000001FA0000-0x00000000022F4000-memory.dmp

Filesize
3.3MB

Download
memory/2948-3589-0x0000000001FA0000-0x00000000022F4000-memory.dmp

Filesize
3.3MB

Download
memory/2948-57-0x000000013F2A0000-0x000000013F5F4000-memory.dmp

Filesize
3.3MB

Download
memory/2948-62-0x000000013F520000-0x000000013F874000-memory.dmp

Filesize
3.3MB

Download
memory/2948-16-0x000000013FFE0000-0x0000000140334000-memory.dmp

Filesize
3.3MB

Download
memory/2948-1-0x0000000000200000-0x0000000000210000-memory.dmp

Filesize
64KB

Download
memory/2948-35-0x000000013F110000-0x000000013F464000-memory.dmp

Filesize
3.3MB

Download
memory/2948-49-0x000000013F920000-0x000000013FC74000-memory.dmp

Filesize
3.3MB

Download
memory/2948-30-0x000000013F260000-0x000000013F5B4000-memory.dmp

Filesize
3.3MB

Download
memory/2948-92-0x0000000001FA0000-0x00000000022F4000-memory.dmp

Filesize
3.3MB

Download
memory/2948-100-0x000000013F440000-0x000000013F794000-memory.dmp

Filesize
3.3MB

Download
memory/2948-0-0x000000013F920000-0x000000013FC74000-memory.dmp

Filesize
3.3MB

Download
memory/2948-104-0x0000000001FA0000-0x00000000022F4000-memory.dmp

Filesize
3.3MB

Download
memory/2948-85-0x0000000001FA0000-0x00000000022F4000-memory.dmp

Filesize
3.3MB

Download
memory/2948-2821-0x000000013F2E0000-0x000000013F634000-memory.dmp

Filesize
3.3MB

Download
memory/2948-1832-0x0000000001FA0000-0x00000000022F4000-memory.dmp

Filesize
3.3MB

Download