4cc64e06df5c3b03d3889e401131f2a39b41c2594c2c1131fd41540b45e996c7

Analysis

max time kernel
117s
max time network
117s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
28/09/2024, 06:54

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

MoveWindow by Fatih Kodak/Source Code/Test.bat
Size

450B
MD5

d425cdc1673659119d4543f792b54b81
SHA1

a980dee2e1219c215c1f3b6fa8cade9c758ece72
SHA256

893daa90cff646996bffe7ffb18140b8a18a4980331c32268c7adc5ef306df57
SHA512

0fef121d216d4c38c6236821580f609613d906d03412cfdf3e6746c23d03038bdcf5eb17ac22675c031531d1ade54be1629ef0175fe106b0cb82d8082aa88853

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 64 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral5/memory/316-0-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/316-2-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/2360-3-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/2116-4-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/2116-6-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/2684-7-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/2312-9-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/840-10-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/2732-12-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/2776-13-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/2788-15-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/2856-17-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/2744-19-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/2176-20-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/2984-21-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/2204-23-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/2876-25-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/2956-26-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/2620-28-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/2800-29-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/2884-30-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/2760-31-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/2864-33-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/2596-34-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/2608-35-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/2624-36-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/2664-37-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/2644-38-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/1044-39-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/2240-40-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/3064-41-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/2288-42-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/980-43-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/1572-45-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/780-47-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/1560-48-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/1368-49-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/2820-51-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/2932-53-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/2940-54-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/1240-55-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/1536-56-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/2768-57-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/1508-59-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/2920-60-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/2916-61-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/2928-63-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/2840-64-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/1548-66-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/1676-68-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/1708-70-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/1152-71-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/1868-72-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/2228-73-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/1028-75-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/1760-76-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/2316-77-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/2112-79-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/2224-81-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/2064-83-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/1668-84-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/2528-85-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/1640-87-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral5/memory/540-89-0x0000000000400000-0x000000000040A000-memory.dmp	upx

Delays execution with timeout.exe 1 IoCs

evasion

pid	Process
2128	timeout.exe

Kills process with taskkill 2 IoCs

evasion

pid	Process
2656	taskkill.exe
2852	taskkill.exe

Suspicious behavior: CmdExeWriteProcessMemorySpam 64 IoCs

pid	Process
316	movewindow.exe
2360	movewindow.exe
2116	movewindow.exe
2684	movewindow.exe
2312	movewindow.exe
840	movewindow.exe
2732	movewindow.exe
2776	movewindow.exe
2788	movewindow.exe
2856	movewindow.exe
2744	movewindow.exe
2176	movewindow.exe
2984	movewindow.exe
2204	movewindow.exe
2876	movewindow.exe
2956	movewindow.exe
2620	movewindow.exe
2800	movewindow.exe
2884	movewindow.exe
2760	movewindow.exe
2864	movewindow.exe
2596	movewindow.exe
2608	movewindow.exe
2624	movewindow.exe
2664	movewindow.exe
2644	movewindow.exe
1044	movewindow.exe
2240	movewindow.exe
3064	movewindow.exe
2288	movewindow.exe
980	movewindow.exe
1572	movewindow.exe
780	movewindow.exe
1560	movewindow.exe
1368	movewindow.exe
2820	movewindow.exe
2932	movewindow.exe
2940	movewindow.exe
1240	movewindow.exe
1536	movewindow.exe
2768	movewindow.exe
1508	movewindow.exe
2920	movewindow.exe
2916	movewindow.exe
2928	movewindow.exe
2840	movewindow.exe
1548	movewindow.exe
1676	movewindow.exe
1708	movewindow.exe
1152	movewindow.exe
1868	movewindow.exe
2228	movewindow.exe
1028	movewindow.exe
1760	movewindow.exe
2316	movewindow.exe
2112	movewindow.exe
2224	movewindow.exe
2064	movewindow.exe
1668	movewindow.exe
2528	movewindow.exe
1640	movewindow.exe
540	movewindow.exe
2092	movewindow.exe
1836	movewindow.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeDebugPrivilege	2656	taskkill.exe
Token: SeDebugPrivilege	2852	taskkill.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 812 wrote to memory of 2372	812	cmd.exe	31
PID 812 wrote to memory of 2372	812	cmd.exe	31
PID 812 wrote to memory of 2372	812	cmd.exe	31
PID 812 wrote to memory of 2128	812	cmd.exe	32
PID 812 wrote to memory of 2128	812	cmd.exe	32
PID 812 wrote to memory of 2128	812	cmd.exe	32
PID 812 wrote to memory of 316	812	cmd.exe	33
PID 812 wrote to memory of 316	812	cmd.exe	33
PID 812 wrote to memory of 316	812	cmd.exe	33
PID 812 wrote to memory of 316	812	cmd.exe	33
PID 812 wrote to memory of 2360	812	cmd.exe	34
PID 812 wrote to memory of 2360	812	cmd.exe	34
PID 812 wrote to memory of 2360	812	cmd.exe	34
PID 812 wrote to memory of 2360	812	cmd.exe	34
PID 812 wrote to memory of 2116	812	cmd.exe	35
PID 812 wrote to memory of 2116	812	cmd.exe	35
PID 812 wrote to memory of 2116	812	cmd.exe	35
PID 812 wrote to memory of 2116	812	cmd.exe	35
PID 812 wrote to memory of 2684	812	cmd.exe	36
PID 812 wrote to memory of 2684	812	cmd.exe	36
PID 812 wrote to memory of 2684	812	cmd.exe	36
PID 812 wrote to memory of 2684	812	cmd.exe	36
PID 812 wrote to memory of 2312	812	cmd.exe	37
PID 812 wrote to memory of 2312	812	cmd.exe	37
PID 812 wrote to memory of 2312	812	cmd.exe	37
PID 812 wrote to memory of 2312	812	cmd.exe	37
PID 812 wrote to memory of 840	812	cmd.exe	38
PID 812 wrote to memory of 840	812	cmd.exe	38
PID 812 wrote to memory of 840	812	cmd.exe	38
PID 812 wrote to memory of 840	812	cmd.exe	38
PID 812 wrote to memory of 2732	812	cmd.exe	39
PID 812 wrote to memory of 2732	812	cmd.exe	39
PID 812 wrote to memory of 2732	812	cmd.exe	39
PID 812 wrote to memory of 2732	812	cmd.exe	39
PID 812 wrote to memory of 2776	812	cmd.exe	40
PID 812 wrote to memory of 2776	812	cmd.exe	40
PID 812 wrote to memory of 2776	812	cmd.exe	40
PID 812 wrote to memory of 2776	812	cmd.exe	40
PID 812 wrote to memory of 2788	812	cmd.exe	41
PID 812 wrote to memory of 2788	812	cmd.exe	41
PID 812 wrote to memory of 2788	812	cmd.exe	41
PID 812 wrote to memory of 2788	812	cmd.exe	41
PID 812 wrote to memory of 2856	812	cmd.exe	42
PID 812 wrote to memory of 2856	812	cmd.exe	42
PID 812 wrote to memory of 2856	812	cmd.exe	42
PID 812 wrote to memory of 2856	812	cmd.exe	42
PID 812 wrote to memory of 2744	812	cmd.exe	43
PID 812 wrote to memory of 2744	812	cmd.exe	43
PID 812 wrote to memory of 2744	812	cmd.exe	43
PID 812 wrote to memory of 2744	812	cmd.exe	43
PID 812 wrote to memory of 2176	812	cmd.exe	44
PID 812 wrote to memory of 2176	812	cmd.exe	44
PID 812 wrote to memory of 2176	812	cmd.exe	44
PID 812 wrote to memory of 2176	812	cmd.exe	44
PID 812 wrote to memory of 2984	812	cmd.exe	45
PID 812 wrote to memory of 2984	812	cmd.exe	45
PID 812 wrote to memory of 2984	812	cmd.exe	45
PID 812 wrote to memory of 2984	812	cmd.exe	45
PID 812 wrote to memory of 2204	812	cmd.exe	46
PID 812 wrote to memory of 2204	812	cmd.exe	46
PID 812 wrote to memory of 2204	812	cmd.exe	46
PID 812 wrote to memory of 2204	812	cmd.exe	46
PID 812 wrote to memory of 2876	812	cmd.exe	47
PID 812 wrote to memory of 2876	812	cmd.exe	47

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\Test.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:812
- C:\Windows\system32\calc.exe
  calc.exe
  2⤵
  PID:2372
- C:\Windows\system32\timeout.exe
  timeout /t 3
  2⤵
  - Delays execution with timeout.exe
  PID:2128
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 0 0
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:316
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 20 0
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:2360
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 40 0
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:2116
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 60 0
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:2684
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 80 0
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:2312
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 100 0
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:840
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 120 0
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:2732
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 140 0
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:2776
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 160 0
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:2788
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 180 0
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:2856
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 200 0
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:2744
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 220 0
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:2176
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 240 0
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:2984
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 260 0
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:2204
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 280 0
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:2876
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 300 0
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:2956
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 320 0
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:2620
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 340 0
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:2800
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 360 0
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:2884
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 380 0
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:2760
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 400 0
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:2864
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 420 0
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:2596
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 440 0
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:2608
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 460 0
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:2624
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 480 0
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:2664
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 500 0
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:2644
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 520 0
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:1044
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 540 0
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:2240
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 560 0
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:3064
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 580 0
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:2288
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 600 0
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:980
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 0 20
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:1572
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 20 20
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:780
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 40 20
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:1560
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 60 20
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:1368
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 80 20
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:2820
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 100 20
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:2932
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 120 20
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:2940
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 140 20
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:1240
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 160 20
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:1536
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 180 20
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:2768
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 200 20
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:1508
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 220 20
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:2920
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 240 20
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:2916
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 260 20
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:2928
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 280 20
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:2840
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 300 20
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:1548
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 320 20
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:1676
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 340 20
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:1708
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 360 20
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:1152
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 380 20
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:1868
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 400 20
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:2228
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 420 20
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:1028
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 440 20
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:1760
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 460 20
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:2316
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 480 20
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:2112
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 500 20
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:2224
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 520 20
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:2064
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 540 20
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:1668
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 560 20
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:2528
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 580 20
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:1640
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 600 20
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:540
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 0 40
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:2092
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 20 40
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:1836
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 40 40
  2⤵
  PID:1488
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 60 40
  2⤵
  PID:2060
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 80 40
  2⤵
  PID:1060
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 100 40
  2⤵
  PID:3008
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 120 40
  2⤵
  PID:3016
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 140 40
  2⤵
  PID:1720
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 160 40
  2⤵
  PID:1956
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 180 40
  2⤵
  PID:1184
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 200 40
  2⤵
  PID:948
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 220 40
  2⤵
  PID:2480
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 240 40
  2⤵
  PID:1304
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 260 40
  2⤵
  PID:2036
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 280 40
  2⤵
  PID:464
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 300 40
  2⤵
  PID:1824
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 320 40
  2⤵
  PID:2072
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 340 40
  2⤵
  PID:1648
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 360 40
  2⤵
  PID:1636
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 380 40
  2⤵
  PID:756
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 400 40
  2⤵
  PID:564
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 420 40
  2⤵
  PID:2436
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 440 40
  2⤵
  PID:2456
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 460 40
  2⤵
  PID:1120
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 480 40
  2⤵
  PID:2172
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 500 40
  2⤵
  PID:2552
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 520 40
  2⤵
  PID:1268
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 540 40
  2⤵
  PID:2192
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 560 40
  2⤵
  PID:852
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 580 40
  2⤵
  PID:2428
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 600 40
  2⤵
  PID:2420
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 0 60
  2⤵
  PID:1524
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 20 60
  2⤵
  PID:2340
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 40 60
  2⤵
  PID:2952
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 60 60
  2⤵
  PID:2508
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 80 60
  2⤵
  PID:1796
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 100 60
  2⤵
  PID:3024
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 120 60
  2⤵
  PID:1584
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 140 60
  2⤵
  PID:2084
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 160 60
  2⤵
  PID:3020
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 180 60
  2⤵
  PID:1684
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 200 60
  2⤵
  PID:2360
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 220 60
  2⤵
  PID:2520
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 240 60
  2⤵
  PID:2312
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 260 60
  2⤵
  PID:2696
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 280 60
  2⤵
  PID:2732
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 300 60
  2⤵
  PID:1292
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 320 60
  2⤵
  PID:1828
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 340 60
  2⤵
  PID:2856
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 360 60
  2⤵
  PID:2600
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 380 60
  2⤵
  PID:2176
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 400 60
  2⤵
  PID:2984
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 420 60
  2⤵
  PID:2716
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 440 60
  2⤵
  PID:2708
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 460 60
  2⤵
  PID:2832
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 480 60
  2⤵
  PID:2728
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 500 60
  2⤵
  PID:2884
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 520 60
  2⤵
  PID:2756
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 540 60
  2⤵
  PID:2872
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 560 60
  2⤵
  PID:2612
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 580 60
  2⤵
  PID:1252
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 600 60
  2⤵
  PID:2636
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 0 80
  2⤵
  PID:2304
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 20 80
  2⤵
  PID:2432
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 40 80
  2⤵
  PID:2868
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 60 80
  2⤵
  PID:524
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 80 80
  2⤵
  PID:2268
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 100 80
  2⤵
  PID:780
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 120 80
  2⤵
  PID:1560
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 140 80
  2⤵
  PID:1004
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 160 80
  2⤵
  PID:376
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 180 80
  2⤵
  PID:1480
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 200 80
  2⤵
  PID:2496
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 220 80
  2⤵
  PID:1536
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 240 80
  2⤵
  PID:2580
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 260 80
  2⤵
  PID:2660
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 280 80
  2⤵
  PID:2816
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 300 80
  2⤵
  PID:2928
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 320 80
  2⤵
  PID:2840
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 340 80
  2⤵
  PID:2964
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 360 80
  2⤵
  PID:2136
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 380 80
  2⤵
  PID:1916
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 400 80
  2⤵
  PID:1664
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 420 80
  2⤵
  PID:1156
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 440 80
  2⤵
  PID:1028
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 460 80
  2⤵
  PID:1760
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 480 80
  2⤵
  PID:2184
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 500 80
  2⤵
  PID:2040
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 520 80
  2⤵
  PID:2232
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 540 80
  2⤵
  PID:532
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 560 80
  2⤵
  PID:1816
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 580 80
  2⤵
  PID:1496
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 600 80
  2⤵
  PID:540
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 0 100
  2⤵
  PID:2092
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 20 100
  2⤵
  PID:576
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 40 100
  2⤵
  PID:1488
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 60 100
  2⤵
  PID:2060
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 80 100
  2⤵
  PID:1372
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 100 100
  2⤵
  PID:3008
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 120 100
  2⤵
  PID:3016
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 140 100
  2⤵
  PID:1124
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 160 100
  2⤵
  PID:1600
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 180 100
  2⤵
  PID:1960
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 200 100
  2⤵
  PID:1644
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 220 100
  2⤵
  PID:1148
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 240 100
  2⤵
  PID:1304
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 260 100
  2⤵
  PID:2036
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 280 100
  2⤵
  PID:1876
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 300 100
  2⤵
  PID:1824
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 320 100
  2⤵
  PID:1940
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 340 100
  2⤵
  PID:2068
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 360 100
  2⤵
  PID:1636
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 380 100
  2⤵
  PID:756
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 400 100
  2⤵
  PID:564
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 420 100
  2⤵
  PID:2124
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 440 100
  2⤵
  PID:2328
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 460 100
  2⤵
  PID:2332
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 480 100
  2⤵
  PID:2172
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 500 100
  2⤵
  PID:2008
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 520 100
  2⤵
  PID:1268
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 540 100
  2⤵
  PID:2192
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 560 100
  2⤵
  PID:1608
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 580 100
  2⤵
  PID:2428
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 600 100
  2⤵
  PID:2420
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 0 120
  2⤵
  PID:2016
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 20 120
  2⤵
  PID:2340
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 40 120
  2⤵
  PID:2952
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 60 120
  2⤵
  PID:2508
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 80 120
  2⤵
  PID:1796
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 100 120
  2⤵
  PID:3024
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 120 120
  2⤵
  PID:1596
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 140 120
  2⤵
  PID:2004
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 160 120
  2⤵
  PID:1684
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 180 120
  2⤵
  PID:2360
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 200 120
  2⤵
  PID:2260
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 220 120
  2⤵
  PID:2700
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 240 120
  2⤵
  PID:840
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 260 120
  2⤵
  PID:2484
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 280 120
  2⤵
  PID:1292
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 300 120
  2⤵
  PID:2776
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 320 120
  2⤵
  PID:2996
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 340 120
  2⤵
  PID:2812
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 360 120
  2⤵
  PID:2780
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 380 120
  2⤵
  PID:2888
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 400 120
  2⤵
  PID:2880
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 420 120
  2⤵
  PID:2204
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 440 120
  2⤵
  PID:2620
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 460 120
  2⤵
  PID:2628
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 480 120
  2⤵
  PID:2944
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 500 120
  2⤵
  PID:2764
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 520 120
  2⤵
  PID:2588
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 540 120
  2⤵
  PID:2376
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 560 120
  2⤵
  PID:2624
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 580 120
  2⤵
  PID:2604
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 600 120
  2⤵
  PID:2712
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 0 140
  2⤵
  PID:2656
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 20 140
  2⤵
  PID:3068
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 40 140
  2⤵
  PID:1632
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 60 140
  2⤵
  PID:2836
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 80 140
  2⤵
  PID:668
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 100 140
  2⤵
  PID:1572
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 120 140
  2⤵
  PID:1368
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 140 140
  2⤵
  PID:2820
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 160 140
  2⤵
  PID:2932
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 180 140
  2⤵
  PID:1480
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 200 140
  2⤵
  PID:1240
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 220 140
  2⤵
  PID:2924
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 240 140
  2⤵
  PID:2844
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 260 140
  2⤵
  PID:2652
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 280 140
  2⤵
  PID:2680
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 300 140
  2⤵
  PID:2928
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 320 140
  2⤵
  PID:2692
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 340 140
  2⤵
  PID:1072
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 360 140
  2⤵
  PID:2136
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 380 140
  2⤵
  PID:1916
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 400 140
  2⤵
  PID:1664
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 420 140
  2⤵
  PID:2228
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 440 140
  2⤵
  PID:1028
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 460 140
  2⤵
  PID:1428
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 480 140
  2⤵
  PID:2112
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 500 140
  2⤵
  PID:2224
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 520 140
  2⤵
  PID:792
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 540 140
  2⤵
  PID:2132
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 560 140
  2⤵
  PID:1816
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 580 140
  2⤵
  PID:1496
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 600 140
  2⤵
  PID:1040
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 0 160
  2⤵
  PID:2076
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 20 160
  2⤵
  PID:984
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 40 160
  2⤵
  PID:1488
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 60 160
  2⤵
  PID:2060
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 80 160
  2⤵
  PID:2572
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 100 160
  2⤵
  PID:3008
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 120 160
  2⤵
  PID:1720
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 140 160
  2⤵
  PID:1260
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 160 160
  2⤵
  PID:1600
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 180 160
  2⤵
  PID:1352
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 200 160
  2⤵
  PID:1644
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 220 160
  2⤵
  PID:1752
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 240 160
  2⤵
  PID:1304
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 260 160
  2⤵
  PID:464
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 280 160
  2⤵
  PID:608
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 300 160
  2⤵
  PID:2072
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 320 160
  2⤵
  PID:1940
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 340 160
  2⤵
  PID:1872
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 360 160
  2⤵
  PID:1656
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 380 160
  2⤵
  PID:756
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 400 160
  2⤵
  PID:2000
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 420 160
  2⤵
  PID:924
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 440 160
  2⤵
  PID:1852
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 460 160
  2⤵
  PID:2332
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 480 160
  2⤵
  PID:2104
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 500 160
  2⤵
  PID:2008
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 520 160
  2⤵
  PID:556
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 540 160
  2⤵
  PID:852
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 560 160
  2⤵
  PID:1608
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 580 160
  2⤵
  PID:2428
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 600 160
  2⤵
  PID:2120
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 0 180
  2⤵
  PID:2388
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 20 180
  2⤵
  PID:1748
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 40 180
  2⤵
  PID:2444
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 60 180
  2⤵
  PID:2508
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 80 180
  2⤵
  PID:2900
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 100 180
  2⤵
  PID:3024
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 120 180
  2⤵
  PID:856
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 140 180
  2⤵
  PID:316
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 160 180
  2⤵
  PID:1592
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 180 180
  2⤵
  PID:2772
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 200 180
  2⤵
  PID:2684
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 220 180
  2⤵
  PID:2320
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 240 180
  2⤵
  PID:2740
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 260 180
  2⤵
  PID:2784
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 280 180
  2⤵
  PID:2988
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 300 180
  2⤵
  PID:2736
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 320 180
  2⤵
  PID:1828
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 340 180
  2⤵
  PID:2996
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 360 180
  2⤵
  PID:2600
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 380 180
  2⤵
  PID:2744
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 400 180
  2⤵
  PID:2888
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 420 180
  2⤵
  PID:2876
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 440 180
  2⤵
  PID:2708
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 460 180
  2⤵
  PID:2896
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 480 180
  2⤵
  PID:2728
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 500 180
  2⤵
  PID:2640
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 520 180
  2⤵
  PID:2756
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 540 180
  2⤵
  PID:2760
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 560 180
  2⤵
  PID:2376
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 580 180
  2⤵
  PID:2624
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 600 180
  2⤵
  PID:2636
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 0 200
  2⤵
  PID:2664
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 20 200
  2⤵
  PID:2432
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 40 200
  2⤵
  PID:2868
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 60 200
  2⤵
  PID:1632
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 80 200
  2⤵
  PID:2144
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 100 200
  2⤵
  PID:836
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 120 200
  2⤵
  PID:1092
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 140 200
  2⤵
  PID:2460
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 160 200
  2⤵
  PID:376
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 180 200
  2⤵
  PID:2932
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 200 200
  2⤵
  PID:2968
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 220 200
  2⤵
  PID:2768
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 240 200
  2⤵
  PID:1508
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 260 200
  2⤵
  PID:2920
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 280 200
  2⤵
  PID:2816
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 300 200
  2⤵
  PID:2912
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 320 200
  2⤵
  PID:1548
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 340 200
  2⤵
  PID:2964
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 360 200
  2⤵
  PID:2356
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 380 200
  2⤵
  PID:1456
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 400 200
  2⤵
  PID:1952
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 420 200
  2⤵
  PID:900
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 440 200
  2⤵
  PID:1996
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 460 200
  2⤵
  PID:1028
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 480 200
  2⤵
  PID:2556
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 500 200
  2⤵
  PID:2280
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 520 200
  2⤵
  PID:592
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 540 200
  2⤵
  PID:532
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 560 200
  2⤵
  PID:2528
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 580 200
  2⤵
  PID:1816
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 600 200
  2⤵
  PID:1496
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 0 220
  2⤵
  PID:1040
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 20 220
  2⤵
  PID:2076
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 40 220
  2⤵
  PID:1500
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 60 220
  2⤵
  PID:1068
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 80 220
  2⤵
  PID:2060
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 100 220
  2⤵
  PID:752
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 120 220
  2⤵
  PID:1136
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 140 220
  2⤵
  PID:1124
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 160 220
  2⤵
  PID:1956
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 180 220
  2⤵
  PID:1184
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 200 220
  2⤵
  PID:1932
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 220 220
  2⤵
  PID:1148
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 240 220
  2⤵
  PID:1752
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 260 220
  2⤵
  PID:2036
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 280 220
  2⤵
  PID:1876
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 300 220
  2⤵
  PID:2448
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 320 220
  2⤵
  PID:1648
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 340 220
  2⤵
  PID:892
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 360 220
  2⤵
  PID:944
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 380 220
  2⤵
  PID:2476
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 400 220
  2⤵
  PID:2436
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 420 220
  2⤵
  PID:696
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 440 220
  2⤵
  PID:1852
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 460 220
  2⤵
  PID:2172
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 480 220
  2⤵
  PID:1696
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 500 220
  2⤵
  PID:2108
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 520 220
  2⤵
  PID:2192
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 540 220
  2⤵
  PID:2080
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 560 220
  2⤵
  PID:2100
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 580 220
  2⤵
  PID:2428
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 600 220
  2⤵
  PID:2412
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 0 240
  2⤵
  PID:2340
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 20 240
  2⤵
  PID:1748
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 40 240
  2⤵
  PID:1756
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 60 240
  2⤵
  PID:2508
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 80 240
  2⤵
  PID:2900
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 100 240
  2⤵
  PID:3024
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 120 240
  2⤵
  PID:856
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 140 240
  2⤵
  PID:316
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 160 240
  2⤵
  PID:1972
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 180 240
  2⤵
  PID:2128
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 200 240
  2⤵
  PID:2684
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 220 240
  2⤵
  PID:2320
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 240 240
  2⤵
  PID:1964
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 260 240
  2⤵
  PID:2784
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 280 240
  2⤵
  PID:2796
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 300 240
  2⤵
  PID:2736
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 320 240
  2⤵
  PID:2724
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 340 240
  2⤵
  PID:2996
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 360 240
  2⤵
  PID:2600
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 380 240
  2⤵
  PID:2720
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 400 240
  2⤵
  PID:2888
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 420 240
  2⤵
  PID:2204
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 440 240
  2⤵
  PID:2300
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 460 240
  2⤵
  PID:2896
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 480 240
  2⤵
  PID:2884
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 500 240
  2⤵
  PID:2640
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 520 240
  2⤵
  PID:2756
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 540 240
  2⤵
  PID:2608
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 560 240
  2⤵
  PID:2668
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 580 240
  2⤵
  PID:3060
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 600 240
  2⤵
  PID:2712
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 0 260
  2⤵
  PID:2664
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 20 260
  2⤵
  PID:2288
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 40 260
  2⤵
  PID:2868
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 60 260
  2⤵
  PID:1632
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 80 260
  2⤵
  PID:2144
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 100 260
  2⤵
  PID:836
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 120 260
  2⤵
  PID:1092
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 140 260
  2⤵
  PID:2460
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 160 260
  2⤵
  PID:376
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 180 260
  2⤵
  PID:2012
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 200 260
  2⤵
  PID:2968
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 220 260
  2⤵
  PID:2768
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 240 260
  2⤵
  PID:1508
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 260 260
  2⤵
  PID:2920
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 280 260
  2⤵
  PID:2908
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 300 260
  2⤵
  PID:2948
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 320 260
  2⤵
  PID:1548
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 340 260
  2⤵
  PID:1840
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 360 260
  2⤵
  PID:2356
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 380 260
  2⤵
  PID:1456
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 400 260
  2⤵
  PID:1452
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 420 260
  2⤵
  PID:1156
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 440 260
  2⤵
  PID:2152
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 460 260
  2⤵
  PID:1760
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 480 260
  2⤵
  PID:2556
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 500 260
  2⤵
  PID:2040
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 520 260
  2⤵
  PID:2232
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 540 260
  2⤵
  PID:480
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 560 260
  2⤵
  PID:568
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 580 260
  2⤵
  PID:1812
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 600 260
  2⤵
  PID:1836
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 0 280
  2⤵
  PID:576
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 20 280
  2⤵
  PID:2824
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 40 280
  2⤵
  PID:392
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 60 280
  2⤵
  PID:1060
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 80 280
  2⤵
  PID:3000
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 100 280
  2⤵
  PID:3004
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 120 280
  2⤵
  PID:2248
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 140 280
  2⤵
  PID:440
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 160 280
  2⤵
  PID:1960
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 180 280
  2⤵
  PID:1352
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 200 280
  2⤵
  PID:1644
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 220 280
  2⤵
  PID:688
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 240 280
  2⤵
  PID:1304
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 260 280
  2⤵
  PID:1844
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 280 280
  2⤵
  PID:464
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 300 280
  2⤵
  PID:1824
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 320 280
  2⤵
  PID:1544
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 340 280
  2⤵
  PID:1648
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 360 280
  2⤵
  PID:892
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 380 280
  2⤵
  PID:944
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 400 280
  2⤵
  PID:2168
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 420 280
  2⤵
  PID:2436
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 440 280
  2⤵
  PID:2328
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 460 280
  2⤵
  PID:1852
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 480 280
  2⤵
  PID:2172
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 500 280
  2⤵
  PID:2552
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 520 280
  2⤵
  PID:2108
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 540 280
  2⤵
  PID:2052
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 560 280
  2⤵
  PID:1672
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 580 280
  2⤵
  PID:2100
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 600 280
  2⤵
  PID:1524
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 0 300
  2⤵
  PID:2412
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 20 300
  2⤵
  PID:2388
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 40 300
  2⤵
  PID:1856
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 60 300
  2⤵
  PID:2416
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 80 300
  2⤵
  PID:1556
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 100 300
  2⤵
  PID:2084
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 120 300
  2⤵
  PID:2348
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 140 300
  2⤵
  PID:3020
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 160 300
  2⤵
  PID:1592
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 180 300
  2⤵
  PID:2116
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 200 300
  2⤵
  PID:2520
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 220 300
  2⤵
  PID:1732
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 240 300
  2⤵
  PID:2696
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 260 300
  2⤵
  PID:2484
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 280 300
  2⤵
  PID:2988
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 300 300
  2⤵
  PID:2776
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 320 300
  2⤵
  PID:1828
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 340 300
  2⤵
  PID:2860
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 360 300
  2⤵
  PID:2780
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 380 300
  2⤵
  PID:1984
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 400 300
  2⤵
  PID:2880
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 420 300
  2⤵
  PID:2960
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 440 300
  2⤵
  PID:2708
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 460 300
  2⤵
  PID:2628
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 480 300
  2⤵
  PID:2216
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 500 300
  2⤵
  PID:2648
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 520 300
  2⤵
  PID:2588
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 540 300
  2⤵
  PID:2592
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 560 300
  2⤵
  PID:1252
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 580 300
  2⤵
  PID:2624
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 600 300
  2⤵
  PID:2636
- C:\Windows\system32\taskkill.exe
  taskkill /f /im Calc.exe
  2⤵
  - Kills process with taskkill
  - Suspicious use of AdjustPrivilegeToken
  PID:2656
- C:\Windows\system32\taskkill.exe
  taskkill /f /im Calculator.exe
  2⤵
  - Kills process with taskkill
  - Suspicious use of AdjustPrivilegeToken
  PID:2852

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/316-2-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/316-0-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/464-120-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/464-118-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/524-222-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/540-89-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/564-132-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/756-130-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/780-47-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/840-10-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/852-148-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/948-111-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/980-43-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1028-75-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1044-39-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1060-99-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1120-138-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1152-71-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1184-109-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1240-55-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1252-212-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1268-144-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1292-184-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1304-115-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1368-49-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1488-95-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1508-59-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1524-154-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1536-56-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1548-66-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1560-48-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1572-45-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1584-165-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1636-128-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1640-87-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1648-126-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1668-84-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1676-68-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1684-171-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1708-70-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1720-105-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1760-76-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1796-161-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1824-122-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1828-186-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1836-93-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1868-72-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1956-107-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2036-117-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2060-97-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2064-83-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2072-124-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2084-167-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2092-91-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2112-79-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2116-6-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2116-4-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2172-140-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2176-192-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2176-20-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2192-146-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2204-23-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2224-81-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2228-73-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2240-40-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2268-224-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2288-42-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2304-216-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2312-177-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2312-9-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2316-77-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2340-156-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2360-173-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2360-3-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2420-152-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2428-150-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2432-218-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2436-134-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2456-136-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2480-113-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2508-178-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2520-175-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2528-85-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2552-142-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2596-34-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2600-190-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2608-35-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2612-210-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2620-28-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2624-36-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2636-214-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2644-38-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2664-37-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2684-7-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2696-180-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2708-198-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2716-196-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2728-202-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2732-182-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2732-12-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2744-19-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2756-206-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2760-31-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2768-57-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2776-13-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2788-15-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2800-29-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2820-51-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2832-200-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2840-64-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2856-17-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2856-188-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2864-33-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2868-220-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2872-208-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2876-25-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2884-204-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2884-30-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2916-61-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2920-60-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2928-63-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2932-53-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2940-54-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2952-158-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2956-26-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2984-21-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2984-194-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/3008-101-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/3016-103-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/3020-169-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/3024-163-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/3064-41-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download