4cc64e06df5c3b03d3889e401131f2a39b41c2594c2c1131fd41540b45e996c7

Analysis

max time kernel
125s
max time network
127s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
28/09/2024, 06:54

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

MoveWindow by Fatih Kodak/Source Code/Test.bat
Size

450B
MD5

d425cdc1673659119d4543f792b54b81
SHA1

a980dee2e1219c215c1f3b6fa8cade9c758ece72
SHA256

893daa90cff646996bffe7ffb18140b8a18a4980331c32268c7adc5ef306df57
SHA512

0fef121d216d4c38c6236821580f609613d906d03412cfdf3e6746c23d03038bdcf5eb17ac22675c031531d1ade54be1629ef0175fe106b0cb82d8082aa88853

Score

5^/10

discovery upx

Malware Config

Signatures

UPX packed file 64 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral6/memory/988-0-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/988-1-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/4856-2-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/1268-3-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/4800-4-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/2812-5-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/2888-6-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/2500-7-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/4596-8-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/3980-9-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/5052-10-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/4956-11-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/3832-12-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/3660-14-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/3484-16-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/2116-18-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/4204-20-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/3048-22-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/760-24-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/3016-26-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/2244-28-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/2984-29-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/372-31-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/2776-33-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/1156-35-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/2212-37-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/4796-39-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/5064-40-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/4528-42-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/2172-44-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/4412-45-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/348-47-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/1304-48-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/2896-50-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/3824-52-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/4584-54-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/1520-56-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/976-57-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/1716-59-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/4852-61-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/2028-63-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/1532-65-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/2348-67-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/2772-69-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/2092-70-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/4292-72-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/4676-74-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/1684-75-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/1568-76-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/2312-78-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/4580-79-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/2836-81-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/3912-83-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/5020-85-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/1564-87-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/1976-89-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/3640-91-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/4856-93-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/1192-95-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/2084-97-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/2284-99-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/3988-101-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/4596-102-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral6/memory/3980-104-0x0000000000400000-0x000000000040A000-memory.dmp	upx

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	movewindow.exe

Delays execution with timeout.exe 1 IoCs

evasion

pid	Process
1976	timeout.exe

Kills process with taskkill 2 IoCs

evasion

pid	Process
2692	taskkill.exe
2332	taskkill.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings	calc.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeDebugPrivilege	2692	taskkill.exe
Token: SeDebugPrivilege	2332	taskkill.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3932	OpenWith.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2032 wrote to memory of 4620	2032	cmd.exe	90
PID 2032 wrote to memory of 4620	2032	cmd.exe	90
PID 2032 wrote to memory of 1976	2032	cmd.exe	91
PID 2032 wrote to memory of 1976	2032	cmd.exe	91
PID 2032 wrote to memory of 988	2032	cmd.exe	93
PID 2032 wrote to memory of 988	2032	cmd.exe	93
PID 2032 wrote to memory of 988	2032	cmd.exe	93
PID 2032 wrote to memory of 4856	2032	cmd.exe	94
PID 2032 wrote to memory of 4856	2032	cmd.exe	94
PID 2032 wrote to memory of 4856	2032	cmd.exe	94
PID 2032 wrote to memory of 1268	2032	cmd.exe	95
PID 2032 wrote to memory of 1268	2032	cmd.exe	95
PID 2032 wrote to memory of 1268	2032	cmd.exe	95
PID 2032 wrote to memory of 4800	2032	cmd.exe	96
PID 2032 wrote to memory of 4800	2032	cmd.exe	96
PID 2032 wrote to memory of 4800	2032	cmd.exe	96
PID 2032 wrote to memory of 2812	2032	cmd.exe	97
PID 2032 wrote to memory of 2812	2032	cmd.exe	97
PID 2032 wrote to memory of 2812	2032	cmd.exe	97
PID 2032 wrote to memory of 2888	2032	cmd.exe	98
PID 2032 wrote to memory of 2888	2032	cmd.exe	98
PID 2032 wrote to memory of 2888	2032	cmd.exe	98
PID 2032 wrote to memory of 2500	2032	cmd.exe	99
PID 2032 wrote to memory of 2500	2032	cmd.exe	99
PID 2032 wrote to memory of 2500	2032	cmd.exe	99
PID 2032 wrote to memory of 4596	2032	cmd.exe	100
PID 2032 wrote to memory of 4596	2032	cmd.exe	100
PID 2032 wrote to memory of 4596	2032	cmd.exe	100
PID 2032 wrote to memory of 3980	2032	cmd.exe	101
PID 2032 wrote to memory of 3980	2032	cmd.exe	101
PID 2032 wrote to memory of 3980	2032	cmd.exe	101
PID 2032 wrote to memory of 5052	2032	cmd.exe	102
PID 2032 wrote to memory of 5052	2032	cmd.exe	102
PID 2032 wrote to memory of 5052	2032	cmd.exe	102
PID 2032 wrote to memory of 4956	2032	cmd.exe	103
PID 2032 wrote to memory of 4956	2032	cmd.exe	103
PID 2032 wrote to memory of 4956	2032	cmd.exe	103
PID 2032 wrote to memory of 3832	2032	cmd.exe	104
PID 2032 wrote to memory of 3832	2032	cmd.exe	104
PID 2032 wrote to memory of 3832	2032	cmd.exe	104
PID 2032 wrote to memory of 3660	2032	cmd.exe	105
PID 2032 wrote to memory of 3660	2032	cmd.exe	105
PID 2032 wrote to memory of 3660	2032	cmd.exe	105
PID 2032 wrote to memory of 3484	2032	cmd.exe	106
PID 2032 wrote to memory of 3484	2032	cmd.exe	106
PID 2032 wrote to memory of 3484	2032	cmd.exe	106
PID 2032 wrote to memory of 2116	2032	cmd.exe	107
PID 2032 wrote to memory of 2116	2032	cmd.exe	107
PID 2032 wrote to memory of 2116	2032	cmd.exe	107
PID 2032 wrote to memory of 4204	2032	cmd.exe	108
PID 2032 wrote to memory of 4204	2032	cmd.exe	108
PID 2032 wrote to memory of 4204	2032	cmd.exe	108
PID 2032 wrote to memory of 3048	2032	cmd.exe	109
PID 2032 wrote to memory of 3048	2032	cmd.exe	109
PID 2032 wrote to memory of 3048	2032	cmd.exe	109
PID 2032 wrote to memory of 760	2032	cmd.exe	110
PID 2032 wrote to memory of 760	2032	cmd.exe	110
PID 2032 wrote to memory of 760	2032	cmd.exe	110
PID 2032 wrote to memory of 3016	2032	cmd.exe	111
PID 2032 wrote to memory of 3016	2032	cmd.exe	111
PID 2032 wrote to memory of 3016	2032	cmd.exe	111
PID 2032 wrote to memory of 2244	2032	cmd.exe	112
PID 2032 wrote to memory of 2244	2032	cmd.exe	112
PID 2032 wrote to memory of 2244	2032	cmd.exe	112

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\Test.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:2032
- C:\Windows\system32\calc.exe
  calc.exe
  2⤵
  - Modifies registry class
  PID:4620
- C:\Windows\system32\timeout.exe
  timeout /t 3
  2⤵
  - Delays execution with timeout.exe
  PID:1976
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 0 0
  2⤵
  - System Location Discovery: System Language Discovery
  PID:988
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 20 0
  2⤵
  PID:4856
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 40 0
  2⤵
  PID:1268
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 60 0
  2⤵
  PID:4800
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 80 0
  2⤵
  PID:2812
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 100 0
  2⤵
  PID:2888
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 120 0
  2⤵
  PID:2500
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 140 0
  2⤵
  PID:4596
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 160 0
  2⤵
  PID:3980
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 180 0
  2⤵
  PID:5052
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 200 0
  2⤵
  PID:4956
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 220 0
  2⤵
  PID:3832
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 240 0
  2⤵
  PID:3660
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 260 0
  2⤵
  PID:3484
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 280 0
  2⤵
  PID:2116
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 300 0
  2⤵
  PID:4204
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 320 0
  2⤵
  PID:3048
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 340 0
  2⤵
  PID:760
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 360 0
  2⤵
  PID:3016
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 380 0
  2⤵
  PID:2244
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 400 0
  2⤵
  PID:2984
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 420 0
  2⤵
  PID:372
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 440 0
  2⤵
  PID:2776
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 460 0
  2⤵
  PID:1156
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 480 0
  2⤵
  PID:2212
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 500 0
  2⤵
  PID:4796
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 520 0
  2⤵
  PID:5064
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 540 0
  2⤵
  PID:4528
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 560 0
  2⤵
  PID:2172
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 580 0
  2⤵
  PID:4412
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 600 0
  2⤵
  PID:348
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 0 20
  2⤵
  PID:1304
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 20 20
  2⤵
  PID:2896
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 40 20
  2⤵
  PID:3824
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 60 20
  2⤵
  PID:4584
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 80 20
  2⤵
  PID:1520
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 100 20
  2⤵
  PID:976
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 120 20
  2⤵
  PID:1716
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 140 20
  2⤵
  PID:4852
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 160 20
  2⤵
  PID:2028
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 180 20
  2⤵
  PID:1532
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 200 20
  2⤵
  PID:2348
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 220 20
  2⤵
  PID:2772
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 240 20
  2⤵
  PID:2092
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 260 20
  2⤵
  PID:4292
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 280 20
  2⤵
  PID:4676
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 300 20
  2⤵
  PID:1684
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 320 20
  2⤵
  PID:1568
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 340 20
  2⤵
  PID:2312
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 360 20
  2⤵
  PID:4580
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 380 20
  2⤵
  PID:2836
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 400 20
  2⤵
  PID:3912
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 420 20
  2⤵
  PID:5020
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 440 20
  2⤵
  PID:1564
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 460 20
  2⤵
  PID:1976
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 480 20
  2⤵
  PID:3640
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 500 20
  2⤵
  PID:4856
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 520 20
  2⤵
  PID:1192
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 540 20
  2⤵
  PID:2084
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 560 20
  2⤵
  PID:2284
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 580 20
  2⤵
  PID:3988
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 600 20
  2⤵
  PID:4596
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 0 40
  2⤵
  PID:3980
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 20 40
  2⤵
  PID:3876
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 40 40
  2⤵
  PID:4912
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 60 40
  2⤵
  PID:3340
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 80 40
  2⤵
  PID:2140
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 100 40
  2⤵
  PID:2528
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 120 40
  2⤵
  PID:2164
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 140 40
  2⤵
  PID:4968
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 160 40
  2⤵
  PID:3596
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 180 40
  2⤵
  PID:924
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 200 40
  2⤵
  PID:4532
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 220 40
  2⤵
  PID:5008
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 240 40
  2⤵
  PID:3620
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 260 40
  2⤵
  PID:3756
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 280 40
  2⤵
  PID:2548
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 300 40
  2⤵
  PID:2796
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 320 40
  2⤵
  PID:748
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 340 40
  2⤵
  PID:4360
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 360 40
  2⤵
  PID:1848
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 380 40
  2⤵
  PID:4756
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 400 40
  2⤵
  PID:3068
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 420 40
  2⤵
  PID:348
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 440 40
  2⤵
  PID:3760
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 460 40
  2⤵
  PID:4284
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 480 40
  2⤵
  PID:3412
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 500 40
  2⤵
  PID:4584
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 520 40
  2⤵
  PID:2900
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 540 40
  2⤵
  PID:1828
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 560 40
  2⤵
  PID:3812
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 580 40
  2⤵
  PID:4860
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 600 40
  2⤵
  PID:3864
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 0 60
  2⤵
  PID:2028
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 20 60
  2⤵
  PID:3180
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 40 60
  2⤵
  PID:4696
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 60 60
  2⤵
  PID:2396
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 80 60
  2⤵
  PID:4400
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 100 60
  2⤵
  PID:2628
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 120 60
  2⤵
  PID:404
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 140 60
  2⤵
  PID:4332
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 160 60
  2⤵
  PID:4780
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 180 60
  2⤵
  PID:2836
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 200 60
  2⤵
  PID:5024
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 220 60
  2⤵
  PID:5020
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 240 60
  2⤵
  PID:1564
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 260 60
  2⤵
  PID:1976
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 280 60
  2⤵
  PID:3640
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 300 60
  2⤵
  PID:4856
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 320 60
  2⤵
  PID:1192
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 340 60
  2⤵
  PID:4468
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 360 60
  2⤵
  PID:2284
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 380 60
  2⤵
  PID:3632
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 400 60
  2⤵
  PID:4596
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 420 60
  2⤵
  PID:3228
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 440 60
  2⤵
  PID:3264
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 460 60
  2⤵
  PID:3984
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 480 60
  2⤵
  PID:1452
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 500 60
  2⤵
  PID:1272
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 520 60
  2⤵
  PID:3048
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 540 60
  2⤵
  PID:760
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 560 60
  2⤵
  PID:1544
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 580 60
  2⤵
  PID:2244
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 600 60
  2⤵
  PID:2984
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 0 80
  2⤵
  PID:4632
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 20 80
  2⤵
  PID:4488
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 40 80
  2⤵
  PID:1940
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 60 80
  2⤵
  PID:2212
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 80 80
  2⤵
  PID:4772
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 100 80
  2⤵
  PID:3508
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 120 80
  2⤵
  PID:1804
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 140 80
  2⤵
  PID:1984
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 160 80
  2⤵
  PID:2664
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 180 80
  2⤵
  PID:2808
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 200 80
  2⤵
  PID:880
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 220 80
  2⤵
  PID:1212
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 240 80
  2⤵
  PID:3616
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 260 80
  2⤵
  PID:4224
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 280 80
  2⤵
  PID:3664
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 300 80
  2⤵
  PID:4304
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 320 80
  2⤵
  PID:4016
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 340 80
  2⤵
  PID:456
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 360 80
  2⤵
  PID:2304
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 380 80
  2⤵
  PID:5112
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 400 80
  2⤵
  PID:5076
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 420 80
  2⤵
  PID:1300
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 440 80
  2⤵
  PID:4336
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 460 80
  2⤵
  PID:3880
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 480 80
  2⤵
  PID:404
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 500 80
  2⤵
  PID:2312
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 520 80
  2⤵
  PID:1516
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 540 80
  2⤵
  PID:4428
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 560 80
  2⤵
  PID:2724
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 580 80
  2⤵
  PID:2248
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 600 80
  2⤵
  PID:4680
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 0 100
  2⤵
  PID:2320
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 20 100
  2⤵
  PID:2128
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 40 100
  2⤵
  PID:1268
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 60 100
  2⤵
  PID:4916
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 80 100
  2⤵
  PID:2084
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 100 100
  2⤵
  PID:4744
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 120 100
  2⤵
  PID:3988
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 140 100
  2⤵
  PID:468
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 160 100
  2⤵
  PID:4956
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 180 100
  2⤵
  PID:3396
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 200 100
  2⤵
  PID:3676
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 220 100
  2⤵
  PID:2528
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 240 100
  2⤵
  PID:4204
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 260 100
  2⤵
  PID:4968
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 280 100
  2⤵
  PID:2624
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 300 100
  2⤵
  PID:924
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 320 100
  2⤵
  PID:5000
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 340 100
  2⤵
  PID:2332
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 360 100
  2⤵
  PID:3704
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 380 100
  2⤵
  PID:1376
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 400 100
  2⤵
  PID:2548
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 420 100
  2⤵
  PID:2796
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 440 100
  2⤵
  PID:4132
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 460 100
  2⤵
  PID:5064
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 480 100
  2⤵
  PID:1848
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 500 100
  2⤵
  PID:3424
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 520 100
  2⤵
  PID:3068
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 540 100
  2⤵
  PID:2400
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 560 100
  2⤵
  PID:2896
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 580 100
  2⤵
  PID:3060
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 600 100
  2⤵
  PID:3540
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 0 120
  2⤵
  PID:1100
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 20 120
  2⤵
  PID:4836
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 40 120
  2⤵
  PID:3368
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 60 120
  2⤵
  PID:1528
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 80 120
  2⤵
  PID:3456
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 100 120
  2⤵
  PID:2272
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 120 120
  2⤵
  PID:3168
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 140 120
  2⤵
  PID:1624
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 160 120
  2⤵
  PID:4696
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 180 120
  2⤵
  PID:2448
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 200 120
  2⤵
  PID:3880
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 220 120
  2⤵
  PID:404
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 240 120
  2⤵
  PID:4500
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 260 120
  2⤵
  PID:3644
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 280 120
  2⤵
  PID:2724
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 300 120
  2⤵
  PID:680
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 320 120
  2⤵
  PID:2128
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 340 120
  2⤵
  PID:4856
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 360 120
  2⤵
  PID:2284
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 380 120
  2⤵
  PID:4440
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 400 120
  2⤵
  PID:4956
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 420 120
  2⤵
  PID:3396
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 440 120
  2⤵
  PID:1452
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 460 120
  2⤵
  PID:5068
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 480 120
  2⤵
  PID:3944
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 500 120
  2⤵
  PID:3016
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 520 120
  2⤵
  PID:4492
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 540 120
  2⤵
  PID:5008
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 560 120
  2⤵
  PID:3620
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 580 120
  2⤵
  PID:3756
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 600 120
  2⤵
  PID:1012
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 0 140
  2⤵
  PID:3460
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 20 140
  2⤵
  PID:2796
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 40 140
  2⤵
  PID:1648
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 60 140
  2⤵
  PID:1672
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 80 140
  2⤵
  PID:4756
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 100 140
  2⤵
  PID:4272
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 120 140
  2⤵
  PID:4684
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 140 140
  2⤵
  PID:3760
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 160 140
  2⤵
  PID:4284
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 180 140
  2⤵
  PID:2192
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 200 140
  2⤵
  PID:1520
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 220 140
  2⤵
  PID:3692
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 240 140
  2⤵
  PID:3232
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 260 140
  2⤵
  PID:3812
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 280 140
  2⤵
  PID:4108
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 300 140
  2⤵
  PID:3456
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 320 140
  2⤵
  PID:2028
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 340 140
  2⤵
  PID:3180
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 360 140
  2⤵
  PID:1624
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 380 140
  2⤵
  PID:4696
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 400 140
  2⤵
  PID:1684
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 420 140
  2⤵
  PID:4464
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 440 140
  2⤵
  PID:2432
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 460 140
  2⤵
  PID:3912
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 480 140
  2⤵
  PID:1596
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 500 140
  2⤵
  PID:2632
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 520 140
  2⤵
  PID:2320
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 540 140
  2⤵
  PID:2084
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 560 140
  2⤵
  PID:3428
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 580 140
  2⤵
  PID:468
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 600 140
  2⤵
  PID:3876
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 0 160
  2⤵
  PID:3364
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 20 160
  2⤵
  PID:4416
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 40 160
  2⤵
  PID:1452
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 60 160
  2⤵
  PID:5068
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 80 160
  2⤵
  PID:3944
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 100 160
  2⤵
  PID:3016
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 120 160
  2⤵
  PID:5000
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 140 160
  2⤵
  PID:2332
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 160 160
  2⤵
  PID:3620
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 180 160
  2⤵
  PID:3704
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 200 160
  2⤵
  PID:4380
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 220 160
  2⤵
  PID:2212
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 240 160
  2⤵
  PID:2796
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 260 160
  2⤵
  PID:1740
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 280 160
  2⤵
  PID:1848
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 300 160
  2⤵
  PID:4756
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 320 160
  2⤵
  PID:4272
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 340 160
  2⤵
  PID:1416
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 360 160
  2⤵
  PID:1212
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 380 160
  2⤵
  PID:3540
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 400 160
  2⤵
  PID:4224
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 420 160
  2⤵
  PID:2900
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 440 160
  2⤵
  PID:4304
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 460 160
  2⤵
  PID:3868
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 480 160
  2⤵
  PID:1532
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 500 160
  2⤵
  PID:2304
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 520 160
  2⤵
  PID:2348
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 540 160
  2⤵
  PID:4480
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 560 160
  2⤵
  PID:652
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 580 160
  2⤵
  PID:4292
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 600 160
  2⤵
  PID:1568
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 0 180
  2⤵
  PID:2280
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 20 180
  2⤵
  PID:2020
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 40 180
  2⤵
  PID:5024
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 60 180
  2⤵
  PID:2724
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 80 180
  2⤵
  PID:680
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 100 180
  2⤵
  PID:1480
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 120 180
  2⤵
  PID:2692
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 140 180
  2⤵
  PID:3632
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 160 180
  2⤵
  PID:3228
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 180 180
  2⤵
  PID:872
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 200 180
  2⤵
  PID:400
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 220 180
  2⤵
  PID:720
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 240 180
  2⤵
  PID:988
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 260 180
  2⤵
  PID:1948
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 280 180
  2⤵
  PID:1544
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 300 180
  2⤵
  PID:4936
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 320 180
  2⤵
  PID:3040
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 340 180
  2⤵
  PID:2776
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 360 180
  2⤵
  PID:452
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 380 180
  2⤵
  PID:1940
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 400 180
  2⤵
  PID:4796
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 420 180
  2⤵
  PID:4772
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 440 180
  2⤵
  PID:1632
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 460 180
  2⤵
  PID:1804
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 480 180
  2⤵
  PID:1984
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 500 180
  2⤵
  PID:2800
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 520 180
  2⤵
  PID:2572
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 540 180
  2⤵
  PID:1284
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 560 180
  2⤵
  PID:4128
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 580 180
  2⤵
  PID:4408
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 600 180
  2⤵
  PID:1836
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 0 200
  2⤵
  PID:1828
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 20 200
  2⤵
  PID:4904
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 40 200
  2⤵
  PID:4016
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 60 200
  2⤵
  PID:3864
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 80 200
  2⤵
  PID:2308
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 100 200
  2⤵
  PID:2772
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 120 200
  2⤵
  PID:2092
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 140 200
  2⤵
  PID:3492
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 160 200
  2⤵
  PID:652
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 180 200
  2⤵
  PID:4240
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 200 200
  2⤵
  PID:4464
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 220 200
  2⤵
  PID:3148
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 240 200
  2⤵
  PID:4620
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 260 200
  2⤵
  PID:2248
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 280 200
  2⤵
  PID:4948
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 300 200
  2⤵
  PID:3828
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 320 200
  2⤵
  PID:1192
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 340 200
  2⤵
  PID:1060
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 360 200
  2⤵
  PID:2072
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 380 200
  2⤵
  PID:4956
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 400 200
  2⤵
  PID:3364
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 420 200
  2⤵
  PID:2528
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 440 200
  2⤵
  PID:60
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 460 200
  2⤵
  PID:4968
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 480 200
  2⤵
  PID:3944
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 500 200
  2⤵
  PID:4532
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 520 200
  2⤵
  PID:2984
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 540 200
  2⤵
  PID:2332
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 560 200
  2⤵
  PID:3620
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 580 200
  2⤵
  PID:3704
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 600 200
  2⤵
  PID:3460
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 0 220
  2⤵
  PID:4360
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 20 220
  2⤵
  PID:2796
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 40 220
  2⤵
  PID:1672
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 60 220
  2⤵
  PID:5036
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 80 220
  2⤵
  PID:2664
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 100 220
  2⤵
  PID:4684
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 120 220
  2⤵
  PID:2896
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 140 220
  2⤵
  PID:1416
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 160 220
  2⤵
  PID:4584
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 180 220
  2⤵
  PID:5060
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 200 220
  2⤵
  PID:3664
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 220 220
  2⤵
  PID:4852
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 240 220
  2⤵
  PID:1120
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 260 220
  2⤵
  PID:1532
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 280 220
  2⤵
  PID:5112
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 300 220
  2⤵
  PID:4480
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 320 220
  2⤵
  PID:4336
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 340 220
  2⤵
  PID:4148
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 360 220
  2⤵
  PID:4024
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 380 220
  2⤵
  PID:4464
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 400 220
  2⤵
  PID:232
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 420 220
  2⤵
  PID:5024
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 440 220
  2⤵
  PID:1596
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 460 220
  2⤵
  PID:680
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 480 220
  2⤵
  PID:3056
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 500 220
  2⤵
  PID:1192
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 520 220
  2⤵
  PID:3632
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 540 220
  2⤵
  PID:3228
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 560 220
  2⤵
  PID:4800
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 580 220
  2⤵
  PID:4840
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 600 220
  2⤵
  PID:4416
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 0 240
  2⤵
  PID:4204
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 20 240
  2⤵
  PID:5088
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 40 240
  2⤵
  PID:3752
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 60 240
  2⤵
  PID:1544
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 80 240
  2⤵
  PID:1864
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 100 240
  2⤵
  PID:5000
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 120 240
  2⤵
  PID:1156
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 140 240
  2⤵
  PID:2548
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 160 240
  2⤵
  PID:4380
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 180 240
  2⤵
  PID:4772
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 200 240
  2⤵
  PID:1632
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 220 240
  2⤵
  PID:1804
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 240 240
  2⤵
  PID:1848
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 260 240
  2⤵
  PID:3068
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 280 240
  2⤵
  PID:4272
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 300 240
  2⤵
  PID:1936
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 320 240
  2⤵
  PID:4284
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 340 240
  2⤵
  PID:4420
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 360 240
  2⤵
  PID:976
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 380 240
  2⤵
  PID:4836
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 400 240
  2⤵
  PID:1528
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 420 240
  2⤵
  PID:3864
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 440 240
  2⤵
  PID:2304
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 460 240
  2⤵
  PID:2028
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 480 240
  2⤵
  PID:2092
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 500 240
  2⤵
  PID:2448
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 520 240
  2⤵
  PID:4696
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 540 240
  2⤵
  PID:404
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 560 240
  2⤵
  PID:1516
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 580 240
  2⤵
  PID:5020
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 600 240
  2⤵
  PID:4788
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 0 260
  2⤵
  PID:2256
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 20 260
  2⤵
  PID:1480
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 40 260
  2⤵
  PID:3204
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 60 260
  2⤵
  PID:2284
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 80 260
  2⤵
  PID:3632
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 100 260
  2⤵
  PID:3876
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 120 260
  2⤵
  PID:3984
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 140 260
  2⤵
  PID:2164
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 160 260
  2⤵
  PID:4824
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 180 260
  2⤵
  PID:5068
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 200 260
  2⤵
  PID:4968
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 220 260
  2⤵
  PID:2244
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 240 260
  2⤵
  PID:3040
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 260 260
  2⤵
  PID:2692
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 280 260
  2⤵
  PID:2332
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 300 260
  2⤵
  PID:1012
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 320 260
  2⤵
  PID:4796
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 340 260
  2⤵
  PID:3460
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 360 260
  2⤵
  PID:972
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 380 260
  2⤵
  PID:2172
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 400 260
  2⤵
  PID:4052
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 420 260
  2⤵
  PID:348
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 440 260
  2⤵
  PID:2664
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 460 260
  2⤵
  PID:3760
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 480 260
  2⤵
  PID:2896
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 500 260
  2⤵
  PID:2192
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 520 260
  2⤵
  PID:1100
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 540 260
  2⤵
  PID:428
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 560 260
  2⤵
  PID:3368
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 580 260
  2⤵
  PID:4108
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 600 260
  2⤵
  PID:552
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 0 280
  2⤵
  PID:2772
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 20 280
  2⤵
  PID:5112
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 40 280
  2⤵
  PID:1624
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 60 280
  2⤵
  PID:652
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 80 280
  2⤵
  PID:4740
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 100 280
  2⤵
  PID:2096
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 120 280
  2⤵
  PID:2280
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 140 280
  2⤵
  PID:232
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 160 280
  2⤵
  PID:4476
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 180 280
  2⤵
  PID:4948
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 200 280
  2⤵
  PID:1268
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 220 280
  2⤵
  PID:3988
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 240 280
  2⤵
  PID:4440
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 260 280
  2⤵
  PID:3264
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 280 280
  2⤵
  PID:4956
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 300 280
  2⤵
  PID:400
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 320 280
  2⤵
  PID:720
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 340 280
  2⤵
  PID:60
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 360 280
  2⤵
  PID:924
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 380 280
  2⤵
  PID:3016
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 400 280
  2⤵
  PID:372
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 420 280
  2⤵
  PID:1544
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 440 280
  2⤵
  PID:4632
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 460 280
  2⤵
  PID:452
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 480 280
  2⤵
  PID:2676
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 500 280
  2⤵
  PID:3704
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 520 280
  2⤵
  PID:3508
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 540 280
  2⤵
  PID:2796
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 560 280
  2⤵
  PID:3432
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 580 280
  2⤵
  PID:5036
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 600 280
  2⤵
  PID:4412
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 0 300
  2⤵
  PID:2400
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 20 300
  2⤵
  PID:2572
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 40 300
  2⤵
  PID:1936
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 60 300
  2⤵
  PID:4584
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 80 300
  2⤵
  PID:4420
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 100 300
  2⤵
  PID:976
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 120 300
  2⤵
  PID:3812
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 140 300
  2⤵
  PID:1528
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 160 300
  2⤵
  PID:2308
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 180 300
  2⤵
  PID:1532
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 200 300
  2⤵
  PID:5076
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 220 300
  2⤵
  PID:3276
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 240 300
  2⤵
  PID:2448
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 260 300
  2⤵
  PID:4148
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 280 300
  2⤵
  PID:404
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 300 300
  2⤵
  PID:4500
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 320 300
  2⤵
  PID:2724
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 340 300
  2⤵
  PID:4548
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 360 300
  2⤵
  PID:2128
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 380 300
  2⤵
  PID:1480
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 400 300
  2⤵
  PID:1192
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 420 300
  2⤵
  PID:3484
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 440 300
  2⤵
  PID:3632
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 460 300
  2⤵
  PID:2140
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 480 300
  2⤵
  PID:3228
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 500 300
  2⤵
  PID:4840
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 520 300
  2⤵
  PID:4572
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 540 300
  2⤵
  PID:4204
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 560 300
  2⤵
  PID:4968
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 580 300
  2⤵
  PID:2244
- C:\Users\Admin\AppData\Local\Temp\MoveWindow by Fatih Kodak\Source Code\files\movewindow.exe
  MoveWindow Calculator 600 300
  2⤵
  PID:3040
- C:\Windows\system32\taskkill.exe
  taskkill /f /im Calc.exe
  2⤵
  - Kills process with taskkill
  - Suspicious use of AdjustPrivilegeToken
  PID:2692
- C:\Windows\system32\taskkill.exe
  taskkill /f /im Calculator.exe
  2⤵
  - Kills process with taskkill
  - Suspicious use of AdjustPrivilegeToken
  PID:2332

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Suspicious use of SetWindowsHookEx
PID:3932

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4276,i,10065386245627775856,6567048529106473151,262144 --variations-seed-version --mojo-platform-channel-handle=1044 /prefetch:8
1⤵
PID:4900

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/348-146-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/348-47-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/372-31-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/404-178-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/748-136-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/760-24-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/924-122-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/976-57-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/988-0-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/988-1-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1156-35-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1192-198-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1192-95-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1268-3-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1304-48-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1520-56-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1532-65-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1564-87-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1564-190-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1568-76-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1684-75-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1716-59-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1828-158-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1848-140-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1976-89-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/1976-192-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2028-63-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2028-166-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2084-97-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2092-70-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2116-18-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2140-112-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2164-116-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2172-44-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2212-37-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2244-28-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2284-99-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2284-202-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2312-78-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2348-67-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2396-172-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2500-7-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2528-114-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2548-132-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2628-176-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2772-69-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2776-33-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2796-134-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2812-5-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2836-184-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2836-81-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2888-6-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2896-50-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2900-156-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2984-29-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/3016-26-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/3048-22-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/3068-144-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/3180-168-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/3228-207-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/3264-210-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/3340-110-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/3412-152-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/3484-16-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/3596-120-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/3620-128-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/3632-204-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/3640-194-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/3640-91-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/3660-14-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/3756-130-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/3760-148-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/3812-160-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/3824-52-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/3832-12-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/3864-164-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/3876-106-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/3912-83-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/3980-9-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/3980-104-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/3984-212-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/3988-101-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/4204-20-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/4284-150-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/4292-72-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/4332-180-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/4360-138-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/4400-174-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/4412-45-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/4468-200-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/4528-42-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/4532-124-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/4580-79-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/4584-54-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/4584-154-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/4596-206-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/4596-102-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/4596-8-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/4676-74-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/4696-170-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/4756-142-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/4780-182-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/4796-39-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/4800-4-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/4852-61-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/4856-196-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/4856-93-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/4856-2-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/4860-162-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/4912-108-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/4956-11-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/4968-118-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/5008-126-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/5020-188-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/5020-85-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/5024-186-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/5052-10-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/5064-40-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download