cfcd10600d1606d39f345271772578aca4c5c489aebfc4cc870aed1036437234

Analysis

max time kernel
75s
max time network
18s
platform
windows7_x64
resource
win7-20241023-en
resource tags

arch:x64arch:x86image:win7-20241023-enlocale:en-usos:windows7-x64system
submitted
19-11-2024 17:11

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

MaiCheats Loader.exe
Size

356KB
MD5

2c8e34dc56137e1cce60e29b3eb71bde
SHA1

1a6c45cb7802f7061af4b50cd721edd0269d2554
SHA256

f1925677418f8b86150c9da038effcaf554d17e06c9559d19130fb715a283ae6
SHA512

ec958011bb84c37b62bc8dbff1b1941c36add64f2af72ecab5eb2f61de6c5c3e8de0115b741b09038220cb160b14f61a714ddb4876ffa1a4c18b0be342e3482b
SSDEEP

6144:vBlkZvaF4NTBZkBT887jG8F8c30OYzmvZ/9snRZuOGh0MKPIXC:voSWNTPYT8876cEOdonuO6rXC

Score

7^/10

discovery upx

Malware Config

Signatures

Loads dropped DLL 7 IoCs

pid	Process
2964	nether_brAPIDONTDELETE.exe
2964	nether_brAPIDONTDELETE.exe
2964	nether_brAPIDONTDELETE.exe
2964	nether_brAPIDONTDELETE.exe
2964	nether_brAPIDONTDELETE.exe
2964	nether_brAPIDONTDELETE.exe
2964	nether_brAPIDONTDELETE.exe

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral1/files/0x0001000000029128-75.dat	upx

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MaiCheats Loader.exe

Delays execution with timeout.exe 2 IoCs

evasion

pid	Process
1676	timeout.exe
2432	timeout.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2264 wrote to memory of 372	2264	MaiCheats Loader.exe	32
PID 2264 wrote to memory of 372	2264	MaiCheats Loader.exe	32
PID 2264 wrote to memory of 372	2264	MaiCheats Loader.exe	32
PID 2264 wrote to memory of 372	2264	MaiCheats Loader.exe	32
PID 372 wrote to memory of 1940	372	cmd.exe	33
PID 372 wrote to memory of 1940	372	cmd.exe	33
PID 372 wrote to memory of 1940	372	cmd.exe	33
PID 372 wrote to memory of 2380	372	cmd.exe	34
PID 372 wrote to memory of 2380	372	cmd.exe	34
PID 372 wrote to memory of 2380	372	cmd.exe	34
PID 2380 wrote to memory of 2964	2380	nether_brAPIDONTDELETE.exe	35
PID 2380 wrote to memory of 2964	2380	nether_brAPIDONTDELETE.exe	35
PID 2380 wrote to memory of 2964	2380	nether_brAPIDONTDELETE.exe	35
PID 372 wrote to memory of 2064	372	cmd.exe	36
PID 372 wrote to memory of 2064	372	cmd.exe	36
PID 372 wrote to memory of 2064	372	cmd.exe	36
PID 372 wrote to memory of 1660	372	cmd.exe	37
PID 372 wrote to memory of 1660	372	cmd.exe	37
PID 372 wrote to memory of 1660	372	cmd.exe	37
PID 372 wrote to memory of 2388	372	cmd.exe	38
PID 372 wrote to memory of 2388	372	cmd.exe	38
PID 372 wrote to memory of 2388	372	cmd.exe	38
PID 372 wrote to memory of 1684	372	cmd.exe	39
PID 372 wrote to memory of 1684	372	cmd.exe	39
PID 372 wrote to memory of 1684	372	cmd.exe	39
PID 372 wrote to memory of 1676	372	cmd.exe	40
PID 372 wrote to memory of 1676	372	cmd.exe	40
PID 372 wrote to memory of 1676	372	cmd.exe	40
PID 372 wrote to memory of 1564	372	cmd.exe	41
PID 372 wrote to memory of 1564	372	cmd.exe	41
PID 372 wrote to memory of 1564	372	cmd.exe	41
PID 372 wrote to memory of 1620	372	cmd.exe	42
PID 372 wrote to memory of 1620	372	cmd.exe	42
PID 372 wrote to memory of 1620	372	cmd.exe	42
PID 372 wrote to memory of 820	372	cmd.exe	43
PID 372 wrote to memory of 820	372	cmd.exe	43
PID 372 wrote to memory of 820	372	cmd.exe	43
PID 372 wrote to memory of 2680	372	cmd.exe	44
PID 372 wrote to memory of 2680	372	cmd.exe	44
PID 372 wrote to memory of 2680	372	cmd.exe	44
PID 372 wrote to memory of 1256	372	cmd.exe	45
PID 372 wrote to memory of 1256	372	cmd.exe	45
PID 372 wrote to memory of 1256	372	cmd.exe	45
PID 372 wrote to memory of 772	372	cmd.exe	46
PID 372 wrote to memory of 772	372	cmd.exe	46
PID 372 wrote to memory of 772	372	cmd.exe	46
PID 372 wrote to memory of 1260	372	cmd.exe	47
PID 372 wrote to memory of 1260	372	cmd.exe	47
PID 372 wrote to memory of 1260	372	cmd.exe	47
PID 372 wrote to memory of 3004	372	cmd.exe	48
PID 372 wrote to memory of 3004	372	cmd.exe	48
PID 372 wrote to memory of 3004	372	cmd.exe	48
PID 372 wrote to memory of 2692	372	cmd.exe	49
PID 372 wrote to memory of 2692	372	cmd.exe	49
PID 372 wrote to memory of 2692	372	cmd.exe	49
PID 372 wrote to memory of 2776	372	cmd.exe	50
PID 372 wrote to memory of 2776	372	cmd.exe	50
PID 372 wrote to memory of 2776	372	cmd.exe	50
PID 372 wrote to memory of 3040	372	cmd.exe	51
PID 372 wrote to memory of 3040	372	cmd.exe	51
PID 372 wrote to memory of 3040	372	cmd.exe	51
PID 372 wrote to memory of 1008	372	cmd.exe	52
PID 372 wrote to memory of 1008	372	cmd.exe	52
PID 372 wrote to memory of 1008	372	cmd.exe	52

C:\Users\Admin\AppData\Local\Temp\MaiCheats Loader.exe
"C:\Users\Admin\AppData\Local\Temp\MaiCheats Loader.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:2264
- C:\Windows\system32\cmd.exe
  "C:\Windows\sysnative\cmd" /c "C:\Users\Admin\AppData\Local\Temp\F161.tmp\F162.tmp\F163.bat "C:\Users\Admin\AppData\Local\Temp\MaiCheats Loader.exe""
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:372
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /c "prompt #$H#$E# & echo on & for %b in (1) do rem"
    3⤵
    PID:1940
- - C:\Users\Admin\AppData\Local\Temp\data\library\data\minecraft\recipes\nether_brAPIDONTDELETE.exe
    "C:\Users\Admin\AppData\Local\Temp\data\library\data\minecraft\recipes\nether_brAPIDONTDELETE.exe"
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:2380
  - - C:\Users\Admin\AppData\Local\Temp\data\library\data\minecraft\recipes\nether_brAPIDONTDELETE.exe
      "C:\Users\Admin\AppData\Local\Temp\data\library\data\minecraft\recipes\nether_brAPIDONTDELETE.exe"
      4⤵
      Loads dropped DLL
      PID:2964
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2064
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1660
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2388
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " License Check..." nul
    3⤵
    PID:1684
- - C:\Windows\system32\timeout.exe
    timeout 2
    3⤵
    - Delays execution with timeout.exe
    PID:1676
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1564
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0a /R "^$" "+" nul
    3⤵
    PID:1620
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:820
- - C:\Windows\system32\findstr.exe
    findstr /v /a:02 /R "^$" " License correct" nul
    3⤵
    PID:2680
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1256
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:772
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1260
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Looking for cs2..." nul
    3⤵
    PID:3004
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2692
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2776
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:3040
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets ba.class" nul
    3⤵
    PID:1008
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2192
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2232
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2476
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets bb.class" nul
    3⤵
    PID:3056
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:544
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1012
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2688
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets bc$a.class" nul
    3⤵
    PID:2256
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:696
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2300
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1324
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets bc.class" nul
    3⤵
    PID:1544
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1836
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:788
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1452
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets cf.class" nul
    3⤵
    PID:1468
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1152
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:236
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2304
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets cg.class" nul
    3⤵
    PID:2544
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1480
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1604
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2684
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets ch.class" nul
    3⤵
    PID:336
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1420
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1088
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:824
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets ci.class" nul
    3⤵
    PID:2260
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:3012
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1972
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2608
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets cj.class" nul
    3⤵
    PID:2628
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2108
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1944
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2560
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets ck.class" nul
    3⤵
    PID:2652
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2424
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2312
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1612
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets cl.class" nul
    3⤵
    PID:2468
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1540
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1648
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:864
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets cm.class" nul
    3⤵
    PID:3000
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2320
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:3060
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2356
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets cn.class" nul
    3⤵
    PID:2524
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2820
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2852
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2868
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets co.class" nul
    3⤵
    PID:2912
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2932
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2976
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2864
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets cp.class" nul
    3⤵
    PID:2280
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2984
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2712
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2400
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets cq.class" nul
    3⤵
    PID:2096
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2872
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2288
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2732
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets cr.class" nul
    3⤵
    PID:568
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1464
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2824
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2708
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets cs.class" nul
    3⤵
    PID:2884
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2716
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2420
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2832
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets ct.class" nul
    3⤵
    PID:2428
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2136
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2764
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2432
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets cu.class" nul
    3⤵
    PID:1820
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:376
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2072
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1808
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets cv.class" nul
    3⤵
    PID:1888
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1848
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1412
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:860
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets cw.class" nul
    3⤵
    PID:1248
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2060
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1956
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1996
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets cx.class" nul
    3⤵
    PID:2176
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2788
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1216
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2448
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets cy.class" nul
    3⤵
    PID:1660
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1672
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1360
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1988
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets cz.class" nul
    3⤵
    PID:1664
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1628
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1620
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1844
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets d.class" nul
    3⤵
    PID:2016
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2000
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1256
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1284
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets da.class" nul
    3⤵
    PID:1700
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2952
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:3004
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2896
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets db.class" nul
    3⤵
    PID:3020
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1884
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:3040
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1428
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets dc.class" nul
    3⤵
    PID:2252
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2228
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2232
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:3048
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets dd.class" nul
    3⤵
    PID:3024
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2272
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:544
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2492
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets de.class" nul
    3⤵
    PID:3032
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2796
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2256
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1004
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets df.class" nul
    3⤵
    PID:960
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1308
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1324
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1892
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets dg.class" nul
    3⤵
    PID:1952
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1552
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:788
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1140
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets dh.class" nul
    3⤵
    PID:1576
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2044
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1152
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:968
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets di$a.class" nul
    3⤵
    PID:1728
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1376
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2544
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1492
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets di.class" nul
    3⤵
    PID:2196
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:848
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:692
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2368
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets dj.class" nul
    3⤵
    PID:1444
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2344
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1088
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2600
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets dk.class" nul
    3⤵
    PID:1424
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2092
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:3012
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2508
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets dl.class" nul
    3⤵
    PID:2268
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2124
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2628
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:980
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets dm$a.class" nul
    3⤵
    PID:1016
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2596
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1440
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:900
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets dm$b.class" nul
    3⤵
    PID:2240
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2056
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2172
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2132
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets dm$c.class" nul
    3⤵
    PID:1652
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1532
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1940
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2464
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets dm.class" nul
    3⤵
    PID:1656
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:572
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2800
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2540
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets dn.class" nul
    3⤵
    PID:1580
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2860
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2904
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2924
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets do.class" nul
    3⤵
    PID:2936
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2908
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2836
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2816
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets dp.class" nul
    3⤵
    PID:2968
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2220
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2900
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2828
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets dq.class" nul
    3⤵
    PID:2740
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:3016
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2812
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2880
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets dr.class" nul
    3⤵
    PID:2760
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2704
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2848
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2336
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets ds.class" nul
    3⤵
    PID:2716
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2420
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2832
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2428
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets dt.class" nul
    3⤵
    PID:2136
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2764
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2432
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1820
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets du.class" nul
    3⤵
    PID:268
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1908
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1828
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2004
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets dv.class" nul
    3⤵
    PID:1832
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1476
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1756
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:276
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets dw.class" nul
    3⤵
    PID:1588
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1824
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2068
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2156
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets dx.class" nul
    3⤵
    PID:2380
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2064
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1752
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2032
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets dy.class" nul
    3⤵
    PID:2388
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1460
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1676
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2164
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets dz.class" nul
    3⤵
    PID:1624
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1500
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:820
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2680
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets e$a.class" nul
    3⤵
    PID:468
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2020
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:772
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2768
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets e.class" nul
    3⤵
    PID:2948
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2956
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2692
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:880
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets ea.class" nul
    3⤵
    PID:1028
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2564
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1008
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2212
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets eb.class" nul
    3⤵
    PID:2208
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1680
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2476
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:3052
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets ec.class" nul
    3⤵
    PID:2436
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:328
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1012
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2160
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets ed.class" nul
    3⤵
    PID:2944
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2184
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:696
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:644
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets ee$a.class" nul
    3⤵
    PID:2024
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1764
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1544
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1968
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets ee.class" nul
    3⤵
    PID:2480
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1556
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1452
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2052
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets ef.class" nul
    3⤵
    PID:1788
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:912
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:236
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1488
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets eg.class" nul
    3⤵
    PID:1232
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1736
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1480
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:284
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets eh.class" nul
    3⤵
    PID:1740
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2224
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:336
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2408
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets ei.class" nul
    3⤵
    PID:2404
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1792
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:824
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1696
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets ej.class" nul
    3⤵
    PID:2460
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:400
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1972
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1228
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets ek.class" nul
    3⤵
    PID:1964
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2412
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2108
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1944
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets el.class" nul
    3⤵
    PID:2560
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2652
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2424
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2312
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets em.class" nul
    3⤵
    PID:1612
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2468
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1536
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1648
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets en$a.class" nul
    3⤵
    PID:864
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:3000
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2320
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:3060
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets en$b.class" nul
    3⤵
    PID:2356
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2524
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2820
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2852
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets en$c.class" nul
    3⤵
    PID:2868
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2912
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2932
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2976
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets en$d.class" nul
    3⤵
    PID:2864
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2280
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2984
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2712
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets en$e.class" nul
    3⤵
    PID:2400
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2096
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2872
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2288
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets en.class" nul
    3⤵
    PID:2732
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:568
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1464
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2824
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets eo$a.class" nul
    3⤵
    PID:2708
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2884
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2100
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2964
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets eo.class" nul
    3⤵
    PID:1688
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1136
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2140
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1204
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets ep.class" nul
    3⤵
    PID:1212
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:728
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:896
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:376
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets eq.class" nul
    3⤵
    PID:2072
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1808
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1888
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1848
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets er.class" nul
    3⤵
    PID:1412
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:860
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1248
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2060
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets es.class" nul
    3⤵
    PID:1956
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1996
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2176
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2788
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets et.class" nul
    3⤵
    PID:1216
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2448
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1660
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1672
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets eu.class" nul
    3⤵
    PID:1360
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1988
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1664
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1628
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets ev.class" nul
    3⤵
    PID:1620
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1844
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2016
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2000
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets ew.class" nul
    3⤵
    PID:1256
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1284
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1700
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2952
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets ex.class" nul
    3⤵
    PID:3004
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2896
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:3020
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1884
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets ey.class" nul
    3⤵
    PID:3040
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1428
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2252
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2228
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets ez.class" nul
    3⤵
    PID:2232
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:3048
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:3024
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2272
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets f.class" nul
    3⤵
    PID:544
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2492
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:3032
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2796
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets fa.class" nul
    3⤵
    PID:2256
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1004
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:960
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1308
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets fb.class" nul
    3⤵
    PID:1324
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1892
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1952
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1552
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets fc.class" nul
    3⤵
    PID:788
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1140
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1576
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2044
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets fd.class" nul
    3⤵
    PID:1152
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:968
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1728
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1376
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets fe.class" nul
    3⤵
    PID:2544
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1492
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2196
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:848
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets ff.class" nul
    3⤵
    PID:692
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2368
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1444
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2344
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets fg.class" nul
    3⤵
    PID:1088
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2600
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1424
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2092
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets fh.class" nul
    3⤵
    PID:3012
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2508
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2268
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2124
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets fi.class" nul
    3⤵
    PID:2628
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:980
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1016
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2596
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets fj.class" nul
    3⤵
    PID:1440
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:900
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2240
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2056
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets fk.class" nul
    3⤵
    PID:2172
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2132
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1652
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1532
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets fl.class" nul
    3⤵
    PID:1940
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2464
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1656
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:572
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets fm.class" nul
    3⤵
    PID:2800
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2540
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1580
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2860
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets fn.class" nul
    3⤵
    PID:2904
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2924
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2936
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2908
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets fo.class" nul
    3⤵
    PID:2836
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2816
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2968
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2220
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets fp.class" nul
    3⤵
    PID:2900
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2828
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2740
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:3016
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets fq.class" nul
    3⤵
    PID:2812
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2880
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2760
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2704
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets fr.class" nul
    3⤵
    PID:2848
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2336
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1512
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2964
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets fs.class" nul
    3⤵
    PID:1688
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1136
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2140
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1204
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets ft.class" nul
    3⤵
    PID:1212
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:728
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:896
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:376
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets fu.class" nul
    3⤵
    PID:2072
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1808
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1888
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1848
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets fv.class" nul
    3⤵
    PID:1412
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:860
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1248
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2060
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets fw$a.class" nul
    3⤵
    PID:1956
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1996
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2176
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2788
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets fw$b.class" nul
    3⤵
    PID:1216
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2448
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1660
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1672
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets fw.class" nul
    3⤵
    PID:1360
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1988
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1664
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1628
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets fx.class" nul
    3⤵
    PID:1620
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1796
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1800
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1744
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets fy.class" nul
    3⤵
    PID:852
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1816
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1260
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:3028
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets fz.class" nul
    3⤵
    PID:2940
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:316
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2776
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2576
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets g.class" nul
    3⤵
    PID:2744
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:580
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2192
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2216
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets ga.class" nul
    3⤵
    PID:3044
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:3036
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:3056
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2168
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets gb.class" nul
    3⤵
    PID:448
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1812
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2688
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2808
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets gc.class" nul
    3⤵
    PID:844
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1320
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2300
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1548
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets gd.class" nul
    3⤵
    PID:2552
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1948
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1836
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2604
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets ge.class" nul
    3⤵
    PID:1368
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1528
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1788
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1264
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets gf$a.class" nul
    3⤵
    PID:1572
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:944
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2304
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2512
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets gf.class" nul
    3⤵
    PID:1720
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1708
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1604
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2684
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets gg$a.class" nul
    3⤵
    PID:956
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2200
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1420
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2328
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets gg.class" nul
    3⤵
    PID:2364
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2568
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2260
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2348
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets gh.class" nul
    3⤵
    PID:2188
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2276
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2608
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1960
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets gi.class" nul
    3⤵
    PID:2012
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1976
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:780
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1436
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets gj.class" nul
    3⤵
    PID:904
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1508
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2240
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2056
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets gk.class" nul
    3⤵
    PID:2172
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1540
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1652
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1532
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets gl.class" nul
    3⤵
    PID:1940
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2464
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1656
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:572
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets glfw.dll" nul
    3⤵
    PID:2800
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2540
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1580
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2860
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets glfw.dll.git" nul
    3⤵
    PID:2904
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2924
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2936
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2908
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets glfw.dll.sha1" nul
    3⤵
    PID:2836
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2816
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2968
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2220
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets glfw32.dll" nul
    3⤵
    PID:2900
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2828
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2740
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:3016
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets glfw32.dll.git" nul
    3⤵
    PID:2812
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2880
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2760
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2704
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets glfw32.dll.sha1" nul
    3⤵
    PID:2848
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2336
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1512
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2964
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets gm.class" nul
    3⤵
    PID:1688
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1136
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2140
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1204
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets gn.class" nul
    3⤵
    PID:1212
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:728
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:896
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:376
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets go.class" nul
    3⤵
    PID:2072
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1808
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1888
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1848
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets gp$a.class" nul
    3⤵
    PID:1412
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:860
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1248
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2060
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets gp.class" nul
    3⤵
    PID:1956
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1996
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2176
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2788
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets gq$a.class" nul
    3⤵
    PID:1216
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2448
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1660
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1672
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets gq.class" nul
    3⤵
    PID:1360
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1988
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1664
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1628
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets gr.class" nul
    3⤵
    PID:1620
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1796
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1800
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1744
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets gs.class" nul
    3⤵
    PID:852
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1816
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1260
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:3028
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets gt.class" nul
    3⤵
    PID:2940
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:316
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2776
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2576
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets gu.class" nul
    3⤵
    PID:2744
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:580
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2192
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2216
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets gv.class" nul
    3⤵
    PID:3044
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:3036
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:3056
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2168
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets gw.class" nul
    3⤵
    PID:448
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1812
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2688
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2808
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets gx.class" nul
    3⤵
    PID:844
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1320
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2300
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1548
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets gy.class" nul
    3⤵
    PID:2552
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1948
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1836
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2604
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets gz.class" nul
    3⤵
    PID:1368
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1528
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1788
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1264
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets h.class" nul
    3⤵
    PID:1572
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:944
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2304
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2512
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets ha.class" nul
    3⤵
    PID:1720
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1708
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1604
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2684
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets hb.class" nul
    3⤵
    PID:956
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2200
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1420
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2328
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets hc.class" nul
    3⤵
    PID:2364
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2568
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2260
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2348
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets hd.class" nul
    3⤵
    PID:2188
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2276
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2608
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1960
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets he.class" nul
    3⤵
    PID:2012
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1976
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:780
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1436
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets hf.class" nul
    3⤵
    PID:904
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1508
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2240
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2056
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets hg.class" nul
    3⤵
    PID:2172
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1540
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1652
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1532
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets jn.class" nul
    3⤵
    PID:1940
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2464
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1656
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:572
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets jo.class" nul
    3⤵
    PID:2800
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2540
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1580
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2860
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets jp.class" nul
    3⤵
    PID:2904
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2924
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2936
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2908
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets jq.class" nul
    3⤵
    PID:2836
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2816
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2968
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2220
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets jr.class" nul
    3⤵
    PID:2900
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2828
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2740
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:3016
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets js.class" nul
    3⤵
    PID:2812
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2880
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2760
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2704
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets w.class" nul
    3⤵
    PID:2848
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2336
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1512
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2964
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets x.class" nul
    3⤵
    PID:1688
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1136
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0a /R "^$" "+" nul
    3⤵
    PID:2140
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1204
- - C:\Windows\system32\timeout.exe
    timeout 3
    3⤵
    - Delays execution with timeout.exe
    PID:2432
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:728
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:896
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:376
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets a.class" nul
    3⤵
    PID:2072
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1808
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1888
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1848
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets aa.class" nul
    3⤵
    PID:1412
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:860
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1248
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2060
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets aaa$a.class" nul
    3⤵
    PID:1956
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1996
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2176
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2788
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets aaa.class" nul
    3⤵
    PID:1216
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2448
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1660
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1672
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets aab.class" nul
    3⤵
    PID:1360
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1988
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1664
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1628
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets aac$a.class" nul
    3⤵
    PID:1620
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1796
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1800
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1744
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets aac.class" nul
    3⤵
    PID:852
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1816
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1260
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:3028
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets aad.class" nul
    3⤵
    PID:2940
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:316
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2776
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2576
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets aae.class" nul
    3⤵
    PID:2744
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:580
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2192
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2216
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets aaf.class" nul
    3⤵
    PID:3044
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:3036
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:3056
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2168
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets aag.class" nul
    3⤵
    PID:448
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1812
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2688
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2808
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets aah.class" nul
    3⤵
    PID:844
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1320
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2300
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1548
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets aai.class" nul
    3⤵
    PID:2552
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1948
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1836
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2604
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets aaj.class" nul
    3⤵
    PID:1368
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1528
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1788
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1264
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets aak$a.class" nul
    3⤵
    PID:1572
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:944
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2304
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2512
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets aak$b.class" nul
    3⤵
    PID:1720
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1708
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1604
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2684
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets aak.class" nul
    3⤵
    PID:956
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2200
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1420
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2328
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets aal$a.class" nul
    3⤵
    PID:2364
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2568
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2260
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2348
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets aal.class" nul
    3⤵
    PID:2188
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2276
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2608
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1960
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets aam$a.class" nul
    3⤵
    PID:2012
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1976
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:780
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1436
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets aam.class" nul
    3⤵
    PID:904
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1508
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2240
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2056
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets aan.class" nul
    3⤵
    PID:2172
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1540
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1652
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1532
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets aao.class" nul
    3⤵
    PID:1940
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2464
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1656
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:572
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets aap.class" nul
    3⤵
    PID:2800
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2540
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1580
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2860
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets aaq$1.class" nul
    3⤵
    PID:2904
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2924
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2936
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2908
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets aaq.class" nul
    3⤵
    PID:2836
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2816
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2968
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2220
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets aar.class" nul
    3⤵
    PID:2900
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2828
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2740
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:3016
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets aas.class" nul
    3⤵
    PID:2812
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2880
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2760
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2704
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets aat.class" nul
    3⤵
    PID:2848
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2336
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1512
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2964
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets aau.class" nul
    3⤵
    PID:1688
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1136
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2140
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1204
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets aav.class" nul
    3⤵
    PID:1820
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:268
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1908
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1828
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets aaw.class" nul
    3⤵
    PID:2004
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1832
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1476
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1756
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets aax.class" nul
    3⤵
    PID:276
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1588
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1824
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2068
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets aay.class" nul
    3⤵
    PID:2156
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2380
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2064
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1752
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets aaz.class" nul
    3⤵
    PID:2032
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2388
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1460
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1676
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets ab.class" nul
    3⤵
    PID:2164
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1624
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1500
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1844
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets aba$a.class" nul
    3⤵
    PID:2016
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2000
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1256
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1284
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets aba$b.class" nul
    3⤵
    PID:1700
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2952
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:3004
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2896
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets aba$c.class" nul
    3⤵
    PID:3020
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1884
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:3040
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1428
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets aba.class" nul
    3⤵
    PID:2252
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2228
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2232
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:3048
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets abb.class" nul
    3⤵
    PID:3024
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2272
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:544
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2492
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets abc.class" nul
    3⤵
    PID:3032
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2796
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2256
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1004
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets abd.class" nul
    3⤵
    PID:960
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1308
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1324
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1892
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets abe.class" nul
    3⤵
    PID:1952
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1552
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:788
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1140
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets abf.class" nul
    3⤵
    PID:1576
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1468
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1152
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:968
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets abg.class" nul
    3⤵
    PID:1728
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1376
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2544
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1492
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets abh.class" nul
    3⤵
    PID:2196
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:848
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:692
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2368
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets abi.class" nul
    3⤵
    PID:1444
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2344
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1088
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2600
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets abj.class" nul
    3⤵
    PID:1424
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2092
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:3012
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2508
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets abk.class" nul
    3⤵
    PID:2268
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2124
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2628
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:980
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets abl.class" nul
    3⤵
    PID:1016
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2596
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1440
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:900
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets abm.class" nul
    3⤵
    PID:2312
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1612
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2468
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2172
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets abn.class" nul
    3⤵
    PID:1540
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1652
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1532
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1940
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets abo.class" nul
    3⤵
    PID:2464
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1656
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:572
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2800
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets abp.class" nul
    3⤵
    PID:2540
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1580
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2860
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2904
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets abq.class" nul
    3⤵
    PID:2924
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2936
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2908
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2836
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets abr.class" nul
    3⤵
    PID:2816
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2968
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2220
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2900
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets abs.class" nul
    3⤵
    PID:2828
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2740
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:3016
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2812
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets abt.class" nul
    3⤵
    PID:2880
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2760
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2704
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2848
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets abu.class" nul
    3⤵
    PID:2336
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1512
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2964
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1688
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets abv$a.class" nul
    3⤵
    PID:1136
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2140
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1204
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1820
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets abv$b.class" nul
    3⤵
    PID:268
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1908
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1828
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2004
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets abv.class" nul
    3⤵
    PID:1832
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1476
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1756
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:276
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets abw.class" nul
    3⤵
    PID:1588
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1824
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2068
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2156
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets abx.class" nul
    3⤵
    PID:2380
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2064
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1752
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2032
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets aby.class" nul
    3⤵
    PID:2388
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1460
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1676
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2164
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets abz.class" nul
    3⤵
    PID:1624
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1500
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1844
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2016
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets ac.class" nul
    3⤵
    PID:2000
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1256
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1284
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1700
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets aca$a.class" nul
    3⤵
    PID:2952
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:3004
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2896
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:3020
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets aca.class" nul
    3⤵
    PID:1884
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:3040
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1428
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:2252
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets acb.class" nul
    3⤵
    PID:2228
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2232
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:3048
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:3024
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets acc.class" nul
    3⤵
    PID:2272
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:544
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:2492
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:3032
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets acd.class" nul
    3⤵
    PID:2796
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2256
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1004
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:960
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets ace.class" nul
    3⤵
    PID:1308
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1324
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1892
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1952
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets acf.class" nul
    3⤵
    PID:1552
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:788
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1140
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1576
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets acg.class" nul
    3⤵
    PID:1468
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:1152
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:968
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "] " nul
    3⤵
    PID:1728
- - C:\Windows\system32\findstr.exe
    findstr /v /a:06 /R "^$" " Loading assets ach$a.class" nul
    3⤵
    PID:1376
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0f /R "^$" "[" nul
    3⤵
    PID:2544
- - C:\Windows\system32\findstr.exe
    findstr /v /a:0e /R "^$" "#" nul
    3⤵
    PID:1492

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\F161.tmp\F162.tmp\F163.bat

Filesize
2KB

MD5
c7f9dff132c62e52b2cc2c1956aff91b

SHA1
d3520c9d9cd92e471b9b78e822c29738147673a9

SHA256
83782f857a899290fdb2b43902c8aa9e93d70298d9a5e955a661afcc5be719eb

SHA512
b99714c725cd68ad4064c8e81769929c64c011eee464e1a9fd0e3166f3ec806425f75df9fd06229dd016faf25e2cd06fdabf2cbcfa0ac763c5d52fdb4b3671a2

Download Submit
C:\Users\Admin\AppData\Local\Temp\[

Filesize
3B

MD5
df66fa563a2fafdb93cc559deb0a38c4

SHA1
e6666cf8574b0f7a9ae5bccee572f965c2aec9cb

SHA256
3e39ed22dc63246937c4dbbf34ce4fb1cfe6b00de7596b020cad49ae50031351

SHA512
34ea05ee75cd840a94526411777868edb293a69867e1fdc2c2e917d278a3d58fcb86afc65142f4b184ce6907f04fb254a86061cfb620f01874b0b454a6f01c18

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI23802\api-ms-win-core-file-l1-2-0.dll

Filesize
19KB

MD5
ac28edb5ad8eaa70ecbc64baf3e70bd4

SHA1
1a594e6cdc25a6e6be7904093f47f582e9c1fe4d

SHA256
fbd5e958f6efb4d78fd61ee9ee4b4d1b6f43c1210301668f654a880c65a1be86

SHA512
a25b812b9fa965af5f7de5552e2c2f4788a076af003ac0d94c3b2bc42dd9ab7e69af2438ce349b46a3387bf2bfcf27cec270d90ca6a44c9690861331c9e431e1

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI23802\api-ms-win-core-processthreads-l1-1-1.dll

Filesize
19KB

MD5
8ff0692d32f2fcb0b417220b98f30364

SHA1
5eeb1d781d44e4885284c8b535f051efca64aef8

SHA256
53cea73c248a49389bc2da01acac1d8e8022a7e034bcd522306e43a937200897

SHA512
f73249f70953c537da02b890308cb18a9c6676401975bf13aeb61b1db9dfa042e908c52ee266b404948a568b23b0cfb37ecd4b80379c398c15f56ce7a82cf7a5

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI23802\api-ms-win-core-timezone-l1-1-0.dll

Filesize
19KB

MD5
863ed806b4f16be984b4f1e279a1f99b

SHA1
b9a919216ef90064ac66b12ccde6b3bf1f334ee8

SHA256
171ca9df2b9ecfa545748af724c1c56ab396b299503a14c4da2197b0e5a44401

SHA512
fb8f195d9a1885c16aa2cc6eff38e627ea127b18978016d6046dc0120a19ab40cc4fe4b799c06f133b02f7cd6a634ae1665f05f9be5fcae609229dfaae0ce478

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI23802\python312.dll

Filesize
1.7MB

MD5
6f7c42579f6c2b45fe866747127aef09

SHA1
b9487372fe3ed61022e52cc8dbd37e6640e87723

SHA256
07642b6a3d99ce88cff790087ac4e2ba0b2da1100cf1897f36e096427b580ee5

SHA512
aadf06fd6b4e14f600b0a614001b8c31e42d71801adec7c9c177dcbb4956e27617fa45ba477260a7e06d2ca4979ed5acc60311258427ee085e8025b61452acec

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI23802\ucrtbase.dll

Filesize
1.1MB

MD5
988755316d0f77fc510923c2f7cd6917

SHA1
ccd23c30c38062c87bf730ab6933f928ee981419

SHA256
1854cd0f850da28835416e3b69ed6dae465df95f8d84e77adbbc001f6dbd9d78

SHA512
8c52210a919d9f2856f38bd6a59bbc039506650a7e30f5d100a5aa5008641707122ff79f6f88c268c9abc9f02ba2792eed6aad6a5c65891a9ce7d6d5f12c3b0a

Download Submit
\Users\Admin\AppData\Local\Temp\_MEI23802\api-ms-win-core-file-l2-1-0.dll

Filesize
19KB

MD5
b5832f1e3a18d94cd855c3d8c632b30d

SHA1
6315b40487078bbafb478786c42c3946647e8ef3

SHA256
9f096475d4ba1533f564dd4a1db5dfeb620248fe14518042094b922539dc13e3

SHA512
f3016ded97591e25a6d4c70d89251a331402455ab589604e55c486fec37ee8e96bd1be2d4e4e59ba102dad696b3e1f754b699f9ebe8ae462e8b958ed2d431a5b

Download Submit
\Users\Admin\AppData\Local\Temp\_MEI23802\api-ms-win-core-localization-l1-2-0.dll

Filesize
19KB

MD5
fd59ee6be2136782225dcd86f8177239

SHA1
494d20e04f69676c150944e24e4fa714a3f781ca

SHA256
1fd044fdbc424779b01b79d477ee79dfbb508a04e86c62e1c8fc4f6d22f6a16a

SHA512
2250d54c3b9e6aeb2f5406e1428536564357a48ceab51596b33ff0843086fb420ad886af61725b25a58e2f50a4c17ddee10696d6041db9b60891eff8e495775c

Download Submit
memory/2964-77-0x000007FEF63D0000-0x000007FEF6A95000-memory.dmp

Filesize
6.8MB

Download