Analysis
-
max time kernel
24s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
12-12-2024 08:34
Static task
static1
General
-
Target
2eb8d3907808a557ba9247bd617f824adc01acbb2b586291d492c4204074cacb.exe
-
Size
7.0MB
-
MD5
7f85535b576d4f2da940a87c8d400ab8
-
SHA1
8d83d5b6137a3fff79d46921ea9180a12e9a28ee
-
SHA256
2eb8d3907808a557ba9247bd617f824adc01acbb2b586291d492c4204074cacb
-
SHA512
771996c617c0d16565a393b536ac094c7816da1890db99d2dd292b3ae2df0d217fc849774fce8fa096ebc0670f53ece3021878494e744986b74eaf46e24af6bb
-
SSDEEP
196608:PPEt3QtpWjDpHiIXRadfX714IbyRg1wmQfXP/k4:PMutpORiIo57mIbyR2PWXPL
Malware Config
Extracted
amadey
4.42
9c9aa5
http://185.215.113.43
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
Extracted
lumma
https://impend-differ.biz/api
https://print-vexer.biz/api
https://dare-curbys.biz/api
https://covery-mover.biz/api
https://formy-spill.biz/api
https://dwell-exclaim.biz/api
https://zinc-sneark.biz/api
https://se-blurry.biz/api
https://atten-supporse.biz/api
https://drive-connect.cyou/api
https://sordid-snaked.cyou/api
https://awake-weaves.cyou/api
https://wrathful-jammy.cyou/api
https://debonairnukk.xyz/api
https://diffuculttan.xyz/api
https://effecterectz.xyz/api
https://deafeninggeh.biz/api
https://immureprech.biz/api
Extracted
stealc
stok
http://185.215.113.206
-
url_path
/c4becf79229cb002.php
Extracted
lumma
https://atten-supporse.biz/api
https://covery-mover.biz/api
https://drive-connect.cyou/api
https://immureprech.biz/api
https://deafeninggeh.biz/api
https://effecterectz.xyz/api
https://diffuculttan.xyz/api
https://debonairnukk.xyz/api
https://wrathful-jammy.cyou/api
https://awake-weaves.cyou/api
https://sordid-snaked.cyou/api
Signatures
-
Amadey family
-
Gcleaner family
-
Lumma family
-
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Policies\Microsoft\Windows Defender\Real-Time Protection 4h983b.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Policies\Microsoft\Windows Defender\Real-Time Protection\DisableBehaviorMonitoring = "1" 4h983b.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Policies\Microsoft\Windows Defender\Real-Time Protection\DisableIOAVProtection = "1" 4h983b.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Policies\Microsoft\Windows Defender\Real-Time Protection\DisableOnAccessProtection = "1" 4h983b.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Policies\Microsoft\Windows Defender\Real-Time Protection\DisableRealtimeMonitoring = "1" 4h983b.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Policies\Microsoft\Windows Defender\Real-Time Protection\DisableScanOnRealtimeEnable = "1" 4h983b.exe -
Stealc family
-
Identifies VirtualBox via ACPI registry values (likely anti-VM) 2 TTPs 5 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\ACPI\DSDT\VBOX__ 2Q9665.exe Key opened \REGISTRY\MACHINE\HARDWARE\ACPI\DSDT\VBOX__ 3v01f.exe Key opened \REGISTRY\MACHINE\HARDWARE\ACPI\DSDT\VBOX__ 4h983b.exe Key opened \REGISTRY\MACHINE\HARDWARE\ACPI\DSDT\VBOX__ 1q82N3.exe Key opened \REGISTRY\MACHINE\HARDWARE\ACPI\DSDT\VBOX__ skotes.exe -
Downloads MZ/PE file
-
Checks BIOS information in registry 2 TTPs 10 IoCs
BIOS information is often read in order to detect sandboxing environments.
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion skotes.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\VideoBiosVersion 2Q9665.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\VideoBiosVersion 3v01f.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\VideoBiosVersion 4h983b.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion 1q82N3.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\VideoBiosVersion 1q82N3.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\VideoBiosVersion skotes.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion 2Q9665.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion 3v01f.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion 4h983b.exe -
Checks computer location settings 2 TTPs 2 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000\Control Panel\International\Geo\Nation 1q82N3.exe Key value queried \REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000\Control Panel\International\Geo\Nation skotes.exe -
Drops startup file 1 IoCs
description ioc Process File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\M5iFR20.exe Process not Found -
Executes dropped EXE 64 IoCs
pid Process 2424 v0s43.exe 956 E6J61.exe 4464 1q82N3.exe 4248 skotes.exe 1108 2Q9665.exe 4928 3v01f.exe 4860 4h983b.exe 4320 IGEaNGi.exe 2104 IGEaNGi.exe 1204 IGEaNGi.exe 3000 IGEaNGi.exe 5088 IGEaNGi.exe 928 IGEaNGi.exe 2212 IGEaNGi.exe 232 IGEaNGi.exe 4884 IGEaNGi.exe 4496 IGEaNGi.exe 3356 IGEaNGi.exe 1608 IGEaNGi.exe 1372 IGEaNGi.exe 3336 IGEaNGi.exe 1628 IGEaNGi.exe 516 IGEaNGi.exe 1036 IGEaNGi.exe 2868 IGEaNGi.exe 3268 IGEaNGi.exe 1760 IGEaNGi.exe 3544 IGEaNGi.exe 2920 IGEaNGi.exe 4492 IGEaNGi.exe 4616 IGEaNGi.exe 4876 IGEaNGi.exe 2032 IGEaNGi.exe 2040 IGEaNGi.exe 392 IGEaNGi.exe 4720 IGEaNGi.exe 2900 IGEaNGi.exe 4188 IGEaNGi.exe 940 IGEaNGi.exe 4516 IGEaNGi.exe 1920 IGEaNGi.exe 2192 IGEaNGi.exe 4368 IGEaNGi.exe 3456 IGEaNGi.exe 548 IGEaNGi.exe 2144 IGEaNGi.exe 2884 IGEaNGi.exe 4380 IGEaNGi.exe 5028 IGEaNGi.exe 1792 IGEaNGi.exe 2244 IGEaNGi.exe 4232 IGEaNGi.exe 520 IGEaNGi.exe 3840 IGEaNGi.exe 2928 IGEaNGi.exe 4984 IGEaNGi.exe 2380 IGEaNGi.exe 3632 IGEaNGi.exe 2476 IGEaNGi.exe 1524 IGEaNGi.exe 5060 IGEaNGi.exe 1716 IGEaNGi.exe 4300 IGEaNGi.exe 4316 IGEaNGi.exe -
Identifies Wine through registry keys 2 TTPs 5 IoCs
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
description ioc Process Key opened \REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000\Software\Wine skotes.exe Key opened \REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000\Software\Wine 2Q9665.exe Key opened \REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000\Software\Wine 3v01f.exe Key opened \REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000\Software\Wine 4h983b.exe Key opened \REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000\Software\Wine 1q82N3.exe -
Reads data files stored by FTP clients 2 TTPs
Tries to access configuration files associated with programs like FileZilla.
-
Unsecured Credentials: Credentials In Files 1 TTPs
Steal credentials from unsecured files.
-
description ioc Process Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows Defender\Features\TamperProtection = "0" 4h983b.exe Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows Defender\Features 4h983b.exe -
Adds Run key to start application 2 TTPs 3 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\wextract_cleanup0 = "rundll32.exe C:\\Windows\\system32\\advpack.dll,DelNodeRunDLL32 \"C:\\Users\\Admin\\AppData\\Local\\Temp\\IXP000.TMP\\\"" 2eb8d3907808a557ba9247bd617f824adc01acbb2b586291d492c4204074cacb.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\wextract_cleanup1 = "rundll32.exe C:\\Windows\\system32\\advpack.dll,DelNodeRunDLL32 \"C:\\Users\\Admin\\AppData\\Local\\Temp\\IXP001.TMP\\\"" v0s43.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\wextract_cleanup2 = "rundll32.exe C:\\Windows\\system32\\advpack.dll,DelNodeRunDLL32 \"C:\\Users\\Admin\\AppData\\Local\\Temp\\IXP002.TMP\\\"" E6J61.exe -
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
AutoIT Executable 2 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule behavioral1/files/0x000a000000023b7c-138.dat autoit_exe behavioral1/files/0x0010000000023b60-236.dat autoit_exe -
Enumerates processes with tasklist 1 TTPs 1 IoCs
pid Process 19764 Process not Found -
Suspicious use of NtSetInformationThreadHideFromDebugger 5 IoCs
pid Process 4464 1q82N3.exe 4248 skotes.exe 1108 2Q9665.exe 4928 3v01f.exe 4860 4h983b.exe -
Suspicious use of SetThreadContext 2 IoCs
description pid Process procid_target PID 6708 set thread context of 8640 6708 0c7c03a6dc.exe 704 PID 17548 set thread context of 19868 17548 Process not Found 2093 -
Drops file in Windows directory 1 IoCs
description ioc Process File created C:\Windows\Tasks\skotes.job 1q82N3.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Program crash 3 IoCs
pid pid_target Process procid_target 31668 23136 Process not Found 2501 37092 28944 Process not Found 3246 125996 51040 Process not Found 5892 -
System Location Discovery: System Language Discovery 1 TTPs 25 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language v0s43.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language E6J61.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language skotes.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 1q82N3.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2Q9665.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 4h983b.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 3v01f.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language IGEaNGi.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 0c7c03a6dc.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2eb8d3907808a557ba9247bd617f824adc01acbb2b586291d492c4204074cacb.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 0c7c03a6dc.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found -
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 Process not Found Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString Process not Found -
Delays execution with timeout.exe 2 IoCs
pid Process 31604 Process not Found 37140 Process not Found -
Gathers system information 1 TTPs 1 IoCs
Runs systeminfo.exe.
pid Process 12816 Process not Found -
Kills process with taskkill 5 IoCs
pid Process 40480 Process not Found 40100 Process not Found 40800 Process not Found 38116 Process not Found 40072 Process not Found -
Suspicious behavior: EnumeratesProcesses 14 IoCs
pid Process 4464 1q82N3.exe 4464 1q82N3.exe 4248 skotes.exe 4248 skotes.exe 1108 2Q9665.exe 1108 2Q9665.exe 4928 3v01f.exe 4928 3v01f.exe 4860 4h983b.exe 4860 4h983b.exe 4860 4h983b.exe 4860 4h983b.exe 23136 Process not Found 23136 Process not Found -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 4860 4h983b.exe Token: SeDebugPrivilege 19764 Process not Found -
Suspicious use of FindShellTrayWindow 4 IoCs
pid Process 4464 1q82N3.exe 12416 Process not Found 12416 Process not Found 12416 Process not Found -
Suspicious use of SendNotifyMessage 3 IoCs
pid Process 12416 Process not Found 12416 Process not Found 12416 Process not Found -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 3504 wrote to memory of 2424 3504 2eb8d3907808a557ba9247bd617f824adc01acbb2b586291d492c4204074cacb.exe 82 PID 3504 wrote to memory of 2424 3504 2eb8d3907808a557ba9247bd617f824adc01acbb2b586291d492c4204074cacb.exe 82 PID 3504 wrote to memory of 2424 3504 2eb8d3907808a557ba9247bd617f824adc01acbb2b586291d492c4204074cacb.exe 82 PID 2424 wrote to memory of 956 2424 v0s43.exe 83 PID 2424 wrote to memory of 956 2424 v0s43.exe 83 PID 2424 wrote to memory of 956 2424 v0s43.exe 83 PID 956 wrote to memory of 4464 956 E6J61.exe 84 PID 956 wrote to memory of 4464 956 E6J61.exe 84 PID 956 wrote to memory of 4464 956 E6J61.exe 84 PID 4464 wrote to memory of 4248 4464 1q82N3.exe 85 PID 4464 wrote to memory of 4248 4464 1q82N3.exe 85 PID 4464 wrote to memory of 4248 4464 1q82N3.exe 85 PID 956 wrote to memory of 1108 956 E6J61.exe 86 PID 956 wrote to memory of 1108 956 E6J61.exe 86 PID 956 wrote to memory of 1108 956 E6J61.exe 86 PID 2424 wrote to memory of 4928 2424 v0s43.exe 87 PID 2424 wrote to memory of 4928 2424 v0s43.exe 87 PID 2424 wrote to memory of 4928 2424 v0s43.exe 87 PID 3504 wrote to memory of 4860 3504 2eb8d3907808a557ba9247bd617f824adc01acbb2b586291d492c4204074cacb.exe 88 PID 3504 wrote to memory of 4860 3504 2eb8d3907808a557ba9247bd617f824adc01acbb2b586291d492c4204074cacb.exe 88 PID 3504 wrote to memory of 4860 3504 2eb8d3907808a557ba9247bd617f824adc01acbb2b586291d492c4204074cacb.exe 88 PID 4248 wrote to memory of 4320 4248 skotes.exe 89 PID 4248 wrote to memory of 4320 4248 skotes.exe 89 PID 4248 wrote to memory of 4320 4248 skotes.exe 89 PID 4320 wrote to memory of 2104 4320 IGEaNGi.exe 91 PID 4320 wrote to memory of 2104 4320 IGEaNGi.exe 91 PID 4320 wrote to memory of 2104 4320 IGEaNGi.exe 91 PID 4320 wrote to memory of 1204 4320 IGEaNGi.exe 92 PID 4320 wrote to memory of 1204 4320 IGEaNGi.exe 92 PID 4320 wrote to memory of 1204 4320 IGEaNGi.exe 92 PID 4320 wrote to memory of 3000 4320 IGEaNGi.exe 93 PID 4320 wrote to memory of 3000 4320 IGEaNGi.exe 93 PID 4320 wrote to memory of 3000 4320 IGEaNGi.exe 93 PID 4320 wrote to memory of 5088 4320 IGEaNGi.exe 94 PID 4320 wrote to memory of 5088 4320 IGEaNGi.exe 94 PID 4320 wrote to memory of 5088 4320 IGEaNGi.exe 94 PID 4320 wrote to memory of 928 4320 IGEaNGi.exe 95 PID 4320 wrote to memory of 928 4320 IGEaNGi.exe 95 PID 4320 wrote to memory of 928 4320 IGEaNGi.exe 95 PID 4320 wrote to memory of 2212 4320 IGEaNGi.exe 96 PID 4320 wrote to memory of 2212 4320 IGEaNGi.exe 96 PID 4320 wrote to memory of 2212 4320 IGEaNGi.exe 96 PID 4320 wrote to memory of 232 4320 IGEaNGi.exe 97 PID 4320 wrote to memory of 232 4320 IGEaNGi.exe 97 PID 4320 wrote to memory of 232 4320 IGEaNGi.exe 97 PID 4320 wrote to memory of 4884 4320 IGEaNGi.exe 98 PID 4320 wrote to memory of 4884 4320 IGEaNGi.exe 98 PID 4320 wrote to memory of 4884 4320 IGEaNGi.exe 98 PID 4320 wrote to memory of 4496 4320 IGEaNGi.exe 99 PID 4320 wrote to memory of 4496 4320 IGEaNGi.exe 99 PID 4320 wrote to memory of 4496 4320 IGEaNGi.exe 99 PID 4320 wrote to memory of 3356 4320 IGEaNGi.exe 100 PID 4320 wrote to memory of 3356 4320 IGEaNGi.exe 100 PID 4320 wrote to memory of 3356 4320 IGEaNGi.exe 100 PID 4320 wrote to memory of 1608 4320 IGEaNGi.exe 101 PID 4320 wrote to memory of 1608 4320 IGEaNGi.exe 101 PID 4320 wrote to memory of 1608 4320 IGEaNGi.exe 101 PID 4320 wrote to memory of 1372 4320 IGEaNGi.exe 102 PID 4320 wrote to memory of 1372 4320 IGEaNGi.exe 102 PID 4320 wrote to memory of 1372 4320 IGEaNGi.exe 102 PID 4320 wrote to memory of 3336 4320 IGEaNGi.exe 103 PID 4320 wrote to memory of 3336 4320 IGEaNGi.exe 103 PID 4320 wrote to memory of 3336 4320 IGEaNGi.exe 103 PID 4320 wrote to memory of 1628 4320 IGEaNGi.exe 104
Processes
-
C:\Users\Admin\AppData\Local\Temp\2eb8d3907808a557ba9247bd617f824adc01acbb2b586291d492c4204074cacb.exe"C:\Users\Admin\AppData\Local\Temp\2eb8d3907808a557ba9247bd617f824adc01acbb2b586291d492c4204074cacb.exe"1⤵
- Adds Run key to start application
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:3504 -
C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\v0s43.exeC:\Users\Admin\AppData\Local\Temp\IXP000.TMP\v0s43.exe2⤵
- Executes dropped EXE
- Adds Run key to start application
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:2424 -
C:\Users\Admin\AppData\Local\Temp\IXP001.TMP\E6J61.exeC:\Users\Admin\AppData\Local\Temp\IXP001.TMP\E6J61.exe3⤵
- Executes dropped EXE
- Adds Run key to start application
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:956 -
C:\Users\Admin\AppData\Local\Temp\IXP002.TMP\1q82N3.exeC:\Users\Admin\AppData\Local\Temp\IXP002.TMP\1q82N3.exe4⤵
- Identifies VirtualBox via ACPI registry values (likely anti-VM)
- Checks BIOS information in registry
- Checks computer location settings
- Executes dropped EXE
- Identifies Wine through registry keys
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:4464 -
C:\Users\Admin\AppData\Local\Temp\abc3bc1985\skotes.exe"C:\Users\Admin\AppData\Local\Temp\abc3bc1985\skotes.exe"5⤵
- Identifies VirtualBox via ACPI registry values (likely anti-VM)
- Checks BIOS information in registry
- Checks computer location settings
- Executes dropped EXE
- Identifies Wine through registry keys
- Suspicious use of NtSetInformationThreadHideFromDebugger
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4248 -
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"6⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4320 -
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵
- Executes dropped EXE
PID:2104
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵
- Executes dropped EXE
PID:1204
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵
- Executes dropped EXE
PID:3000
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵
- Executes dropped EXE
PID:5088
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵
- Executes dropped EXE
PID:928
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵
- Executes dropped EXE
PID:2212
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵
- Executes dropped EXE
PID:232
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵
- Executes dropped EXE
PID:4884
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵
- Executes dropped EXE
PID:4496
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵
- Executes dropped EXE
PID:3356
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵
- Executes dropped EXE
PID:1608
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵
- Executes dropped EXE
PID:1372
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵
- Executes dropped EXE
PID:3336
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵
- Executes dropped EXE
PID:1628
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵
- Executes dropped EXE
PID:516
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵
- Executes dropped EXE
PID:1036
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵
- Executes dropped EXE
PID:2868
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵
- Executes dropped EXE
PID:3268
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵
- Executes dropped EXE
PID:1760
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵
- Executes dropped EXE
PID:3544
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵
- Executes dropped EXE
PID:2920
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵
- Executes dropped EXE
PID:4492
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵
- Executes dropped EXE
PID:4616
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵
- Executes dropped EXE
PID:4876
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵
- Executes dropped EXE
PID:2032
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵
- Executes dropped EXE
PID:2040
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵
- Executes dropped EXE
PID:392
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵
- Executes dropped EXE
PID:4720
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵
- Executes dropped EXE
PID:2900
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵
- Executes dropped EXE
PID:4188
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵
- Executes dropped EXE
PID:940
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵
- Executes dropped EXE
PID:4516
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵
- Executes dropped EXE
PID:1920
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵
- Executes dropped EXE
PID:2192
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵
- Executes dropped EXE
PID:4368
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵
- Executes dropped EXE
PID:3456
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵
- Executes dropped EXE
PID:548
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵
- Executes dropped EXE
PID:2144
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵
- Executes dropped EXE
PID:2884
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵
- Executes dropped EXE
PID:4380
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵
- Executes dropped EXE
PID:5028
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵
- Executes dropped EXE
PID:1792
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵
- Executes dropped EXE
PID:2244
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵
- Executes dropped EXE
PID:4232
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵
- Executes dropped EXE
PID:520
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵
- Executes dropped EXE
PID:3840
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵
- Executes dropped EXE
PID:2928
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵
- Executes dropped EXE
PID:4984
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵
- Executes dropped EXE
PID:2380
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵
- Executes dropped EXE
PID:3632
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵
- Executes dropped EXE
PID:2476
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵
- Executes dropped EXE
PID:1524
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵
- Executes dropped EXE
PID:5060
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵
- Executes dropped EXE
PID:1716
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵
- Executes dropped EXE
PID:4300
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵
- Executes dropped EXE
PID:4316
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:4304
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:1952
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:1224
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:456
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:4872
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:4828
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:1272
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:2356
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:4076
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:3168
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:4384
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:544
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:440
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:1652
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:4944
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:4344
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:1416
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:1600
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:1812
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:3884
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:1380
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:452
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:4832
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:2924
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:3576
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:2640
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:3708
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:2964
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:3532
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:468
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:4256
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:3388
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:1500
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:1520
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:1332
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:3524
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:3716
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:972
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5112
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:2876
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:4596
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:4868
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:1156
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:412
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:1056
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:4216
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:720
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:3124
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:4464
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:2120
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:3056
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:2372
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:2708
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:4200
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:1152
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:968
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:3420
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:4664
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:2012
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:2728
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:2236
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:3944
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:2000
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:3540
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:4296
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:3308
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:2704
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:3580
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:1720
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:4752
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:3644
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:2532
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:1192
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:4780
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:2436
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:1756
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:1752
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:4220
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:808
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:4420
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:3652
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:2500
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:3464
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:4788
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:4412
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:4812
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:4228
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:4916
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:3476
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:1680
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:764
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:4772
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:4176
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:3312
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:3076
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:4928
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:4252
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:2424
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:1852
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:716
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:2972
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5084
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:3172
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:4728
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:4856
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:2620
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:3864
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:4836
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:2904
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:4476
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:4588
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:1912
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:3428
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:2872
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:1304
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:1616
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:3116
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:3688
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:1136
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:884
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:3164
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:3620
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:4064
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:3572
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5124
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5132
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5140
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5148
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5156
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5164
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5172
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5180
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5188
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5196
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5204
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5212
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5220
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5228
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5236
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5244
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5252
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5260
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5268
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5276
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5284
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5292
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5300
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5308
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5316
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5324
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5332
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5340
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5348
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5356
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5364
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5372
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5380
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5388
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5396
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5404
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5412
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5420
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5428
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5436
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5444
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5452
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5460
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5468
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5476
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5484
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5492
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5500
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5508
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5516
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5524
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5532
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5540
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5548
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5556
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5564
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5572
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5580
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5588
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5596
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5604
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5612
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5620
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5628
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5636
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5644
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5652
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5660
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5668
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5676
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5684
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5696
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5704
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5712
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5720
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5728
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5736
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5744
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5752
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5760
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5768
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5776
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5784
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5792
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5800
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5808
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5816
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5824
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5832
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5840
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5848
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5856
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5864
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5872
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5880
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5888
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5896
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5904
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5912
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5920
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5928
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5936
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5944
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5956
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5964
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5972
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5980
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5988
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:5996
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6004
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6012
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6020
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6028
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6036
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6044
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6052
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6060
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6068
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6076
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6084
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6092
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6100
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6108
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6116
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6128
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6136
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:3204
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:2788
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:4112
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:4940
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:4640
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:1424
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:1684
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:4164
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:3140
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:4936
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:2808
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:1228
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:2204
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:3968
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:1072
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6148
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6156
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6172
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6180
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6188
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6196
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6212
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6228
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6240
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6248
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6260
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6272
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6288
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6296
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6304
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6312
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6320
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6328
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6336
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6344
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6352
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6360
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6368
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6376
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6384
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6392
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6400
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6408
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6416
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6424
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6432
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6440
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6452
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6488
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6496
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6504
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6512
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6520
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6528
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6536
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6544
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6552
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6560
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6568
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6576
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6584
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6592
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6600
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6608
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6616
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6624
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6632
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6644
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6652
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6668
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6676
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6684
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6700
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6716
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6724
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6736
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6744
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6752
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6768
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6776
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6784
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6804
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6812
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6820
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6836
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6844
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6852
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6860
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6868
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6876
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6884
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6892
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6900
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6908
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6916
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6924
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6932
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6940
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6952
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6968
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6976
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6984
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6992
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7000
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7008
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7016
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7024
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7032
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7040
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7048
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7056
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7064
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7072
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7080
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7088
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7096
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7104
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7112
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7120
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7128
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7136
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7144
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7152
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7160
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6208
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6448
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6464
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6476
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6484
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:1592
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6660
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6696
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6764
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6832
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6828
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7172
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7180
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7188
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7196
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7204
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7212
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7220
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7228
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7236
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7244
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7252
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7260
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7268
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7276
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7284
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7292
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7300
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7308
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7316
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7324
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7332
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7340
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7348
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7356
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7364
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7372
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7380
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7388
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7396
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7404
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7412
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7420
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7428
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7436
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7444
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7452
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7460
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7468
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7476
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7484
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7492
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7500
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7508
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7516
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7524
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7532
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7540
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7548
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7556
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7564
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7572
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7580
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7588
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7596
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7604
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7612
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7620
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7628
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7636
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7644
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7652
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7660
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7668
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7676
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7684
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7692
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7700
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7708
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7716
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7724
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7732
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7740
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7748
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7756
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7764
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7772
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7780
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7788
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7796
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7804
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7812
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7820
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7828
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7836
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7844
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7852
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7860
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7868
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7876
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7888
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7896
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7904
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7912
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7920
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7928
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7936
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7944
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7952
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7960
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7972
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7980
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7988
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7996
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8008
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8016
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8024
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8040
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8048
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8056
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8064
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8072
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8080
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8088
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8096
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8104
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8112
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8120
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8128
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8136
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8148
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8156
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8164
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8172
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8180
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8188
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8196
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8208
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8220
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8236
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8244
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8268
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8280
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8292
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8304
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8312
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8324
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8340
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8352
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8364
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8380
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8388
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8396
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8404
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8412
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8424
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8432
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8440
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8448
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8456
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8464
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8472
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8480
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8488
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8496
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8504
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8516
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8528
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8536
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8548
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8560
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8584
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8600
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8608
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8616
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8624
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8632
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8648
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8660
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8668
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8688
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8700
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8712
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8732
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8744
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8752
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8760
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8768
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8776
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8784
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8792
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8812
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8828
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8836
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8852
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8864
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8872
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8884
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8896
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8904
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8912
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8920
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8928
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8940
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8948
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8956
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8964
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8972
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8980
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8988
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8996
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9008
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9016
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9024
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9032
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9040
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9048
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9056
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9064
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9072
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9084
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9096
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9104
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9116
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9124
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9132
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9140
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9148
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9156
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9164
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9172
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9180
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9188
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9196
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9204
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6760
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6948
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:6712
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8684
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:8696
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:336
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9224
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9232
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9240
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9248
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9256
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9264
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9272
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9280
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9288
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9300
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9308
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9316
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9324
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9332
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9344
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9360
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9368
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9376
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9384
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9392
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9400
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9408
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9420
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9428
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9436
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9444
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9452
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9460
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9468
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9476
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9484
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9492
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9500
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9508
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9516
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9524
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9532
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9540
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9548
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9556
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9564
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9572
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9580
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9588
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9596
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9604
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9612
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9620
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9628
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9636
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9644
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9652
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9660
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9668
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9676
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9684
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9692
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9700
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9708
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9716
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9724
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9732
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9740
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9748
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9756
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9764
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9772
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9780
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9788
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9796
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9804
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9812
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9820
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9828
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9836
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9844
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9852
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9860
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9868
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9876
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9884
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9892
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9900
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9908
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9916
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9924
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9932
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9940
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9948
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9956
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9964
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9972
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9980
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9988
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:9996
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10004
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10012
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10020
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10028
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10036
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10044
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10052
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10060
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10068
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10076
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10084
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10092
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10100
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10108
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10116
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10124
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10132
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10140
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10148
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10156
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10164
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10172
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10180
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10188
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10196
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10204
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10216
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10224
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10232
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:7884
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10248
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10256
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10264
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10272
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10280
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10288
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10296
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10304
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10312
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10320
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10328
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10336
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10352
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10360
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10368
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10376
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10384
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10392
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10400
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10408
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10416
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10424
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10432
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10440
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10448
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10456
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10464
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10472
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10480
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10488
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10496
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10504
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10512
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10520
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10528
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10536
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10544
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10552
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10560
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10568
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10576
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10584
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10592
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10600
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10608
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10620
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10628
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10636
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10644
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10652
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10660
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10668
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10676
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10684
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10692
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10700
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10708
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10716
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10724
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10732
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10740
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10748
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10756
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10764
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10772
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10780
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10788
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10796
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10804
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10812
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10820
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10828
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10836
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10844
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10852
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10860
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10868
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10876
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10884
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10892
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10900
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10908
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10916
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10924
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10932
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10940
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10948
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10956
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10964
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10972
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10980
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10988
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:10996
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11004
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11012
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11020
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11028
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11036
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11044
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11052
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11060
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11068
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11076
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11084
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11092
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11100
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11108
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11116
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11124
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11132
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11140
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11148
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11156
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11164
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11172
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11180
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11188
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11196
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11204
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11212
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11220
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11228
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11236
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11244
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11252
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11260
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11268
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11276
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11284
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11292
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11300
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11312
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11320
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11328
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11336
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11344
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11352
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11360
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11368
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11376
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11384
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11392
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11400
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11408
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11416
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11424
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11432
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11440
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11448
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11456
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11464
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11472
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11480
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11488
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11496
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11504
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11512
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11520
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11528
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11536
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11544
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11552
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11560
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11568
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11576
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11584
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11592
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11600
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11608
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11616
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11624
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11632
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11640
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11648
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11656
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11664
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11672
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11680
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11688
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11696
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11704
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11712
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11720
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11728
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11736
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11744
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11752
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11760
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11768
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11776
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11784
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11792
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11800
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11808
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11816
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11824
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11832
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11840
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11848
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11856
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11864
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11872
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11880
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11888
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11896
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11904
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11912
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11920
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11928
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11936
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11944
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11952
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11960
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11968
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11976
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11984
-
-
C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"C:\Users\Admin\AppData\Local\Temp\1014031001\IGEaNGi.exe"7⤵PID:11992
-
-
-
C:\Users\Admin\AppData\Local\Temp\1014060001\0c7c03a6dc.exe"C:\Users\Admin\AppData\Local\Temp\1014060001\0c7c03a6dc.exe"6⤵
- Suspicious use of SetThreadContext
- System Location Discovery: System Language Discovery
PID:6708 -
C:\Users\Admin\AppData\Local\Temp\1014060001\0c7c03a6dc.exe"C:\Users\Admin\AppData\Local\Temp\1014060001\0c7c03a6dc.exe"7⤵
- System Location Discovery: System Language Discovery
PID:8640
-
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\IXP002.TMP\2Q9665.exeC:\Users\Admin\AppData\Local\Temp\IXP002.TMP\2Q9665.exe4⤵
- Identifies VirtualBox via ACPI registry values (likely anti-VM)
- Checks BIOS information in registry
- Executes dropped EXE
- Identifies Wine through registry keys
- Suspicious use of NtSetInformationThreadHideFromDebugger
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
PID:1108
-
-
-
C:\Users\Admin\AppData\Local\Temp\IXP001.TMP\3v01f.exeC:\Users\Admin\AppData\Local\Temp\IXP001.TMP\3v01f.exe3⤵
- Identifies VirtualBox via ACPI registry values (likely anti-VM)
- Checks BIOS information in registry
- Executes dropped EXE
- Identifies Wine through registry keys
- Suspicious use of NtSetInformationThreadHideFromDebugger
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
PID:4928
-
-
-
C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\4h983b.exeC:\Users\Admin\AppData\Local\Temp\IXP000.TMP\4h983b.exe2⤵
- Modifies Windows Defender Real-time Protection settings
- Identifies VirtualBox via ACPI registry values (likely anti-VM)
- Checks BIOS information in registry
- Executes dropped EXE
- Identifies Wine through registry keys
- Windows security modification
- Suspicious use of NtSetInformationThreadHideFromDebugger
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:4860
-
Network
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Defense Evasion
Impair Defenses
2Disable or Modify Tools
2Modify Registry
3Virtualization/Sandbox Evasion
2Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1B
MD5cfcd208495d565ef66e7dff9f98764da
SHA1b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
SHA2565feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9
SHA51231bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\yuzka873.default-release\activity-stream.discovery_stream.json
Filesize21KB
MD55ef2c5ee849fca009f972db5ce58b3e0
SHA10afe230a053bf6bc7bc881d86455f4cd1c1c2d99
SHA25629eec573b767c27c08c519a75b3cd5bb0806a57e6d66e0e2f7c01ac5b5a636c7
SHA5121a58193967b5de0905e86a88c60abf36ea6c51bc94501c63a825f5e0fb998ba194d5818b64d5abcde1428f1eb592120e6a6fdb7d74249ea671659b3ecd4388f9
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\yuzka873.default-release\cache2\entries\92F4D5A4F9CED6E2E644D803AEE3647A0EA4D984
Filesize13KB
MD5c774caf0d942fed32d4ea34c6e7296bd
SHA1383ac8345b4dd735aa33f91c01aa84e7b9547842
SHA2567ca7b860588ac2937bf39aded7fd50edb7e96bd1d0752aa94abe53d573e169a8
SHA512440717ab83028ae397562eb31e7cef5ea1cbf7f036da99e3c83e6211e74f26c412d082da06e0efea476c786af0df17730bd7014f97b03983185b533b7beeb590
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\yuzka873.default-release\settings\main\ms-language-packs\browser\newtab\asrouter.ftl
Filesize15KB
MD596c542dec016d9ec1ecc4dddfcbaac66
SHA16199f7648bb744efa58acf7b96fee85d938389e4
SHA2567f32769d6bb4e875f58ceb9e2fbfdc9bd6b82397eca7a4c5230b0786e68f1798
SHA512cda2f159c3565bc636e0523c893b293109de2717142871b1ec78f335c12bad96fc3f62bcf56a1a88abdeed2ac3f3e5e9a008b45e24d713e13c23103acc15e658
-
Filesize
419KB
MD5ec5e3bc0d1d207a45d0f7e27e8f111c7
SHA12de3cb791c7e3aa0826c59b2f85fdb4335d9b84f
SHA2564d0126ee20144c065da90de50807354877e8015c020a99a1d3f7cf3e051b5817
SHA512cb660188329b067b69dc0e7d291b9fe545688c79ce9b0f117a63d0596e6a27f8cd7a1b199abc6f07284077213ac2a42ce0ad18376824fabbdd4437a5e10b5a34
-
Filesize
710KB
MD528e568616a7b792cac1726deb77d9039
SHA139890a418fb391b823ed5084533e2e24dff021e1
SHA2569597798f7789adc29fbe97707b1bd8ca913c4d5861b0ad4fdd6b913af7c7a8e2
SHA51285048799e6d2756f1d6af77f34e6a1f454c48f2f43042927845931b7ecff2e5de45f864627a3d4aa061252401225bbb6c2caa8532320ccbe401e97c9c79ac8e5
-
Filesize
898KB
MD55950611ed70f90b758610609e2aee8e6
SHA1798588341c108850c79da309be33495faf2f3246
SHA2565270c4c6881b7d3ebaea8f51c410bba8689acb67c34f20440527a5f15f3bc1e4
SHA5127e51c458a9a2440c778361eb19f0c13ea4de75b2cf54a5828f6230419fbf52c4702be4f0784e7984367d67fabf038018e264e030e4a4c7dac7ba93e5c1395b80
-
Filesize
384KB
MD5dfd5f78a711fa92337010ecc028470b4
SHA11a389091178f2be8ce486cd860de16263f8e902e
SHA256da96f2eb74e60de791961ef3800c36a5e12202fe97ae5d2fcfc1fe404bc13c0d
SHA512a3673074919039a2dc854b0f91d1e1a69724056594e33559741f53594e0f6e61e3d99ec664d541b17f09ffdebc2de1b042eec19ca8477fac86359c703f8c9656
-
Filesize
2.5MB
MD52a78ce9f3872f5e591d643459cabe476
SHA19ac947dfc71a868bc9c2eb2bd78dfb433067682e
SHA25621a2ac44acd7a640735870eebfd04b8dc57bc66877cb5be3b929299e86a43dae
SHA51203e2cd8161a1394ee535a2ea7d197791ab715d69a02ffab98121ec5ac8150d2b17a9a32a59307042c4bbeffad7425b55efa047651de6ed39277dba80711454f9
-
Filesize
950KB
MD55a30131ff609593aba81d808f59a4a11
SHA11217671bcfd98434f4beac6406e0ae7f1f13c890
SHA256f1b8f480e3d3b92a659b6c87a181a99b17e726c3e138af3f7d0717a8e285a892
SHA512eab7bdaaaa7ac911b3180f6e879eed913356a7675422685d6f1ac71828e8ef53299cbe71644e10a9151a330e1a6ba2c7ed236bada34c02470f801253d305caf3
-
Filesize
1.7MB
MD5fa8bc0aa526b9961adf9260dc7ec9399
SHA1044527ce83eb090a0c1ec2cdaddedc5f5405bf2d
SHA2561722fc2ecb85459ab3e76adc12f5c29d3e3ee2b4b18dd48c5ef0e5d79b77330e
SHA5122f0244f7f3cf90b0dd1e5d04db4e4d443a16e7779bf791dc68ed54f6d734e1d620193967e96ee881b03e5b6ef6a8609efdb890f5345db340d94fe70c2807c31b
-
Filesize
2.7MB
MD5f150e060b781896b4e6e1029ee1f5b74
SHA1ef52c884174df898a956d9a40304e586e2382e2d
SHA2560316ba41b0629155197d29677225f77581c470a5f91aea8dd6a38850cd510516
SHA51240dc0453b3feece1d0ad5ed8de9cfd45465347190c1031791c6a035dc0e74bd842fa21e56b86feebe89892dfbd8bcdbf8d44bc658c0afcfb6deb6d0b5e18c18f
-
Filesize
1.8MB
MD5e72fd16086a8ecf58337b89509435373
SHA18352b01f92cdfa8e5c932513e2ef6363a6a5871c
SHA2561e76927aa56820767353dd841c3f309f91eb10decead250755a984791efad821
SHA5123cb26d20b5138ebcdef1adaea9b8fa0bfc7b56862c3ac5b7500a419a6836e3e2656aab697f6459131b0d8672123411dc60d1e15d7c745aa881580ec5c6d3c841
-
Filesize
2.7MB
MD5e20199222b3f89739498a91c3552ea1b
SHA150a036ee324f182de0f2d6ec32458437f184dd8b
SHA256052b4d43cb4fa7d1185563dbbf011249b7d9499d31a0191ac724404ae27d590e
SHA512f75ae54b75cf676ed3bfa2ecb5b8ed78a8aad2ed2a530453e4474e607ffc4cdd908f9ab49bf49c044a40846d5a924159e5184d06f9e9160333f08e3d49aa2e34
-
Filesize
5.4MB
MD5d4c4e08458e3e61a1cd22665e34c5dd5
SHA1bf4c6a577092d57e0306b051433cebd1c6e69507
SHA2569cf2091983850853d16acb1f1501ef65b39415c19cdb4263c4d1901fa0c2d44f
SHA512dcf5516d5a3913baf03a99ffaca62fee75df5967e992416008686a5e0e2bd1e8eaed118f4ef23e82cac6c2229a884e7b8c96d2aea924ee5501f4ac2ce41ee384
-
Filesize
1.7MB
MD555e004e4ac047f9261b6d743eae2d2bc
SHA1221872c16821c76a8fe37411df5e3d58f2c31061
SHA25649911732f38d682da9361e89023ad01d31d677a3011533b23e8a9ae6a7dfc149
SHA5121bbdaa2e6e4bc633a857b36a4b6e7d8c536cc51bae377233e95383c65f30dd33e213cff51509dc741bb37f6a1841a84ffc9d9e2d33e8f4b5c53fc049772092f0
-
Filesize
3.6MB
MD5839e1cdc4d452391fe614d18bbf3b6be
SHA1eec61886787697827dd7e2b6d3c0ec00f8d7a1b3
SHA256fe8353a44800a24f4e20c8b8a6366aa02b6b18810f19b24a614772f5c47c2577
SHA51288dfa679b4326fac172ee01e293421762a2b80883da31863facafc2b06c47627e218313141f5ac13d9ddfad8ee3f998fe8de1590fd89ac147de09260979a9b5e
-
Filesize
3.0MB
MD5d6759f231670dd66b95e2cf066d7e066
SHA108f13e2e757a55936174d6a596a6d9c8fab41831
SHA256e5634ff64a40c5a9a0291d367ccdbfa25346f8163e4023134240e9b0d61f1292
SHA512eee5f50336e71511cf5380c78c302405e355ac021757dcff08fbdf76a29dd4e0cfd5bba36e74ab7ae0fe63e60adb111b5d6437ed4525d5aa90878088dac842c3
-
Filesize
1.8MB
MD565459feb1022bcad0b400b27b313ea28
SHA18cc63716bc65cdb019928cb47bd99592da70e882
SHA256a062d7022ca168978f7ecaddb50aaf1458773e6d62f7a14cd1b868c5dee1c163
SHA512230ee0b9ccf581e40ba62b8f6161b4fc28a9fc768e818f294b48bbe422529d46d0042e648e63259e347303c83b4d115da760a6a1f396009995f64f7833b48805
-
Filesize
2B
MD581051bcc2cf1bedf378224b0a93e2877
SHA1ba8ab5a0280b953aa97435ff8946cbcbb2755a27
SHA2567eb70257593da06f682a3ddda54a9d260d4fc514f645237f5ca74b08f8da61a6
SHA5121b302a2f1e624a5fb5ad94ddc4e5f8bfd74d26fa37512d0e5face303d8c40eee0d0ffa3649f5da43f439914d128166cb6c4774a7caa3b174d7535451eb697b5d
-
Filesize
33B
MD5fadb1d7b567cf2a274ba3f3dea091bc1
SHA169ae77407b65dbae20e0181037e552a417dc53cf
SHA256d9e13cf7d93064b70f49b5ffebdf9e8ff496f7daa875f6a29591fe8a469cd8a1
SHA512964d566538dab9977da900d5c8e24a7cf1da4b095f4820d2abd8fcd635cca231a82ab428a670b79324350e190c8aa47b97e94b20ab332a5e42dbd6dfbb92ab54
-
Filesize
479KB
MD509372174e83dbbf696ee732fd2e875bb
SHA1ba360186ba650a769f9303f48b7200fb5eaccee1
SHA256c32efac42faf4b9878fb8917c5e71d89ff40de580c4f52f62e11c6cfab55167f
SHA512b667086ed49579592d435df2b486fe30ba1b62ddd169f19e700cd079239747dd3e20058c285fa9c10a533e34f22b5198ed9b1f92ae560a3067f3e3feacc724f1
-
Filesize
13.8MB
MD50a8747a2ac9ac08ae9508f36c6d75692
SHA1b287a96fd6cc12433adb42193dfe06111c38eaf0
SHA25632d544baf2facc893057a1d97db33207e642f0dacf235d8500a0b5eff934ce03
SHA51259521f8c61236641b3299ab460c58c8f5f26fa67e828de853c2cf372f9614d58b9f541aae325b1600ec4f3a47953caacb8122b0dfce7481acfec81045735947d
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yuzka873.default-release\AlternateServices.bin
Filesize6KB
MD5a5df137d2ab42067361bae0b91ff7706
SHA1878bde559e7bf9c53cae774a664541fbd335d3e3
SHA256db81dfd1c021f00caf7283e346713bbcccc08262c4970d5bf478900bbb29627d
SHA512836ba71a97cd80a91149cbd90adee9db1ab7b23db210884abd46f11e09e7eda3cea3ee2b90697753e70ce50afaa95d2f681e4e370bc834d9eb3f8b787148c5b8
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yuzka873.default-release\AlternateServices.bin
Filesize10KB
MD5cd74e40e0d88b92d5f77821dfeaa290e
SHA1782cb63df60fc0480f9bf9e06f825778bc143b83
SHA256d70b6fced66d251414f29bb7a32e599dfe9b27e48c0126e96ed5ec5565d632c1
SHA512f48b0723cf3e74cc470330e5df59da90ae03a048edc62f68352d1dd2b5c5e06a660e530ae2cb7c6c896d922b0436125d1cd05a080cd82ec387918024bb32768e
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yuzka873.default-release\datareporting\glean\db\data.safe.bin
Filesize15KB
MD583da0be354e5a9badc7230a492057f33
SHA157cf9eb3f127568883d9f79bdc3f61b12c0a8956
SHA2566ecb079fa6377023c6562e9d7a983dc64f6b5b3380849ccbdf43fe476ab22fda
SHA512b440377d7b381442d51daf0a7e065cfdf349aeba51e48ef8ddd4aee570b1b2438195b26d2aee247be8723da320e6f055d9db15a90e0715d4c1aa1b42ab1f79e0
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yuzka873.default-release\datareporting\glean\db\data.safe.bin
Filesize14KB
MD55b64f13f4d9e32718f8a69945087d59d
SHA1204c41515bb825066966d26213b0f6c50930a328
SHA25648d9e71151598d5ddcca1abd758d4608ac45bed48b207fd66c45ebcd8514a327
SHA5129fec75f71a5f87364a14bcad614a0618daa76b15517bfc5e2a496e5fe5b85ddcc2eefcddfe6f97324110ca3581b9861e97958874fd8df70719e335cfe442b0ef
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yuzka873.default-release\datareporting\glean\db\data.safe.bin
Filesize15KB
MD5c29b15ffc71b413705e07724fa82c7c0
SHA1065f86bc1cc78535b9966cf09e3a4b8ae2387dda
SHA2563a5b0768a297c1e0a2f595d62a1b88d014b2002ed4a0aa24583579fac357e86b
SHA512af183fe1b9634b7c37776bc3cea5aae9d088ec0347fcfbe8259911a66c166fadd8f6154e2e7f39bc83a4172be021fb4e713100793d10426f4ffa8f66128ba279
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yuzka873.default-release\datareporting\glean\db\data.safe.bin
Filesize23KB
MD5bb1f97890144fe51c60addd712a4e79c
SHA133901a369005b7b558c0e3762dff59861cdcdbdd
SHA2566a51fb2cf894a368e1203d5327828aa8ddff6facac80e58f8a81e5059e4d9f0e
SHA5124968c25da5bfe5c9f2a5328f6ef58fc33a90b390c373e03be357f663629817d3e646d45eae0448433a3008582ee2c59928753ad9a98ad3e78aeed7d5e66d27f5
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yuzka873.default-release\datareporting\glean\db\data.safe.bin
Filesize5KB
MD5d284356ad88aaf18382e801a32ae6d29
SHA115bcb079255ec3afd76bad3c993028bbc8d16ced
SHA256ee8b3fd2d674d250f413705ce1ee8348ed8c12bfb4dea89bbb8b3e647ffc923a
SHA5126f1baff09b9f8912f45529b9ae2d6fa20e8d77a4792920586249f52463d2ed0ad664055a4ecf54b25a428d0329ff0d29bc5927c3717b5183390012771fda63fa
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yuzka873.default-release\datareporting\glean\db\data.safe.tmp
Filesize15KB
MD50b8d81b6674a9971711c185791d76585
SHA1768dc6eb630f6493e6640e7c48d5686939c2cda2
SHA256a16eae461e1fe6243a77874a6f31f8c122084b6c28843e9c271afd9cc6cfd3d1
SHA5121953dfa2013accfdff102206ba9c668470ef8b21c1459f2ea7654f13079c26b9779ffb21b3292e8a5eb29d8a0563c36ef344368fb745ade31f3f6f287b46b5a8
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yuzka873.default-release\datareporting\glean\db\data.safe.tmp
Filesize5KB
MD50d23526dd8c450a4ab911ddaa9120e01
SHA1c208b6e2cdd5d7bbe3ef8b2b9d8d34dc86639d65
SHA256e31b9c16fc60cfedd9637c9b56fa7bf16401a9d9c883e045db0212457174b221
SHA512d60d3bc046b71e334410c2c3988a30a321829a5f1c2243b88ccfa06d9b6dbf9def665bc738c45bb781faa98ac18f907604903ff0150c3250bee930b764ebcc29
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yuzka873.default-release\datareporting\glean\db\data.safe.tmp
Filesize6KB
MD5488c111312e684db8e701aa64f704a61
SHA183f3464e43cb2e976f56263debde1c0c80ab2cb5
SHA256b17bdb029b01c593e6193f5a253127dbe52479ff7948e38ac07bed71d97d55d3
SHA51229589f79c5428ac44602090db06aac895678ede62a90a1cf873666f6c829620c46caa69589e19883bf859adb44e86dd2f7b9fc4d2109f57a566f1cac26d46eff
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yuzka873.default-release\datareporting\glean\db\data.safe.tmp
Filesize6KB
MD5207747be4f9b9b423a4e95d2cc21645c
SHA11b94b61773bcbe92f9e2736d9e34c0e83c9d6732
SHA2569c8b81d9015995bfacdd96926f823cb5fd943bc872d601dc566da3fb9967493b
SHA512b261351723e2546f683533d797f38fb96c54df65494df3f25e6bd7c07155498ce34ed11490eaf97ec670098d0594faea34df6feffa2df2279199daf52df023e8
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yuzka873.default-release\datareporting\glean\db\data.safe.tmp
Filesize6KB
MD5f8c519567eb0b689dc2379234c2a83f1
SHA186702a180c1e38b857098948b77daa0bd580a333
SHA25614f13998c9d360444d02be8f28d0c8323de7515caec27ccf74f62f5be78aa4e6
SHA5129b532fff3429b4305915aebae4bdbbae30379f33f21159e3cf359f8f3c2cd5bc1dbe45099f5e26fcec45a547afbd5272d168c021b694c734ed2a7f9dad0d5851
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yuzka873.default-release\datareporting\glean\pending_pings\12bb7686-4eea-4ad4-ae07-f55d586b60e1
Filesize26KB
MD52a8f3fb15b72bd1062afa86c6b920803
SHA1b58cb8ea0e27c5aa8182356d4d7c4222436b9217
SHA25621c01cfdc31d598d2a9b5e7daf6005dfb3d01307723a0dda88cc19827c77ca49
SHA512be2bef2b722df4409d1387bc70d0085a43cf2ef622921ac65424ad41ef212818dbcf9ddf3c24acfc1c10ff9ef45373500651cab285b6aa91f2762561d27ed198
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yuzka873.default-release\datareporting\glean\pending_pings\2b89c5b1-102e-4c8a-976c-6e49fa95ce68
Filesize671B
MD5c65fed6e33459fb2f6bea6563644b262
SHA19a37aa0bd8257f5fa40800c72061b2a3611b47fd
SHA256370cd79fbbbeae66e49d8c7e5dd46d51fb00283faf50a4337272cf9a76ce0972
SHA5121594170cbe7fc7946114e3d4f387a5b5a479b277493c1fdfcf898747f55c276323185193065a872cc7b128f4952d78bf232af6ef024073a9d5e0ec79dde95eb7
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yuzka873.default-release\datareporting\glean\pending_pings\9b6747be-6ece-4867-97b4-738fd58a158e
Filesize982B
MD5cf0fd48b4ced1666e578e9ab656c24ab
SHA1cacdc23721763db8f42a2bae3ccd928b01c2f9b0
SHA25657e3e1202e250db99ea3f3586ee174d26b29f269b725876d5c27e5d1e5918cda
SHA5123723eb17efa2b3edfe904cc9bffb34f349d8124a4b4503f00ff84890b5e93a3447bb8a7318d9ed2b82184f52e051e16f6be0eb7d3a430586c382237ee0345a1a
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yuzka873.default-release\gmp-gmpopenh264\2.3.2\gmpopenh264.dll
Filesize1.1MB
MD5842039753bf41fa5e11b3a1383061a87
SHA13e8fe1d7b3ad866b06dca6c7ef1e3c50c406e153
SHA256d88dd3bfc4a558bb943f3caa2e376da3942e48a7948763bf9a38f707c2cd0c1c
SHA512d3320f7ac46327b7b974e74320c4d853e569061cb89ca849cd5d1706330aca629abeb4a16435c541900d839f46ff72dfde04128c450f3e1ee63c025470c19157
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yuzka873.default-release\gmp-gmpopenh264\2.3.2\gmpopenh264.info
Filesize116B
MD52a461e9eb87fd1955cea740a3444ee7a
SHA1b10755914c713f5a4677494dbe8a686ed458c3c5
SHA2564107f76ba1d9424555f4e8ea0acef69357dfff89dfa5f0ec72aa4f2d489b17bc
SHA51234f73f7bf69d7674907f190f257516e3956f825e35a2f03d58201a5a630310b45df393f2b39669f9369d1ac990505a4b6849a0d34e8c136e1402143b6cedf2d3
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yuzka873.default-release\gmp-widevinecdm\4.10.2710.0\manifest.json
Filesize372B
MD5bf957ad58b55f64219ab3f793e374316
SHA1a11adc9d7f2c28e04d9b35e23b7616d0527118a1
SHA256bbab6ca07edbed72a966835c7907b3e60c7aa3d48ddea847e5076bd05f4b1eda
SHA51279c179b56e4893fb729b225818ab4b95a50b69666ac41d17aad0b37ab0ca8cd9f0848cbc3c5d9e69e4640a8b261d7ced592eae9bcb0e0b63c05a56e7c477f44e
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yuzka873.default-release\gmp-widevinecdm\4.10.2710.0\widevinecdm.dll
Filesize17.8MB
MD5daf7ef3acccab478aaa7d6dc1c60f865
SHA1f8246162b97ce4a945feced27b6ea114366ff2ad
SHA256bc40c7821dcd3fea9923c6912ab1183a942c11b7690cfd79ed148ded0228777e
SHA5125840a45cfdb12c005e117608b1e5d946e1b2e76443ed39ba940d7f56de4babeab09bee7e64b903eb82bb37624c0a0ef19e9b59fbe2ce2f0e0b1c7a6015a63f75
-
Filesize
12KB
MD519adf7a3ca0f74a944c1c72310a05bd6
SHA144b73fb817bd63f11b872312f39efa91e91e2fc9
SHA256cfeb1c258d5d9cb23929fb3109f2a9c5659425643bc1c014987e6c4ba1ecad9a
SHA512a6e4007eafdc7c28f019e0e264a9d306f6f09ed6c3e5f392b0705577e7a51a9a3ba012eabfe39b644ed6139de4c432a3c6583d52d9d6852b3f45670f05c1a8a2
-
Filesize
10KB
MD56b2278994eec7e8196854a6d302225bb
SHA120a971404ff700287bb626a5c1a78a8a236c0b45
SHA256f80e8d80e6e20144278cd584af6087e086db7af0a6f60d42da83951ef8a381c7
SHA512b4514d0573dd48dada410271aa2a3a62a272f7b8936ee154cd5637b7e3041926eaa0ca6afcf9bce0b7d055ec44ab8c51a2157676aed0993eb06610f4a42fa3d3
-
Filesize
15KB
MD5781c246d34a840e43b2322c2ff6dc304
SHA109bf2c37280f43ad7798eac5a282b7f242ad6bde
SHA2567f8af0527c8a45004db9ee30f0c470d325aa768c00e54506da331c69e2417617
SHA5120b35feb77156f5f1cd7a3034d28c6f537a70fe4d1d253372640e7642f043744f35ef07618dae103d3fd9d19eb8ff05fb4cefe7fd2fcf7703176e540c57125211
-
Filesize
10KB
MD5f84cdc1e312319cd3572c7ff5083ce55
SHA1b012620ff989549864ea4b5d905c0441e524c604
SHA256ccfbdbac89b40d7df5ac57c8cf7d6a414018c83ebb04bfe682498df014545247
SHA512a2fcaf0e3cb662cc5e9f9fed82f755434948807ea76057507361cc28694f818e7e84f488a4cb4f1704a26c1e22982d2c82381fe474478793dfd6278f83bb816b
-
Filesize
10KB
MD51acdc6c439a23ed50caa03765e4d184a
SHA18e84292f752d500a397f4ec64e997b55cf865b2a
SHA256da9e7c990a61d711f1cf6178b24f253c067923c535a9d5724dc17919732d2aac
SHA512915c2bc919af35ca99c066d8708a622412a6596109fca381b878caa54f1122beccaa98f19d391a98f16818e210d841417cbefedc960462df68f4eaeffc1e04fc