hxxp://duckduckgo[.]com

Resubmissions

28-01-2025 02:34

250128-c2rdzstrdy 4

22-01-2025 20:43

250122-zhwwpavrcp 6

22-01-2025 20:37

250122-zd8dxsvpgp 10

Analysis

max time kernel
432s
max time network
432s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
22-01-2025 20:43

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://duckduckgo.com

Score

6^/10

discovery

Malware Config

Signatures

Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs

Web Service

T1102

flow	ioc
93	raw.githubusercontent.com
94	raw.githubusercontent.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Checks SCSI registry key(s) 3 TTPs 9 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\ConfigFlags	dwm.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\HardwareID	dwm.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000	taskmgr.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName	taskmgr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	dwm.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	dwm.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000	dwm.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\HardwareID	dwm.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A	taskmgr.exe

Checks processor information in registry 2 TTPs 8 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe

Enumerates system info in registry 2 TTPs 5 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	dwm.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU	dwm.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies Internet Explorer settings 1 TTPs 4 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000\Software\Microsoft\Internet Explorer\GPU	SearchApp.exe
Key created	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000\SOFTWARE\Microsoft\Internet Explorer\GPU	SearchApp.exe
Key created	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000\Software\Microsoft\Internet Explorer\GPU	SearchApp.exe
Key created	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000\SOFTWARE\Microsoft\Internet Explorer\GPU	SearchApp.exe

Modifies data under HKEY_USERS 18 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\26\52C64B7E	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust	dwm.exe

Modifies registry class 64 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\ohDO1Sgy3MzgdEgEb4WYfDS4ei = "Near"	SearchApp.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\ohDO1Sgy3MzgdEgEb4WYfDS4ei = "%windir%\\System32\\Speech_OneCore\\VoiceActivation\\it-IT\\sidubm.table"	SearchApp.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\ohDO1Sgy3MzgdEgEb4WYfDS4ei = "%windir%\\Speech_OneCore\\Engines\\TTS\\de-DE\\MSTTSLocdeDE.dat"	SearchApp.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\ohDO1Sgy3MzgdEgEb4WYfDS4ei = "Microsoft Mark"	SearchApp.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\ohDO1Sgy3MzgdEgEb4WYfDS4ei = "%windir%\\Speech_OneCore\\Engines\\SR\\es-ES-N\\tn3082.bin"	SearchApp.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\ohDO1Sgy3MzgdEgEb4WYfDS4ei = "%windir%\\Speech_OneCore\\Engines\\SR\\fr-FR-N\\L1036"	SearchApp.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\ohDO1Sgy3MzgdEgEb4WYfDS4ei = "1"	SearchApp.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\ohDO1Sgy3MzgdEgEb4WYfDS4ei = "SR ja-JP Lts Lexicon"	SearchApp.exe
Key created	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\EdpDomStorage\Total	SearchApp.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\DOMStorage\microsoft.windows.search\ = "23"	SearchApp.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\ohDO1Sgy3MzgdEgEb4WYfDS4ei = "436;41c;401;801;c01;1001;1401;1801;1c01;2001;2401;2801;2c01;3001;3401;3801;3c01;4001;42b;42c;82c;42d;423;402;455;403;c04;1004;1404;41a;405;406;465;413;813;809;c09;1009;1409;1809;1c09;2009;2409;2809;2c09;3009;3409;425;438;429;40b;80c;c0c;100c;140c;180c;456;437;807;c07;1007;1407;408;447;40d;439;40e;40f;421;410;810;44b;457;412;812;440;426;427;827;42f;43e;83e;44e;450;414;814;415;416;816;446;418;419;44f;c1a;81a;41b;424;80a;100a;140a;180a;1c0a;200a;240a;280a;2c0a;300a;340a;380a;3c0a;400a;440a;480a;4c0a;500a;430;441;41d;81d;45a;449;444;44a;41e;41f;422;420;820;443;843;42a;540a"	SearchApp.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\ohDO1Sgy3MzgdEgEb4WYfDS4ei = "0"	SearchApp.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\ohDO1Sgy3MzgdEgEb4WYfDS4ei = "Microsoft Mark - English (United States)"	SearchApp.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\ohDO1Sgy3MzgdEgEb4WYfDS4ei = "%windir%\\Speech_OneCore\\Engines\\SR\\en-US-N\\L1033"	SearchApp.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\ohDO1Sgy3MzgdEgEb4WYfDS4ei = "MS-3082-110-WINMO-DNN"	SearchApp.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\ohDO1Sgy3MzgdEgEb4WYfDS4ei = "SR fr-FR Locale Handler"	SearchApp.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\ohDO1Sgy3MzgdEgEb4WYfDS4ei = "%windir%\\Speech_OneCore\\Engines\\SR\\ja-JP-N\\L1041"	SearchApp.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Settings\Cache\Content\CachePrefix	SearchApp.exe
Key created	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\DOMStorage\Total	SearchApp.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\ohDO1Sgy3MzgdEgEb4WYfDS4ei = "6;18;22"	SearchApp.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\ohDO1Sgy3MzgdEgEb4WYfDS4ei = "SR es-ES Lookup Lexicon"	SearchApp.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\ohDO1Sgy3MzgdEgEb4WYfDS4ei = "{A79020BC-1F7E-4D20-AC2A-51D73012DDD5}"	SearchApp.exe
Key created	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings	OpenWith.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\ohDO1Sgy3MzgdEgEb4WYfDS4ei = "SR de-DE Lts Lexicon"	SearchApp.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\ohDO1Sgy3MzgdEgEb4WYfDS4ei = "L1031"	SearchApp.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\ohDO1Sgy3MzgdEgEb4WYfDS4ei = "Adult"	SearchApp.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\ohDO1Sgy3MzgdEgEb4WYfDS4ei = "%windir%\\Speech_OneCore\\Engines\\SR\\fr-FR-N\\r1036sr.lxa"	SearchApp.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\ohDO1Sgy3MzgdEgEb4WYfDS4ei = "Microsoft Stefan"	SearchApp.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\ohDO1Sgy3MzgdEgEb4WYfDS4ei = "You have selected %1 as the default voice."	SearchApp.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\ohDO1Sgy3MzgdEgEb4WYfDS4ei = "Microsoft Speech Recognition Engine - fr-FR Embedded DNN v11.1"	SearchApp.exe
Key created	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\ohDO1Sgy3MzgdEgEb4WYfDS4ei	SearchApp.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\ohDO1Sgy3MzgdEgEb4WYfDS4ei = "{14E74C62-DC97-43B0-8F2F-581496A65D60}"	SearchApp.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\ohDO1Sgy3MzgdEgEb4WYfDS4ei = "%windir%\\System32\\Speech_OneCore\\VoiceActivation\\it-IT\\VoiceActivation_it-IT.dat"	SearchApp.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\DOMStorage\windows.search\Total = "56"	SearchApp.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\ohDO1Sgy3MzgdEgEb4WYfDS4ei = "HKEY_LOCAL_MACHINE/SOFTWARE\\Microsoft\\Speech_OneCore\\AudioOutput\\TokenEnums\\MMAudioOut\\"	SearchApp.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\ohDO1Sgy3MzgdEgEb4WYfDS4ei = "Japanese Phone Converter"	SearchApp.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\ohDO1Sgy3MzgdEgEb4WYfDS4ei = "Male"	SearchApp.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\ohDO1Sgy3MzgdEgEb4WYfDS4ei = "SR it-IT Lookup Lexicon"	SearchApp.exe
Key created	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\DOMStorage\Total	SearchApp.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\ohDO1Sgy3MzgdEgEb4WYfDS4ei = "{2984A9DB-5689-43AD-877D-14999A15DD46}"	SearchApp.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\ohDO1Sgy3MzgdEgEb4WYfDS4ei = "11.0.2013.1022"	SearchApp.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\ohDO1Sgy3MzgdEgEb4WYfDS4ei = "Microsoft Speech HW Voice Activation - English (United States)"	SearchApp.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\ohDO1Sgy3MzgdEgEb4WYfDS4ei = "È stata selezionata la voce predefinita %1."	SearchApp.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\ohDO1Sgy3MzgdEgEb4WYfDS4ei = "%windir%\\System32\\Speech_OneCore\\VoiceActivation\\de-DE\\sidubm.table"	SearchApp.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\ohDO1Sgy3MzgdEgEb4WYfDS4ei = "5223743"	SearchApp.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\ohDO1Sgy3MzgdEgEb4WYfDS4ei = "Microsoft Helena - Spanish (Spain)"	SearchApp.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\ohDO1Sgy3MzgdEgEb4WYfDS4ei = "410"	SearchApp.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\ohDO1Sgy3MzgdEgEb4WYfDS4ei = "Microsoft Speech SW Voice Activation - Italian (Italy)"	SearchApp.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\ohDO1Sgy3MzgdEgEb4WYfDS4ei = "404"	SearchApp.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\ohDO1Sgy3MzgdEgEb4WYfDS4ei = "%windir%\\Speech_OneCore\\Engines\\SR\\en-US-N\\lsr1033.lxa"	SearchApp.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\ohDO1Sgy3MzgdEgEb4WYfDS4ei = "%windir%\\Speech_OneCore\\Engines\\TTS\\ja-JP\\M1041Ayumi"	SearchApp.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\DOMStorage\Total\ = "152"	SearchApp.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\ohDO1Sgy3MzgdEgEb4WYfDS4ei = "Universal Phone Converter"	SearchApp.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\ohDO1Sgy3MzgdEgEb4WYfDS4ei = "Microsoft Speech Recognition Engine - de-DE Embedded DNN v11.1"	SearchApp.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\ohDO1Sgy3MzgdEgEb4WYfDS4ei = "%windir%\\Speech_OneCore\\Engines\\TTS\\de-DE\\M1031Stefan"	SearchApp.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\ohDO1Sgy3MzgdEgEb4WYfDS4ei = "%windir%\\Speech_OneCore\\Engines\\SR\\fr-FR-N\\c1036.fe"	SearchApp.exe
Key created	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\EdpDomStorage\microsoft.windows.search	SearchApp.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\ohDO1Sgy3MzgdEgEb4WYfDS4ei = "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Speech_OneCore\\CortanaVoices\\Tokens\\MSTTS_V110_enUS_EvaM"	SearchApp.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\ohDO1Sgy3MzgdEgEb4WYfDS4ei = "5233694"	SearchApp.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\ohDO1Sgy3MzgdEgEb4WYfDS4ei = "%windir%\\Speech_OneCore\\Engines\\SR\\de-DE-N\\L1031"	SearchApp.exe
Key created	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\EdpDomStorage	SearchApp.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\ohDO1Sgy3MzgdEgEb4WYfDS4ei = "%windir%\\Speech_OneCore\\Engines\\SR\\it-IT-N\\c1040.fe"	SearchApp.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\ohDO1Sgy3MzgdEgEb4WYfDS4ei = "%windir%\\Speech_OneCore\\Engines\\TTS\\it-IT\\MSTTSLocitIT.dat"	SearchApp.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\ohDO1Sgy3MzgdEgEb4WYfDS4ei = "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Speech_OneCore\\Recognizers\\Tokens\\MS-1033-110-WINMO-DNN"	SearchApp.exe

NTFS ADS 2 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\Unconfirmed 68425.crdownload:SmartScreen	msedge.exe
File opened for modification	C:\Users\Admin\Downloads\Unconfirmed 640869.crdownload:SmartScreen	msedge.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
4920	msedge.exe
4920	msedge.exe
5068	msedge.exe
5068	msedge.exe
4200	identity_helper.exe
4200	identity_helper.exe
1240	msedge.exe
1240	msedge.exe
3964	msedge.exe
3964	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
2456	msedge.exe
2456	msedge.exe
3608	msedge.exe
3608	msedge.exe
2404	msedge.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe

Suspicious behavior: GetForegroundWindowSpam 2 IoCs

pid	Process
5552	firefox.exe
4880	taskmgr.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe

Suspicious use of AdjustPrivilegeToken 13 IoCs

description	pid	Process
Token: SeRestorePrivilege	3916	7zG.exe
Token: 35	3916	7zG.exe
Token: SeSecurityPrivilege	3916	7zG.exe
Token: SeSecurityPrivilege	3916	7zG.exe
Token: SeDebugPrivilege	4880	taskmgr.exe
Token: SeSystemProfilePrivilege	4880	taskmgr.exe
Token: SeCreateGlobalPrivilege	4880	taskmgr.exe
Token: SeDebugPrivilege	5552	firefox.exe
Token: SeDebugPrivilege	5552	firefox.exe
Token: SeCreateGlobalPrivilege	7228	dwm.exe
Token: SeChangeNotifyPrivilege	7228	dwm.exe
Token: 33	7228	dwm.exe
Token: SeIncBasePriorityPrivilege	7228	dwm.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
3916	7zG.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
5068	msedge.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe
4880	taskmgr.exe

Suspicious use of SetWindowsHookEx 21 IoCs

pid	Process
2184	OpenWith.exe
2184	OpenWith.exe
2184	OpenWith.exe
2184	OpenWith.exe
2184	OpenWith.exe
2184	OpenWith.exe
2184	OpenWith.exe
2184	OpenWith.exe
2184	OpenWith.exe
2184	OpenWith.exe
2184	OpenWith.exe
2184	OpenWith.exe
2184	OpenWith.exe
2184	OpenWith.exe
2184	OpenWith.exe
2184	OpenWith.exe
2184	OpenWith.exe
1868	SearchApp.exe
3392	SearchApp.exe
5552	firefox.exe
2820	StartMenuExperienceHost.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5068 wrote to memory of 2404	5068	msedge.exe	82
PID 5068 wrote to memory of 2404	5068	msedge.exe	82
PID 5068 wrote to memory of 2384	5068	msedge.exe	83
PID 5068 wrote to memory of 2384	5068	msedge.exe	83
PID 5068 wrote to memory of 2384	5068	msedge.exe	83
PID 5068 wrote to memory of 2384	5068	msedge.exe	83
PID 5068 wrote to memory of 2384	5068	msedge.exe	83
PID 5068 wrote to memory of 2384	5068	msedge.exe	83
PID 5068 wrote to memory of 2384	5068	msedge.exe	83
PID 5068 wrote to memory of 2384	5068	msedge.exe	83
PID 5068 wrote to memory of 2384	5068	msedge.exe	83
PID 5068 wrote to memory of 2384	5068	msedge.exe	83
PID 5068 wrote to memory of 2384	5068	msedge.exe	83
PID 5068 wrote to memory of 2384	5068	msedge.exe	83
PID 5068 wrote to memory of 2384	5068	msedge.exe	83
PID 5068 wrote to memory of 2384	5068	msedge.exe	83
PID 5068 wrote to memory of 2384	5068	msedge.exe	83
PID 5068 wrote to memory of 2384	5068	msedge.exe	83
PID 5068 wrote to memory of 2384	5068	msedge.exe	83
PID 5068 wrote to memory of 2384	5068	msedge.exe	83
PID 5068 wrote to memory of 2384	5068	msedge.exe	83
PID 5068 wrote to memory of 2384	5068	msedge.exe	83
PID 5068 wrote to memory of 2384	5068	msedge.exe	83
PID 5068 wrote to memory of 2384	5068	msedge.exe	83
PID 5068 wrote to memory of 2384	5068	msedge.exe	83
PID 5068 wrote to memory of 2384	5068	msedge.exe	83
PID 5068 wrote to memory of 2384	5068	msedge.exe	83
PID 5068 wrote to memory of 2384	5068	msedge.exe	83
PID 5068 wrote to memory of 2384	5068	msedge.exe	83
PID 5068 wrote to memory of 2384	5068	msedge.exe	83
PID 5068 wrote to memory of 2384	5068	msedge.exe	83
PID 5068 wrote to memory of 2384	5068	msedge.exe	83
PID 5068 wrote to memory of 2384	5068	msedge.exe	83
PID 5068 wrote to memory of 2384	5068	msedge.exe	83
PID 5068 wrote to memory of 2384	5068	msedge.exe	83
PID 5068 wrote to memory of 2384	5068	msedge.exe	83
PID 5068 wrote to memory of 2384	5068	msedge.exe	83
PID 5068 wrote to memory of 2384	5068	msedge.exe	83
PID 5068 wrote to memory of 2384	5068	msedge.exe	83
PID 5068 wrote to memory of 2384	5068	msedge.exe	83
PID 5068 wrote to memory of 2384	5068	msedge.exe	83
PID 5068 wrote to memory of 2384	5068	msedge.exe	83
PID 5068 wrote to memory of 4920	5068	msedge.exe	84
PID 5068 wrote to memory of 4920	5068	msedge.exe	84
PID 5068 wrote to memory of 4560	5068	msedge.exe	85
PID 5068 wrote to memory of 4560	5068	msedge.exe	85
PID 5068 wrote to memory of 4560	5068	msedge.exe	85
PID 5068 wrote to memory of 4560	5068	msedge.exe	85
PID 5068 wrote to memory of 4560	5068	msedge.exe	85
PID 5068 wrote to memory of 4560	5068	msedge.exe	85
PID 5068 wrote to memory of 4560	5068	msedge.exe	85
PID 5068 wrote to memory of 4560	5068	msedge.exe	85
PID 5068 wrote to memory of 4560	5068	msedge.exe	85
PID 5068 wrote to memory of 4560	5068	msedge.exe	85
PID 5068 wrote to memory of 4560	5068	msedge.exe	85
PID 5068 wrote to memory of 4560	5068	msedge.exe	85
PID 5068 wrote to memory of 4560	5068	msedge.exe	85
PID 5068 wrote to memory of 4560	5068	msedge.exe	85
PID 5068 wrote to memory of 4560	5068	msedge.exe	85
PID 5068 wrote to memory of 4560	5068	msedge.exe	85
PID 5068 wrote to memory of 4560	5068	msedge.exe	85
PID 5068 wrote to memory of 4560	5068	msedge.exe	85
PID 5068 wrote to memory of 4560	5068	msedge.exe	85
PID 5068 wrote to memory of 4560	5068	msedge.exe	85

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument http://duckduckgo.com
1⤵
- Enumerates system info in registry
- NTFS ADS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff911c046f8,0x7ff911c04708,0x7ff911c04718
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2160,8105201348950602368,3628545258557502454,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2172 /prefetch:2
  2⤵
  PID:2384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2160,8105201348950602368,3628545258557502454,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2224 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2160,8105201348950602368,3628545258557502454,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2852 /prefetch:8
  2⤵
  PID:4560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,8105201348950602368,3628545258557502454,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3232 /prefetch:1
  2⤵
  PID:4176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,8105201348950602368,3628545258557502454,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:2760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,8105201348950602368,3628545258557502454,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4576 /prefetch:1
  2⤵
  PID:4812
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2160,8105201348950602368,3628545258557502454,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4896 /prefetch:8
  2⤵
  PID:1008
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2160,8105201348950602368,3628545258557502454,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4896 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=2160,8105201348950602368,3628545258557502454,131072 --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5628 /prefetch:8
  2⤵
  PID:3196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,8105201348950602368,3628545258557502454,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5456 /prefetch:1
  2⤵
  PID:4848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,8105201348950602368,3628545258557502454,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5016 /prefetch:1
  2⤵
  PID:1648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,8105201348950602368,3628545258557502454,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3288 /prefetch:1
  2⤵
  PID:1744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,8105201348950602368,3628545258557502454,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5600 /prefetch:1
  2⤵
  PID:2780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,8105201348950602368,3628545258557502454,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5620 /prefetch:1
  2⤵
  PID:3460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2160,8105201348950602368,3628545258557502454,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=5768 /prefetch:8
  2⤵
  PID:964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,8105201348950602368,3628545258557502454,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4740 /prefetch:1
  2⤵
  PID:4252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2160,8105201348950602368,3628545258557502454,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6152 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1240
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\Downloads\folder_flooder.bat" "
  2⤵
  PID:1744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,8105201348950602368,3628545258557502454,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3316 /prefetch:1
  2⤵
  PID:4316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2160,8105201348950602368,3628545258557502454,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5716 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2160,8105201348950602368,3628545258557502454,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5616 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,8105201348950602368,3628545258557502454,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3168 /prefetch:1
  2⤵
  PID:4912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2160,8105201348950602368,3628545258557502454,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5516 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,8105201348950602368,3628545258557502454,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6324 /prefetch:1
  2⤵
  PID:832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2160,8105201348950602368,3628545258557502454,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3344 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3608
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\Downloads\cpu_eater.bat" "
  2⤵
  PID:3612
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
    3⤵
    PID:4876
  - - C:\Windows\system32\cmd.exe
      C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
      4⤵
      PID:4544
    - - C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        5⤵
        
        PID:2184
      - C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        6⤵
        
        PID:4376
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        7⤵
        
        PID:2640
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        8⤵
        
        PID:6404
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:10172
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:14912
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:14928
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:5848
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:15024
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:9904
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:11104
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:10188
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:15104
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:13084
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:14352
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:11896
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:7248
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:15116
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        8⤵
        
        PID:6412
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:7560
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:9180
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:10252
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:10260
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:9224
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:8008
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:11484
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:11596
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        7⤵
        
        PID:1388
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        8⤵
        
        PID:6072
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:7380
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:11556
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:12072
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:7396
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:9568
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:10360
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        8⤵
        
        PID:6320
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:7364
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:11908
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:11916
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:7768
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:12668
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:10988
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:12696
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:11800
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:13044
      - C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        6⤵
        
        PID:2940
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        7⤵
        
        PID:6736
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        8⤵
        
        PID:7752
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:12720
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:11092
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:13100
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:9184
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:6892
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:12340
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:8792
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:7656
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:9104
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:12736
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:9024
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:13792
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        8⤵
        
        PID:7760
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:13460
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:12384
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:13208
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:14080
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        7⤵
        
        PID:6832
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        8⤵
        
        PID:11420
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        8⤵
        
        PID:11944
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:13796
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:12064
    - - C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        5⤵
        
        PID:3484
      - C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        6⤵
        
        PID:392
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        7⤵
        
        PID:5328
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        8⤵
        
        PID:7524
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:9344
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:10068
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        8⤵
        
        PID:7976
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:9960
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:11888
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:6464
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:6524
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:11232
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:13040
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:12716
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:10112
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        7⤵
        
        PID:5340
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        8⤵
        
        PID:8124
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:10956
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:11144
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:12704
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:11476
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:13764
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:11812
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        8⤵
        
        PID:8600
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:13556
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:14260
      - C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        6⤵
        
        PID:3924
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        7⤵
        
        PID:2908
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        8⤵
        
        PID:5108
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:6124
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:7068
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:11460
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:12036
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:7084
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:9528
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:12608
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:12516
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        14⤵
        
        PID:10864
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        14⤵
        
        PID:7344
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:10356
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:12624
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:9552
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:6436
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:8968
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:13492
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:11108
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:14044
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:13112
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:14932
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:14112
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:9388
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        8⤵
        
        PID:2408
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:6084
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:7356
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:12540
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:14872
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:14888
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:12552
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:7372
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:10008
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:10144
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:14940
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:15012
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:6348
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:8920
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:13524
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:14144
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:8956
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:13452
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:14072
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        7⤵
        
        PID:1984
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        8⤵
        
        PID:2144
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:5220
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:6584
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:6924
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:8176
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:10528
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:10876
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:8204
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:10376
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:10692
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:7256
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:10684
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:10948
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:6592
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:9480
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:10344
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:5364
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:6876
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:10208
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:8584
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:7204
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:10392
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:10712
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        8⤵
        
        PID:4660
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:6040
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:8140
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:13652
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:14360
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:8156
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:13620
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:14640
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:14960
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:14656
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:12812
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:14212
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:14324
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:6048
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:9756
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:9796
  - - C:\Windows\system32\cmd.exe
      C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
      4⤵
      PID:4464
    - - C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        5⤵
        
        PID:3916
      - C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        6⤵
        
        PID:3332
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        7⤵
        
        PID:3152
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        8⤵
        
        PID:1520
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:5164
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:8056
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:9448
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:10336
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:8072
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:11444
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:11972
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:5172
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:7608
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:11500
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:15228
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:9924
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:12120
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:15220
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:12928
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        14⤵
        
        PID:15192
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        14⤵
        
        PID:13612
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:12400
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:15300
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:7636
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:13284
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:13928
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        8⤵
        
        PID:2956
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:5288
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:6512
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:8712
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:13420
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:14220
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:9144
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:11820
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:11836
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:6772
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:9044
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:11452
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:14592
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        14⤵
        
        PID:8992
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        15⤵
        
        PID:14320
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        15⤵
        
        PID:13616
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:14600
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:12012
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:9772
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:5504
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:6688
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:11828
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:11844
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:11120
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:9228
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:6700
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:9440
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:13628
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:14332
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:10328
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        7⤵
        
        PID:2476
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        8⤵
        
        PID:5184
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:6224
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:7532
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:11508
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:14728
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:14736
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:12128
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:15196
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:15252
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:12312
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:13184
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        14⤵
        
        PID:13836
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:7540
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:8044
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:11428
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:11956
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:13056
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:14752
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:8064
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:10744
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:10992
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:6248
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:9732
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:9748
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        8⤵
        
        PID:5196
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:6356
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:9672
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:10412
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:6672
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:7424
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:10016
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:10152
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:7436
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:11860
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:11876
      - C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        6⤵
        
        PID:4652
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        7⤵
        
        PID:356
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        8⤵
        
        PID:3748
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:7112
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:10200
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:8548
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:7120
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:11680
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:15244
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:7964
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:9608
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:13404
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:14248
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:15276
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:12444
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        8⤵
        
        PID:4324
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:5528
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:8116
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:13588
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:14292
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:8620
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:13580
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:12488
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:11400
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:14284
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:12808
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:11484
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:5536
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:7728
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:12728
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:12476
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:13140
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        14⤵
        
        PID:14904
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        14⤵
        
        PID:8476
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:12072
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:11760
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:12748
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:8268
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:13508
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:14128
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        7⤵
        
        PID:3184
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        8⤵
        
        PID:400
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:5264
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:6292
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:8984
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:13516
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:14136
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:11432
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:12348
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:9012
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:13444
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:14064
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:6312
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:8300
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:13300
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:14188
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:8964
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:7308
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:8396
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:13344
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:13936
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:5412
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:8416
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:12816
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:13360
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:8428
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:13320
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:9392
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:12512
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:9824
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:10152
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:13872
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        8⤵
        
        PID:4328
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:6916
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:9004
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:9740
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:10432
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:9648
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:6932
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:9968
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:14784
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:14848
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:10120
    - - C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        5⤵
        
        PID:2732
      - C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        6⤵
        
        PID:4632
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        7⤵
        
        PID:4940
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        8⤵
        
        PID:3912
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:6388
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:11852
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:11868
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:15004
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:15180
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:9988
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:14676
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:10380
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:12256
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:14776
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:12948
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:6396
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:7996
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:9928
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:10088
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:14024
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:10440
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        14⤵
        
        PID:10492
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:10384
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:14032
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:14208
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:11920
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        14⤵
        
        PID:10696
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        14⤵
        
        PID:11360
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:8016
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:9504
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:13684
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:14384
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:9520
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:12052
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:12060
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        8⤵
        
        PID:1612
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:5488
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:6232
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:9408
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:13484
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:13388
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:11124
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        14⤵
        
        PID:10208
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        14⤵
        
        PID:10876
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:14104
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:10296
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:6240
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:7552
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:9600
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:9624
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:7984
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:9716
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:10752
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:5496
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:6164
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:9576
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:9592
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:6172
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:11532
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:14996
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:14304
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        14⤵
        
        PID:8168
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:14616
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:12104
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:15172
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:12172
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        7⤵
        
        PID:4448
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        8⤵
        
        PID:2244
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:5304
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:6812
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:10736
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:10984
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:7624
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:13276
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:14164
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:5312
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:5704
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:6132
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:9100
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:9108
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:13660
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        14⤵
        
        PID:14648
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        15⤵
        
        PID:7508
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        14⤵
        
        PID:13384
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:14368
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:6140
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:9308
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:9316
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:5716
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:9076
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:9092
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        8⤵
        
        PID:388
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:5556
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:7696
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:8232
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:10288
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:10312
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:8240
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:9020
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:9028
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:7716
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:13336
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:13864
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:5568
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:9360
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:10164
      - C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        6⤵
        
        PID:3656
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        7⤵
        
        PID:4044
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        8⤵
        
        PID:1084
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:5780
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:9780
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:9788
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:5788
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:7932
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:13668
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:14376
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:7520
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:8588
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:13724
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:13652
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:7940
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:13676
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        8⤵
        
        PID:2452
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:5624
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:7828
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:11404
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:11932
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:15268
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:10216
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:11556
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:15292
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:8348
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:13260
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:14156
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:9372
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:7904
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:5796
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:7960
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:9656
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:9680
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:7968
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:9536
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:10352
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        7⤵
        
        PID:3636
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        8⤵
        
        PID:5256
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:6060
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:8940
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:13476
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:13776
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:12360
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:14468
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:9660
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:14088
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:13008
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:13120
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:8948
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:12004
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:12020
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:6300
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:7784
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:9428
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:13572
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:12372
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:10692
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:14276
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:10320
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:7800
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:9036
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:11988
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:12784
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:9764
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        8⤵
        
        PID:5272
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:6652
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:8292
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:13308
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:13880
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:8312
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:12508
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:12532
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:10340
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:6660
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:8252
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:13696
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:14392
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:11180
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:8200
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:8260
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:13436
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:14056
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:14372
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:8668
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
    3⤵
    PID:1584
  - - C:\Windows\system32\cmd.exe
      C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
      4⤵
      PID:4348
    - - C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        5⤵
        
        PID:3180
      - C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        6⤵
        
        PID:2260
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        7⤵
        
        PID:316
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        8⤵
        
        PID:5348
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:9808
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:10448
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        8⤵
        
        PID:5356
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:7404
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:9328
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:10044
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:7416
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:9804
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:10440
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        7⤵
        
        PID:4792
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        8⤵
        
        PID:5228
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:5936
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:9336
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:10056
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:5948
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:7508
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:9908
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:10104
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:7516
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:9920
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:10536
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        8⤵
        
        PID:5236
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:7652
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:10484
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:10852
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:7672
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:8696
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:13548
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:14252
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:8928
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:13596
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:11408
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:11884
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:14300
      - C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        6⤵
        
        PID:420
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        7⤵
        
        PID:3352
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        8⤵
        
        PID:5464
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:6332
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:8320
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:11980
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:14904
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:14920
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:12776
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:8404
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:13328
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:13888
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:6620
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:9352
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:10080
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        8⤵
        
        PID:5668
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:6824
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:11540
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:14700
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:14788
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:14720
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:12152
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:15236
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:11704
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:6844
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:7584
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:13644
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:14352
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:7600
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:8096
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:9400
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:10280
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:8104
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:9472
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:9512
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:12580
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        14⤵
        
        PID:11780
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        14⤵
        
        PID:11784
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:12596
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        14⤵
        
        PID:12560
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        14⤵
        
        PID:9492
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        15⤵
        
        PID:13176
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        15⤵
        
        PID:11464
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        7⤵
        
        PID:2052
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        8⤵
        
        PID:344
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:6008
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:9584
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:10368
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:6016
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:6600
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:9700
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:10424
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:6608
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:6968
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:11900
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:15132
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:15148
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:12760
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:14744
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:12664
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:6984
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:11572
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:11616
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        8⤵
        
        PID:5024
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:6340
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:8224
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:13428
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:14228
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:9136
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:11812
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:12616
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:6636
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:11580
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:12080
    - - C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        5⤵
        
        PID:3632
      - C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        6⤵
        
        PID:4416
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        7⤵
        
        PID:2748
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        8⤵
        
        PID:3800
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:6180
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:7900
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:10616
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:10900
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:7908
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:9232
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:14860
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:9944
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:6264
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:7192
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:10216
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:8560
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:7212
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:9188
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:11996
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:14760
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:14772
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:12792
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:9208
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:12768
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:13228
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        8⤵
        
        PID:2608
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:5388
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:6420
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:9708
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:9724
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:6428
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:8704
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:13540
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:14244
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:8720
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:13604
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:13096
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:12036
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:14308
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:5396
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:5592
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:5920
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:7148
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:9456
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        14⤵
        
        PID:13500
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        14⤵
        
        PID:14120
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:9464
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:7156
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:9240
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:9952
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:6152
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:9052
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:13612
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:14316
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:9060
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:13468
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        14⤵
        
        PID:14608
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        15⤵
        
        PID:13000
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        16⤵
        
        PID:14316
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        16⤵
        
        PID:8464
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        15⤵
        
        PID:12920
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        14⤵
        
        PID:14624
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        15⤵
        
        PID:9360
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        15⤵
        
        PID:11404
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:14096
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:5600
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:7616
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:9544
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:9560
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:7632
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:9664
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:9688
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        7⤵
        
        PID:840
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        8⤵
        
        PID:5892
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:7776
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:9900
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:10520
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:8276
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:12028
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:12044
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        8⤵
        
        PID:6092
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:7808
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:9264
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:10024
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:7816
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:11396
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:11924
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:15212
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:15260
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:10364
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:8844
      - C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        6⤵
        
        PID:1268
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        7⤵
        
        PID:4656
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        8⤵
        
        PID:4916
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:6024
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:9248
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:12800
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:14880
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:14896
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:13252
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:9992
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:6272
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:6896
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:7232
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:10384
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:10704
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:9312
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:13160
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:7244
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:10492
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:10860
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:6904
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:10224
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:8576
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        8⤵
        
        PID:1572
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:2304
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:5928
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:7452
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:11548
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:12160
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:15124
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        14⤵
        
        PID:7780
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        14⤵
        
        PID:7116
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:9680
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:7460
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:13268
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:13904
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:6188
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:7092
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:11412
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:11940
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:11160
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:11248
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:7100
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:13236
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:13920
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:1432
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:5444
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:9616
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:9636
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:5456
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:7468
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:12808
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:13352
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:7480
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:12656
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:12688
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:14840
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        14⤵
        
        PID:11412
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        14⤵
        
        PID:10376
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:14856
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        7⤵
        
        PID:2612
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        8⤵
        
        PID:5140
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:5644
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:6520
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:9256
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:10000
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:6528
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:7892
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:11380
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:11892
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:8380
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:13532
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:14236
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:5656
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:7736
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:13212
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:13712
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:12568
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:9364
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:13032
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:10952
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:7744
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:12632
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:10452
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:11792
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:12644
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:14632
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:14664
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        8⤵
        
        PID:5148
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:6372
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:6840
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:7176
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:13636
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:14344
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:7184
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:9976
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:10128
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:6868
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:11492
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:15284
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:6908
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:12336
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:15308
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:13088
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        14⤵
        
        PID:8232
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:13004
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        14⤵
        
        PID:12316
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        14⤵
        
        PID:15144
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:12096
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:6380
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:9984
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:10136
  - - C:\Windows\system32\cmd.exe
      C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
      4⤵
      PID:4424
    - - C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        5⤵
        
        PID:4952
      - C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        6⤵
        
        PID:4444
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        7⤵
        
        PID:612
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        8⤵
        
        PID:5404
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:7268
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:11588
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:12824
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:7280
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:11468
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:11644
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:12604
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:11604
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:12284
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:15188
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:12204
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:12304
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:11152
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:11284
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        8⤵
        
        PID:5420
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:9068
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:12088
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:12112
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:9084
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        7⤵
        
        PID:4280
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        8⤵
        
        PID:5736
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:9824
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:9836
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        8⤵
        
        PID:5744
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:6492
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:9116
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:10624
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:10908
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:9124
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:6500
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:9420
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:13564
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:14268
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:10304
      - C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        6⤵
        
        PID:2780
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        7⤵
        
        PID:1364
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        8⤵
        
        PID:5976
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:7132
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:11524
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:15084
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:15096
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:12136
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:14672
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:14688
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:7492
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:11516
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:12144
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:15164
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:15200
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        8⤵
        
        PID:5984
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:7500
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:11436
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:11964
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:7948
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:13244
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:13912
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        7⤵
        
        PID:5104
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        8⤵
        
        PID:5472
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:6948
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:11564
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:15140
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:15156
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:9308
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:12832
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:11724
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:10948
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:10528
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:14668
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:10852
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:13076
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:9344
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:9472
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:7388
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:7844
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:11388
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:11884
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:7856
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:12676
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:14780
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:14832
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:12828
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        13⤵
        
        PID:10284
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:12708
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:12640
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        12⤵
        
        PID:11816
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        8⤵
        
        PID:5480
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:8032
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:9488
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:9496
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:13220
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        11⤵
        
        PID:13720
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        9⤵
        
        PID:8488
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:13292
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        10⤵
        
        PID:13896
    - - C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\Admin\Downloads\cpu_eater.bat""
        5⤵
        
        PID:996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2160,8105201348950602368,3628545258557502454,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2364 /prefetch:2
  2⤵
  PID:15084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2160,8105201348950602368,3628545258557502454,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2188 /prefetch:2
  2⤵
  PID:12380

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2104

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1184

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:3012

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:2184

C:\Program Files\7-Zip\7zG.exe
"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Downloads\zip_bomb_42\" -ad -an -ai#7zMap592:84:7zEvent28672
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:3916

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:10748

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:7228

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3528

C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
"C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
1⤵
- Modifies Internet Explorer settings
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:1868

C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
"C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
1⤵
- Modifies Internet Explorer settings
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:3392

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1576

C:\Windows\system32\taskmgr.exe
"C:\Windows\system32\taskmgr.exe" /7
1⤵
- Checks SCSI registry key(s)
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SendNotifyMessage
PID:4880

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
PID:5564
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Checks processor information in registry
  - Suspicious behavior: GetForegroundWindowSpam
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of SetWindowsHookEx
  PID:5552
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2036 -parentBuildID 20240401114208 -prefsHandle 1952 -prefMapHandle 1944 -prefsLen 23680 -prefMapSize 244658 -appDir "C:\Program Files\Mozilla Firefox\browser" - {951e750d-acdd-4bcd-8019-69d0383adfa8} 5552 "\\.\pipe\gecko-crash-server-pipe.5552" gpu
    3⤵
    PID:5884
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2444 -parentBuildID 20240401114208 -prefsHandle 2436 -prefMapHandle 2424 -prefsLen 23716 -prefMapSize 244658 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {cc4970d5-20fd-407d-85b5-6a4a86528a70} 5552 "\\.\pipe\gecko-crash-server-pipe.5552" socket
    3⤵
    PID:6080
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3008 -childID 1 -isForBrowser -prefsHandle 2812 -prefMapHandle 3068 -prefsLen 23857 -prefMapSize 244658 -jsInitHandle 1288 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {d86027e2-7d63-49d9-b53a-1869e9b7c85b} 5552 "\\.\pipe\gecko-crash-server-pipe.5552" tab
    3⤵
    PID:6644
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4108 -childID 2 -isForBrowser -prefsHandle 4100 -prefMapHandle 4092 -prefsLen 29090 -prefMapSize 244658 -jsInitHandle 1288 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {1120b87d-a899-4530-976b-a82af383e350} 5552 "\\.\pipe\gecko-crash-server-pipe.5552" tab
    3⤵
    PID:7868
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5044 -parentBuildID 20240401114208 -sandboxingKind 0 -prefsHandle 4876 -prefMapHandle 4872 -prefsLen 29090 -prefMapSize 244658 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {60acec29-20bb-4dfc-96aa-c01bae9a427f} 5552 "\\.\pipe\gecko-crash-server-pipe.5552" utility
    3⤵
    - Checks processor information in registry
    PID:9160
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5400 -childID 3 -isForBrowser -prefsHandle 5420 -prefMapHandle 5424 -prefsLen 27144 -prefMapSize 244658 -jsInitHandle 1288 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {07426656-02e6-4ffc-9172-e5273884ddc5} 5552 "\\.\pipe\gecko-crash-server-pipe.5552" tab
    3⤵
    PID:12264
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5652 -childID 4 -isForBrowser -prefsHandle 5572 -prefMapHandle 5580 -prefsLen 27144 -prefMapSize 244658 -jsInitHandle 1288 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {633bfce8-5739-4a1a-9720-08125fca098f} 5552 "\\.\pipe\gecko-crash-server-pipe.5552" tab
    3⤵
    PID:12980
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5784 -childID 5 -isForBrowser -prefsHandle 5552 -prefMapHandle 5556 -prefsLen 27144 -prefMapSize 244658 -jsInitHandle 1288 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {5368a108-d3c3-4400-a103-f7b74a851f2b} 5552 "\\.\pipe\gecko-crash-server-pipe.5552" tab
    3⤵
    PID:13060
- - C:\Program Files\Mozilla Firefox\minidump-analyzer.exe
    "C:\Program Files\Mozilla Firefox\minidump-analyzer.exe" "C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Crash Reports\pending\0e3b270d-04a3-44e8-954c-26ae73aeadd8.dmp"
    3⤵
    PID:4920

C:\Windows\system32\dwm.exe
"dwm.exe"
1⤵
- Checks SCSI registry key(s)
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious use of AdjustPrivilegeToken
PID:7228

C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
"C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
1⤵
- Suspicious use of SetWindowsHookEx
PID:2820

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
fab8d8d865e33fe195732aa7dcb91c30

SHA1
2637e832f38acc70af3e511f5eba80fbd7461f2c

SHA256
1b034ffe38e534e2b7a21be7c1f207ff84a1d5f3893207d0b4bb1a509b4185ea

SHA512
39a3d43ef7e28fea2cb247a5d09576a4904a43680db8c32139f22a03d80f6ede98708a2452f3f82232b868501340f79c0b3f810f597bcaf5267c3ccfb1704b43

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
36988ca14952e1848e81a959880ea217

SHA1
a0482ef725657760502c2d1a5abe0bb37aebaadb

SHA256
d7e96088b37cec1bde202ae8ec2d2f3c3aafc368b6ebd91b3e2985846facf2e6

SHA512
d04b2f5afec92eb3d9f9cdc148a3eddd1b615e0dfb270566a7969576f50881d1f8572bccb8b9fd7993724bdfe36fc7633a33381d43e0b96c4e9bbd53fc010173

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
a903285bb9aa4c9ac2cba2014c8c92e7

SHA1
eedf8f8c8569fed933ae4bcb12ae18fc50981fa6

SHA256
b90a577037e8ed242ff480f2e78df441fb36b64f9c0f9a92882c58f60fd28ad7

SHA512
4c57c1a0bb5353ee0aaead5093cf40be00179571907020fe520a2083cd8bda2e8ee8d65c06d8e916fa14ea174c6dfd65ac6f91e2284b449022faea77bb66a739

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
818B

MD5
7b9c4ef9e001d3b4ff16d81f687a3008

SHA1
4268231fb3d5828376e76e441b4fe3507f9a9e5f

SHA256
a6ebc746e2790bb71d588cd76fbfe1551f3806d9986ffe8cabf26b71dc8227bf

SHA512
a10b03e47062de7c4d6dcc84ed449770e9247da9ec65ebf43f3c0aa48d2c4afc5cedc722601c393055bc17abc816d3c43e6607be59020e11a12f95fff429289d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
818B

MD5
670f07bf47ba2aeac418a3e62130dc3e

SHA1
985c4bc7862473233af84c67497aafb43cbd5f74

SHA256
b8b185f2eed58816fad7c2f582ee10ea7fef30da120fd308849c2c4500842524

SHA512
7d432dd7b720e721a9b18af433d7f03bb5a0b0a4d411b0b92ec8b0fa2d2397f476bb3c6c864d7cf3bf5113590f6dec62521c69381fc20599cd70ebf3a11e88a9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
4e9dc9617bdfaabed761c59343d8ca31

SHA1
051a54226e2235fe99bd0e4d9bcd6fd285b1fbab

SHA256
819cd8559fadcdc8f6b8ca605ed3384be5beb4725d384fd18574061b55b24943

SHA512
07556f82a359f3e0e6bdf25c7889b163be4c8522a14b3d93723560e4d64e80770ace1875ddc3fe732d48df9a222a848adc082729d8bbfde9a45e76c2c2207099

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
782b5968c78a8de7f14783d789a8d122

SHA1
ff0fc256771bf348c16328840015e7427df4ebc2

SHA256
045b593501df3fa54481bce5e9b6f1a79a6a69417cb3f6099bc0b31351f98307

SHA512
917517d13955bf7b5a0b27f6a2aa868bc6879d44a97fd7ed19e454d980bad56626da25db35bc4ef36e29a5a8d66aed2ab4254c08b3759a0647005611e523e0e5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
d56fd35a2546f6b0c007bc4af6d0035e

SHA1
16553119849b4c571dbf0ac08c651ae09db38bab

SHA256
aabeff9de261ab3f0fac2ef94fa18cfd7a3c842aa5b8581893e6f6a618c19e8b

SHA512
883fbc9ff3ac22f68533877f244f1e92e8f2107e531d8f53d473a8a1c6f9d03ea2223e51d427ce018bf2bd40ee25f1dec2f79e776d36f65a25f68c0e1d1e0298

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
ef97d4fb0c15fc39c8311af333aaf4b4

SHA1
f28433b85f9e6590d91c028d25f257d9213f3f6f

SHA256
ddce0d45d2009ab78b397dd5e36f835bc54087b35ba44e6af1c4bd8ca94cd277

SHA512
ccac4d9de560e4aaa875570eda09dfe69ab62e0fe0875fd15a57ab1e14932f27104f212520784ace4ae6f783dfb072568880b4fd4e5e1ea61d6a6dfe6f2c9041

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
20b154389ab5a601c1170d42b3041277

SHA1
f9e35d3cf7088df5f5cbbda815a8bc9e9e7b5b29

SHA256
054c8130809c6c5df62f707469c002dd3d06a8da78434856f667ce3bcedf0117

SHA512
7c6f653b79c21258cd9ef67dd541498baf073ec292e45827c78c4b6a49669b48c1818d721aae7daae002956147c2e3728c5a2113225abd6e77c5fe8012b8093c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
8ffcd5a19c39cae09e865089ed36cadb

SHA1
e5b44e9b5ef89fddfe356f938be550eb725e9b4d

SHA256
3be75cef48bcd5d6da4fc98983b82cfa968fcacf85f9476b42a253e0f12d8028

SHA512
fd14f28a44393d84c2a6e3ea6f553d45310e86f7438b8bbde4f489eb9c406707d8db7bcf0758e7257c19a54df38cc3cc629ef6e18ffc6aef396202dfdc1528b3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
9af44dab52a0ce7e49cbf4bd65306fcb

SHA1
b20e731ddb7082b9f957f5e6770287717008a01a

SHA256
69b3788d97990943c045ef4a1c95ce1f273d835a03a2e386346bd7a64d822e1f

SHA512
848cd16abcefd48a2c2d3b6f0634ed6e60e443b515d6fd8540340634fd5139c6df949df3dd6764f071b2ef0cf6d0bcb62cf5390a2fdb51514e845f8468608521

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
156d582aed8a9a0ab64024b666dd66d8

SHA1
7155aa343ed709d042bf2cb21f337aa3e27b8cf0

SHA256
869cd9f4fb921102b28deda73c1a8f0a7e8438b895f8855895e295d352ce2be8

SHA512
ce3abb5dcf31144d9d460dbf48b46174d1eac8b2b32ebe7402a33aa461d3ab8a7ff7752b20883c2b618c17ca4410df8dedded08382f52f7a769cf6ca97fffb35

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
613dee77f3ad899ed39175395d5a7000

SHA1
77c6a970d13379eebf7c82b5c2d4e65fe21877e4

SHA256
8492c6924042f71bd229965c579e13efb17439e094a1841b3e323d617fb6ff18

SHA512
c62634b11d491584d72747bf582160662b050777b1f33e9ec5be1ce4d35992897c416a81823380fb2247a20d176cb555ab32d8f4acff59509a84a3041096c15b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
8ba264c841fb07d9332b0409f7d81c6e

SHA1
41dc4b65c6dd8f439d76a314695674d2fa4facdf

SHA256
242eb8ca81bad0ec138e965e8fb22184101a989f97f00aac4729aded7cd85084

SHA512
8a29e2f746c826f9da925ab6a50d7427ec944388d9538e15c34e862c2911b548b5cf1de853eb1b43e0466e1daa52d1c83e0a804cdc76dc8604e697fcc4d751e8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
7ecf7648f8851698b1945c56bd798ca6

SHA1
fc6e6a609862a1906c5291031766409c1d7ad86b

SHA256
3699a1775e6e6bc6c73b8f5112ab3b96cfb08aed9f4bbd52331c109d9b282858

SHA512
a036f618caffe9ca4ef8f3fc14491bc0bab7d20a4ad27fdd5b4eb44b2e2e0112487225ffd2b2329ab65191ca18eac68bbdd2e4dc70df51fa0cec4a448b4a0234

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
d95b91fc7462cf92d0d19726fa26f306

SHA1
087294026f7efe95d423b0da825ebcc40781cffe

SHA256
78e377d0510040a0dcbc9aa4a1984280f2f41fa61d65e10cb5b1505d04e3cc31

SHA512
d3faba04d6e5833db2106f4310929cfe9235735cb30bb4d617dba32115d477c5e89cfbf4849efbcca2f029e9304b0229a693063dbf1691100db11ab41d4cd705

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
a7c0a6ccfe4afc207e9eae6ceb31d610

SHA1
b9f6bd945ef26ab49e7c9e6e3e414a885a59212f

SHA256
794956d74f9532f0cb747d87d7e827691f2abe2f397ac1e704187a2f96a829ba

SHA512
bea3f8493fd1dfb21d93d64c744cfff51a7a3f119b458ff44d656310dd759c0707f5b798ffabcc49a2648b6ed147d33c471f3198a81f4f93a56865757d176832

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
ceab826e8d2b9cacf946f22c6cf0a50a

SHA1
3df47df2ab30548d54f95da1cf611d01faef0483

SHA256
bacd19f7925c96cd9a24adc10572e440497bdefb84314c3182dbc36e90063b01

SHA512
c7aded6e675ad77af908645cba3daabd90dbd51476436b0d3cc939bddd2f02202165b603054c6c5752a9057cf400afce473fede7cd3b9a89f0f6d77ce228f5d9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57ef23.TMP

Filesize
372B

MD5
f055a6b8826dbb7ebee31b41047bd197

SHA1
646dca8d60a378cce504bc5261ca3e487641079b

SHA256
eb0941bd3a0828397372fcdf988db26c8ca37f8ec11a6ae24f5a19fd529218a0

SHA512
efffcda7f073e36ce05cbe3495d8d3b9be2adbd16a885afc5612b060ec29f7fa7f35f56b6457d4bc09c9c1649a08a5db34b3d82769d0c9ca99bea7621558f4da

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\data_0

Filesize
44KB

MD5
1a09f5094b5a365491371fe5c58f9415

SHA1
59ada5d5e80c6d8f5ca43f3ff0166a99cbe48f80

SHA256
6395da4556511e34ea674a9e395c4b95c03ac63f8710d00f9eca4be4b561698d

SHA512
ad80d7ababfed2fda716cdce025f67bec6c9cc1d5806bd9b9b1d83a7d09efddaa8c6130b047d71bcea9907ce9fb2251e2f0502a3ab78c3e3e439ba31fe5c7803

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\data_1

Filesize
264KB

MD5
17d163451adc0968561fec84a8eebd5f

SHA1
6d2074184cb37eaa43d1bccbf9d262198c88ad50

SHA256
7d7147637dcd0a77af4a308bff97850f00c88538664bb47a73eff2c3d01b2021

SHA512
7b070da6c226f340ad2efcf32f44f8a05463465aa89d3dee85ef2fbe7c5365bdf6903f242b9784ebad0d2a290ed18579d02093863ffd82c8f6a6915bae1bac11

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\data_3

Filesize
4.0MB

MD5
7e5c2aebfb73a663817851dc35fb1712

SHA1
ca60991222c91059e392b5d3390707713145c104

SHA256
ae83ff29e26b66e5ea708f4385d3b4fbc3247da7301845288f0b509921c2d9ea

SHA512
b4e589de0e9c61639dfeb9346afebb7d5412a439bcffccd6a204d31dd6213cd6f86e3352183e65dfd5417b919e3db69b1c89032905197d128092c61d26ef50c6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\f_000002

Filesize
17KB

MD5
6bc4851424575eaf03ebe2efee6073ab

SHA1
2d014fe2feb929d03a46322645a94556ca5c9e96

SHA256
abaded8e235fdf329521806af30a1cc7701eaca3fe2efccb9da760ec6d8e5e4e

SHA512
af3b7d93fa2243475d74d4bd7f918ce2706bf6eca28029b9e49869f5f793e483efaafdfab1fed6306d5fc77a5ed3b27097b27448cd04560bed4df6fa3268ccf9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\f_000004

Filesize
20KB

MD5
a4e164f6a15386763f5a9915b9b2abc8

SHA1
8d499d52070f47a4084008fcb8874fb148994d4d

SHA256
dad5ddc6868717a6c955e0c7627f0f93adca70d5d20733c1a98324269fa19f85

SHA512
9ae0dc6c7638553dc8b7c99f0f0b5671901409b50c0cd7666b556a08cb979b4334cee2b10bc826a3d7ce435a84536a0e81d2fbc79104e29588c5b506da97aa0b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\f_000005

Filesize
16KB

MD5
a33b3a3fdf5161be5bd861804961f557

SHA1
68a57897f1686a3e62ce9808165e18f31661d077

SHA256
ac33d8bc6d9a5e769472877d7dd3d035f8088274b886b16cb1898b106da48560

SHA512
c94c29a5a9da89044504fe06702f00a7fdd5bc7b85e1733c0cc9a363a812c8d8f95672ea7731643229fa4ae2f1a632c73096d90b63799f5bae7639b41151ccb3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
b35f767ab829adc454c976a0ffaffa7e

SHA1
2e7b1eb6fed91a2ffe276a5bdd86f37d58d10933

SHA256
a5fe4c6b1a7ccbf7ffb94d26c48609ff10ed996b6cd781687747be65cc19b1a1

SHA512
9ac3b8cbb0a499a9501a674ac29dc85949cbc0f5b7b1d4c4d4078121bbb029def9e9927285fd084d5a77fe929b755017cfd99b52000a29aa6115feffa8cef73f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
be2f3a74066436a2d86fecae1a21d3aa

SHA1
e77ea915c430d894d33e79bd18639dd8d6f398f9

SHA256
c7a84dfee958a0f35630a92aab16ef8da6daf95c7542745b50c30f5475886418

SHA512
24f3b3d3afb16ef35439d0dd01ae40fcaba3885d69bd168266cdb09af3748cc0b2551ead62278caea86ea0b8042d9fec95a34f06de48b2044681ce9992c44aa5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
8d6440ab8bf2c5ebaa1c44ba4022e5b8

SHA1
5af22829971c45ff9d0b6f12359d4612bc027961

SHA256
392dd39ff4229db218b763e78c7ca82e3c50c41f43670846fb7bd58c55fdd97c

SHA512
ce527c2539981bbe72ac34ca589bb3b0425ec34009c4d67adc714ca874ffe8215cb74fdb69e4afa505dfabcd25b62e12aa4aa42009dc091a14df9af30f3212fa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
8e864f93dd43d0e797ff73fb1574139e

SHA1
a6cd22981144814a022ecf00be1716b09e6e1fca

SHA256
e7f059aeb459ee8139dd88b6bf48847f66a56fa9e21f26fd85eaa5a4a007a4ee

SHA512
4137cd8f8295235b7eb5a4767d1d66ab33b55f75eee55467fdea72e8e547c96412e5164c4cc91fa63d981e33cfefcac42863152bcc6bda9e6160d4e43ed571c2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
e1f161a1635868593095856193f70c62

SHA1
f673e3a3c7e38f58c92474af08f7694ceac803c7

SHA256
4f2664540099bf376092d561a2d79099234ce201b1b0c9780c287c507535a442

SHA512
660c674049d4bff0fd1c41da7d23c054ede483d1a3b989425cd7d7d7bc5b30465aeff822811d9a8d0afe0de2f3f9e7856298d2ee91babdba46068f74959cb98f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\GPUCache\data_1

Filesize
264KB

MD5
779e21acd16b5a4ca9ae2398c24b1151

SHA1
ec4cf2255d44af510303036197e093a800718421

SHA256
c4dfce61699e9468db9eb4681f1d3f0a52fd248dddcec8b53e8383bccf73633d

SHA512
ad4f7264be0f9ca69ae55fd5ad26de6abe4ad873eb580ec74f6533afca33b743728f18123d022cf65e51c5b94f03fc877ef0b9570e8fa8c5588957cdd48c928c

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\yuzka873.default-release\activity-stream.discovery_stream.json

Filesize
21KB

MD5
908df0643b172393f1013ae178228fdc

SHA1
947174f544d73f32926032a87ee6bd57a2d0f5c7

SHA256
16553ba440f74c21a5296488518d6e965ae04a06575f202552d211b42fddbe4f

SHA512
8d78fc3b4c719f2c90f6a1390523434d1a70e48f29ec0171dc09e65564664ee6f6d95169939e4ade6d4a6c62213b0982265b0dc7ee7b9d9438a506e9919171fa

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\yuzka873.default-release\settings\main\ms-language-packs\browser\newtab\asrouter.ftl

Filesize
15KB

MD5
96c542dec016d9ec1ecc4dddfcbaac66

SHA1
6199f7648bb744efa58acf7b96fee85d938389e4

SHA256
7f32769d6bb4e875f58ceb9e2fbfdc9bd6b82397eca7a4c5230b0786e68f1798

SHA512
cda2f159c3565bc636e0523c893b293109de2717142871b1ec78f335c12bad96fc3f62bcf56a1a88abdeed2ac3f3e5e9a008b45e24d713e13c23103acc15e658

Download Submit
C:\Users\Admin\AppData\Local\Temp\tmpaddon

Filesize
479KB

MD5
09372174e83dbbf696ee732fd2e875bb

SHA1
ba360186ba650a769f9303f48b7200fb5eaccee1

SHA256
c32efac42faf4b9878fb8917c5e71d89ff40de580c4f52f62e11c6cfab55167f

SHA512
b667086ed49579592d435df2b486fe30ba1b62ddd169f19e700cd079239747dd3e20058c285fa9c10a533e34f22b5198ed9b1f92ae560a3067f3e3feacc724f1

Download Submit
C:\Users\Admin\AppData\Local\Temp\tmpaddon-1

Filesize
13.8MB

MD5
0a8747a2ac9ac08ae9508f36c6d75692

SHA1
b287a96fd6cc12433adb42193dfe06111c38eaf0

SHA256
32d544baf2facc893057a1d97db33207e642f0dacf235d8500a0b5eff934ce03

SHA512
59521f8c61236641b3299ab460c58c8f5f26fa67e828de853c2cf372f9614d58b9f541aae325b1600ec4f3a47953caacb8122b0dfce7481acfec81045735947d

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

Filesize
2B

MD5
f3b25701fe362ec84616a93a45ce9998

SHA1
d62636d8caec13f04e28442a0a6fa1afeb024bbb

SHA256
b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

SHA512
98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Crash Reports\pending\0e3b270d-04a3-44e8-954c-26ae73aeadd8.dmp

Filesize
333KB

MD5
84cf612ec3a7abbb3745ac17bf5f8703

SHA1
dfdb77a9dbf8ef248c3cf25673585dac9c51c72b

SHA256
63a37bca73b2883b4c95525e232cd641c7900a5b6b1de789983f99512e82f475

SHA512
a2814a8ca49bc2d2b529c6f6def545dd6c68db9b934175b8bb1efd4ff2a2f0309b955258f8708a82b5d5ea49436e2d9bc894e3f79ab0a2e9c3bb81dc1335de82

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Crash Reports\pending\0e3b270d-04a3-44e8-954c-26ae73aeadd8.extra

Filesize
13KB

MD5
8efa4180c5d9b0c97ef8f1f0e54dd2b2

SHA1
227c3438e1d4cb94f05fced390db9dfafdbe3f24

SHA256
be5bfe0003782eaf947fcde20c51da8eaf820eb862009551333169423ca3641f

SHA512
f69e32f6fc3298004f72c7c3bb4ce98bf033a870f73e4fc1bb65bca331994e31b562a3cf171b059529698dc4e9244c2243cb50381b60059c016774b15243e79d

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yuzka873.default-release\AlternateServices.bin

Filesize
6KB

MD5
1000d1c34adf2212958cbba19d7d4002

SHA1
2dc9e9037fa7cdce6d55436e043d9cfdf9214d28

SHA256
77b231e715482f91afc2073dce24f181e4dcf9954a790788e60a08fc7ef3a125

SHA512
4be466c1b34784876aaa05d9456731bb3aa6b3320df7e503eb4dace66da552d35e73d1a08635f8ec9f6cd128c7a949490444bd86d206dfe93ecca2741bb118af

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yuzka873.default-release\AlternateServices.bin

Filesize
8KB

MD5
a560450a1843359f30c26c457d8590a4

SHA1
4e19eb2110d48a9c0d9cb031f5aa4249e00b096e

SHA256
5eaf030e32b0bdbbe61460028ca29279eea3a7d4e94545a372b2bb53bb0c6e4e

SHA512
8491adf10e6809c41b2149216acf5ab8e0a9330ae14e8089080165a018318eb5a1492302f49563cbaa9bf3510d216202510f8575ce9a184d69b01c8e5da5fa65

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yuzka873.default-release\datareporting\glean\db\data.safe.tmp

Filesize
5KB

MD5
1e5ba91171049d16e7944327dd9f5c15

SHA1
70c86122c8a9a5ec1df602b1008f7d4d7ee3f5d7

SHA256
c48ca8db55211c4e8576b5ae73487ac61dc4107d093c2638a316aa2ba58d4f97

SHA512
1b12ab8433754b5ee01819e71273f1c2003ab39ed35a2db07623a8a6eb8a802d5df51dda006d878417cb3ac18a1eebc37cd0627fb5cc7ada8036de8485f6da06

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yuzka873.default-release\datareporting\glean\db\data.safe.tmp

Filesize
7KB

MD5
682aeb195b4f037edc4cc1184e8cca73

SHA1
7cf891b85cf7cf7186d7b040f38c0568cc153cc2

SHA256
c590fa7e757e911b60ba798434c818cb2cf47cdb2c1b2da831d166eba4f397f3

SHA512
f7cbc65acdfe77cb7b6af89c24e5b8756768c124863e4821f9a8a82aad3ca00fbb130f47f1afa921740e238d1006346ea9045b6ac4ef4a6a8175c6b7b1a5e25c

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yuzka873.default-release\datareporting\glean\db\data.safe.tmp

Filesize
7KB

MD5
c7184fe25e2c75e95662a0d4838bf3f3

SHA1
53353f8a6cbff012afe6d8b77543807d350b14bd

SHA256
978af4d02a1d006cae6cc1fd77bd1e76a84f7259b57b968f7292e3bc596ed8d4

SHA512
7ec00ac6f5cd63fe460905c6b0ec22d9c8de0ee38be5bedff28cc6c22842746045c96e51332318563b3491e267134c06b9190ff657a75936220ea0ba9ad8660e

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yuzka873.default-release\datareporting\glean\db\data.safe.tmp

Filesize
7KB

MD5
c24fc06e7fb8ac45167578c958485cbc

SHA1
971484143f9aa22679ae07d8c89f4293cd26ec95

SHA256
245deab0b2a608b06a15bc2fed1a551495ad28f4b72c8b1817423ef8b55d714d

SHA512
7cb8ca62034b9b2e1fc126c5c0ae939755f7b1eb0d6126c37ddddfec29b89ea82f8447f415a9606acb81d4559b44eaa6138360ebfd4c4c928f8da67722ba32f6

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yuzka873.default-release\datareporting\glean\db\data.safe.tmp

Filesize
7KB

MD5
70e76c65118e3188c0ca02198c397897

SHA1
2898286296e813e1e73213cfe2922e916cd0db84

SHA256
da35c0e4ae620c0c6f099e0cb215b06735b95f4353795af7cd568065aa3095f8

SHA512
c60a6123ab19bdce337e8609fe3ad6a8b3cb85dd5a29bed758880120b8dbc7208d151a0520a627c432ab9f98572021748ab80b29a48cd62ef7b40269f4682d52

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yuzka873.default-release\datareporting\glean\db\data.safe.tmp

Filesize
7KB

MD5
4a9ad73c5723edb63eddc813ac12d512

SHA1
183991eeb1f173d0b9495eaf3e8587a9d3345428

SHA256
66f4bf128cefb6b7637263fbacd291127ca26487ee4824e6f043af49b50d4f53

SHA512
d66da7c87306ef96a12484ee077e7e38d2ed0ecc9450a9a5fac7b08cfef432bd3adb832d713b1a9ebf5775fe3dd382c8de20e643c8ebcaeda3564dcc4b752000

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yuzka873.default-release\datareporting\glean\pending_pings\00012b30-75c8-41a8-ac65-71cebb208f4c

Filesize
982B

MD5
5dc9856632572e8f94ed23d8e6bea9ac

SHA1
fb0832deaf00357bde4e8be24dc0fd9ff8dcae9c

SHA256
6fb6bf0ce0c8d6dc1f3bc82f229fb37d3cedd88fdb5fd71b8e0b6d6d7065d582

SHA512
02788ccd3a73c6fd65460c69f36cbe853b77541b1be8165d28f361396af9cba794ea8cace9d375dfb5a888f5f0be2d3ba64e95f3f4fc876b946e3c55e1c5687c

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yuzka873.default-release\datareporting\glean\pending_pings\b3e91717-25dc-4a42-ba34-95eeb5bdc45f

Filesize
28KB

MD5
b9be3a762befec31830aa65637fd22ea

SHA1
60539d0bc844b6981e164734389d9e3376bd9441

SHA256
e2c3169ccec31063dc4458652082e8223d8c22a2f036b5e0e0ec948a7750b81a

SHA512
27504ff2183101488036a163732170822ccde5f6d19cbb7c527cc9e32d062e840ae944fcd359c307eb90355accfa060dead34dad4adda700407b5d049068dea7

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yuzka873.default-release\datareporting\glean\pending_pings\da501d17-b446-4ad8-9471-67b885d54eec

Filesize
671B

MD5
6013a31e2511caaf3be915610aacdf1c

SHA1
8195cdd0c6f41619dcf5149052c44d685b622e92

SHA256
4bd8a633ad1d1608d9446374c1e24bf838fee86a156f0327ce6e6f75a126076e

SHA512
edd7e4490a06f6764bdf895d3da3c710f2597353bb549e675d5160bf86dd8948bba83d9135341fd1107e4c54ec8d756b3c7cebb3bd0d83bc07b8e8d93c583944

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yuzka873.default-release\gmp-gmpopenh264\2.3.2\gmpopenh264.dll

Filesize
1.1MB

MD5
842039753bf41fa5e11b3a1383061a87

SHA1
3e8fe1d7b3ad866b06dca6c7ef1e3c50c406e153

SHA256
d88dd3bfc4a558bb943f3caa2e376da3942e48a7948763bf9a38f707c2cd0c1c

SHA512
d3320f7ac46327b7b974e74320c4d853e569061cb89ca849cd5d1706330aca629abeb4a16435c541900d839f46ff72dfde04128c450f3e1ee63c025470c19157

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yuzka873.default-release\gmp-gmpopenh264\2.3.2\gmpopenh264.info

Filesize
116B

MD5
2a461e9eb87fd1955cea740a3444ee7a

SHA1
b10755914c713f5a4677494dbe8a686ed458c3c5

SHA256
4107f76ba1d9424555f4e8ea0acef69357dfff89dfa5f0ec72aa4f2d489b17bc

SHA512
34f73f7bf69d7674907f190f257516e3956f825e35a2f03d58201a5a630310b45df393f2b39669f9369d1ac990505a4b6849a0d34e8c136e1402143b6cedf2d3

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yuzka873.default-release\gmp-widevinecdm\4.10.2710.0\manifest.json

Filesize
372B

MD5
bf957ad58b55f64219ab3f793e374316

SHA1
a11adc9d7f2c28e04d9b35e23b7616d0527118a1

SHA256
bbab6ca07edbed72a966835c7907b3e60c7aa3d48ddea847e5076bd05f4b1eda

SHA512
79c179b56e4893fb729b225818ab4b95a50b69666ac41d17aad0b37ab0ca8cd9f0848cbc3c5d9e69e4640a8b261d7ced592eae9bcb0e0b63c05a56e7c477f44e

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yuzka873.default-release\gmp-widevinecdm\4.10.2710.0\widevinecdm.dll

Filesize
17.8MB

MD5
daf7ef3acccab478aaa7d6dc1c60f865

SHA1
f8246162b97ce4a945feced27b6ea114366ff2ad

SHA256
bc40c7821dcd3fea9923c6912ab1183a942c11b7690cfd79ed148ded0228777e

SHA512
5840a45cfdb12c005e117608b1e5d946e1b2e76443ed39ba940d7f56de4babeab09bee7e64b903eb82bb37624c0a0ef19e9b59fbe2ce2f0e0b1c7a6015a63f75

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yuzka873.default-release\prefs-1.js

Filesize
10KB

MD5
7ec25a6610a7bb13e41099443c3b533a

SHA1
ed0456d04ba9cea0fa80d142272d6e1f4ef5db84

SHA256
c052b60809d2bf540bbea2b912b260cf725a103844919e5d46a533c42e0cbf8e

SHA512
965dd7c82ae87b29fc2c404b8ce0b206f958d3ff12f16589bf38ac8e1ed5e402a8567115dc3831dc2b7095df956d1d92d8829c479741d51dae6a5e125d735c19

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yuzka873.default-release\prefs.js

Filesize
10KB

MD5
e19be5391ef9dce57f3aca1e2558c8df

SHA1
d02089b3615eed00f89ed4981fce97ee424aad48

SHA256
571a549abf17c06f67eefd936bbeae1c2774d3fb3b681bce48b1f0f53d64b088

SHA512
d9e1e56201ddc1cd5e3144eae0304d96807836184f32f316d402c34766027e097bfe84e9e7cf69df927e3a9243750a1972f49b6010eb45cc9f0946441a739628

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yuzka873.default-release\prefs.js

Filesize
9KB

MD5
89f47097985f399bd576257e68b1b9f6

SHA1
49752bce61770658071da14a2a04d82ae74a9e7a

SHA256
df41ca1435bde4246faa8c25a4e9cf1a657379786e1ad5898caeb4f769d66039

SHA512
688934fbca4d74a40609f9cf9b2a6c689df5d3c0bc2785f79dbcc1ded7eda628f93e5dee923e531472a87958743baefae8451d60ff306beb73264e9462611116

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yuzka873.default-release\sessionstore-backups\recovery.baklz4

Filesize
1KB

MD5
841547df886a6195180cf090bda77b72

SHA1
774bcd2d01fea61306d7660629bbb8ce95e3b435

SHA256
d8e89348d93b25923de42339805207aa9def59bd2a808dee868392c2d5b43fdb

SHA512
1079f6d4b8077170aa0821b361d406cbd5f14d89bfddfc9724bde1ff6381da12522392ad16391c195d3591ada369e0723dfb088048923dedccf4ebd568c9f73e

Download Submit
C:\Users\Admin\Downloads\Unconfirmed 640869.crdownload

Filesize
188B

MD5
1b43a4b507f25c1171fe4a74faf25707

SHA1
46057bce251c6360f73bb049ef04887ec1eb7b6e

SHA256
b3d967d365559bc9f4d7b383e3d3a6497e77af95b606bd3936159390fd9f5536

SHA512
32ce7ef663d84ad6fd94a9fbf4232b0cc0d729c3aa105eb257c6c5cdf67631c444c283f6af12f978fac75555c87d6c37588bf4060240a3b642a2ef0cc2e71cc8

Download Submit
C:\Users\Admin\Downloads\Unconfirmed 68425.crdownload

Filesize
208B

MD5
b910b3efbb5e0229f25d39a51d9a2064

SHA1
ec1b8b532959db013648fdc71e5a74d9578e13d9

SHA256
dfd075d97f06e0ec4ffc2f03050628d019d23cffce17f45c6f85d8364d93449e

SHA512
4e8959f6bfac511a03528def5a2298c3dfae79bff6ac88dadabad0fba980197d144066e934d0d26f10e7d968d42bbbcafd00955d0cfb085e188da887eb8dc4f6

Download Submit
C:\Users\Admin\Downloads\chaos_devil.c

Filesize
591B

MD5
13f81ac41e8866a204629b4272dcbf7a

SHA1
27ef5016b7d4965f50e21019bf3c92a96755bec4

SHA256
55f083d63639a1f337066d1494791197fc29d3bda2a657b2ab38b265706dfa97

SHA512
3e82643c8b07c91cf6e5c82219d04d94ce18cb8c330d7ae62dafdbbcb395debff005963637bfba8547f4d9025a6aa71d13e33eae5ff93a72be7424d4367deb4e

Download Submit
C:\Users\Admin\Downloads\zip_bomb_42.zip

Filesize
41KB

MD5
1df9a18b18332f153918030b7b516615

SHA1
6c42c62696616b72bbfc88a4be4ead57aa7bc503

SHA256
bbd05de19aa2af1455c0494639215898a15286d9b05073b6c4817fe24b2c36fa

SHA512
6382ca9c307d66ab7566acf78b1afd44b18b24d766253e1dc1cb3a3c0be96ecf1f2042d6bd3332d49078ffee571cf98869c1284c1d3e5c1c7dc3e4c64f71af80

Download Submit
memory/1868-778-0x0000028819ED0000-0x0000028819EF0000-memory.dmp

Filesize
128KB

Download
memory/1868-753-0x0000028819B00000-0x0000028819B20000-memory.dmp

Filesize
128KB

Download
memory/1868-765-0x00000288197C0000-0x00000288197E0000-memory.dmp

Filesize
128KB

Download
memory/3392-802-0x000001EAA5000000-0x000001EAA5100000-memory.dmp

Filesize
1024KB

Download
memory/3392-803-0x000001EAA5000000-0x000001EAA5100000-memory.dmp

Filesize
1024KB

Download
memory/3392-804-0x000001EAA5000000-0x000001EAA5100000-memory.dmp

Filesize
1024KB

Download
memory/3392-807-0x000001EAA6100000-0x000001EAA6120000-memory.dmp

Filesize
128KB

Download
memory/3392-821-0x000001EAA64C0000-0x000001EAA64E0000-memory.dmp

Filesize
128KB

Download
memory/3392-809-0x000001EAA5DB0000-0x000001EAA5DD0000-memory.dmp

Filesize
128KB

Download
memory/4880-995-0x0000017CB8FC0000-0x0000017CB8FC1000-memory.dmp

Filesize
4KB

Download
memory/4880-984-0x0000017CB8FC0000-0x0000017CB8FC1000-memory.dmp

Filesize
4KB

Download
memory/4880-986-0x0000017CB8FC0000-0x0000017CB8FC1000-memory.dmp

Filesize
4KB

Download
memory/4880-990-0x0000017CB8FC0000-0x0000017CB8FC1000-memory.dmp

Filesize
4KB

Download
memory/4880-985-0x0000017CB8FC0000-0x0000017CB8FC1000-memory.dmp

Filesize
4KB

Download
memory/4880-996-0x0000017CB8FC0000-0x0000017CB8FC1000-memory.dmp

Filesize
4KB

Download
memory/4880-991-0x0000017CB8FC0000-0x0000017CB8FC1000-memory.dmp

Filesize
4KB

Download
memory/4880-994-0x0000017CB8FC0000-0x0000017CB8FC1000-memory.dmp

Filesize
4KB

Download
memory/4880-992-0x0000017CB8FC0000-0x0000017CB8FC1000-memory.dmp

Filesize
4KB

Download
memory/4880-993-0x0000017CB8FC0000-0x0000017CB8FC1000-memory.dmp

Filesize
4KB

Download
memory/5220-680-0x00007FF9204C0000-0x00007FF9205EA000-memory.dmp

Filesize
1.2MB

Download
memory/7092-681-0x00007FF6A3C30000-0x00007FF6A3C97000-memory.dmp

Filesize
412KB

Download
memory/10024-678-0x00007FF6A3C30000-0x00007FF6A3C97000-memory.dmp

Filesize
412KB

Download
memory/14880-679-0x00007FF91E680000-0x00007FF91E71E000-memory.dmp

Filesize
632KB

Download