xmrig | 2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a

Analysis

max time kernel
150s
max time network
19s
platform
windows7_x64
resource
win7-20241010-en
resource tags

arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
submitted
24-01-2025 21:33

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
Size

1.1MB
MD5

252876f7209b834f3d460cf6e12df01d
SHA1

2219230d98628781c65b2df2424d1e5a60053d84
SHA256

2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a
SHA512

e83c5060f5ece54bf80ae4c94c0bad3fa3e5c8e8d7cc2d20b0e919bdfd79ebc8789303e4db093e129493aa15c5c8bceefc16e686f50814f0a9d9eec5597783f3
SSDEEP

24576:GezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbpwlKenszZN3sW4Qa:GezaTF8FcNkNdfE0pZ9ozttwIRH6Qa

Score

10^/10

xmrig miner

Malware Config

Signatures

Xmrig family
xmrig
xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
miner xmrig

XMRig Miner payload 32 IoCs

miner

resource	yara_rule
behavioral1/files/0x00070000000120fc-2.dat	xmrig
behavioral1/files/0x0003000000018334-6.dat	xmrig
behavioral1/files/0x0008000000019326-10.dat	xmrig
behavioral1/files/0x0007000000019394-18.dat	xmrig
behavioral1/files/0x00060000000193a0-22.dat	xmrig
behavioral1/files/0x00060000000193b8-25.dat	xmrig
behavioral1/files/0x00060000000193c7-30.dat	xmrig
behavioral1/files/0x0026000000018b89-34.dat	xmrig
behavioral1/files/0x0008000000019480-38.dat	xmrig
behavioral1/files/0x0007000000019489-41.dat	xmrig
behavioral1/files/0x0005000000019fdd-45.dat	xmrig
behavioral1/files/0x000500000001a03c-49.dat	xmrig
behavioral1/files/0x000500000001a0b6-57.dat	xmrig
behavioral1/files/0x000500000001a309-61.dat	xmrig
behavioral1/files/0x000500000001a3f6-69.dat	xmrig
behavioral1/files/0x000500000001a400-81.dat	xmrig
behavioral1/files/0x000500000001a404-85.dat	xmrig
behavioral1/files/0x000500000001a459-105.dat	xmrig
behavioral1/files/0x000500000001a471-130.dat	xmrig
behavioral1/files/0x000500000001a46f-125.dat	xmrig
behavioral1/files/0x000500000001a46d-122.dat	xmrig
behavioral1/files/0x000500000001a46b-117.dat	xmrig
behavioral1/files/0x000500000001a469-114.dat	xmrig
behavioral1/files/0x000500000001a463-109.dat	xmrig
behavioral1/files/0x000500000001a457-101.dat	xmrig
behavioral1/files/0x000500000001a44f-97.dat	xmrig
behavioral1/files/0x000500000001a44d-94.dat	xmrig
behavioral1/files/0x000500000001a438-89.dat	xmrig
behavioral1/files/0x000500000001a3fd-77.dat	xmrig
behavioral1/files/0x000500000001a3f8-73.dat	xmrig
behavioral1/files/0x000500000001a3ab-65.dat	xmrig
behavioral1/files/0x000500000001a049-53.dat	xmrig

Executes dropped EXE 64 IoCs

pid	Process
1508	JBHQmyJ.exe
2756	mfRIPgn.exe
2808	SPeLPBt.exe
2912	GCfEEDB.exe
2896	KiwFrqa.exe
2772	EKWfGEA.exe
2868	jSroUmX.exe
2132	gCydcig.exe
2860	kxrHJQj.exe
2856	iEodkzR.exe
2680	tJVOCIA.exe
2740	ISesXdZ.exe
2272	ARkOaNs.exe
2292	PLESewz.exe
2644	kdDHTTL.exe
580	biaPMhj.exe
1196	HTatMOc.exe
2448	VmqRRpX.exe
2244	HFfXDIV.exe
1732	kXfiKIx.exe
2956	SclFMbi.exe
1472	hwnmPYX.exe
2752	rlTLNKl.exe
2996	IGKIAYK.exe
2512	eINhFpb.exe
1976	LoTWrxN.exe
2964	rcvokSe.exe
1664	rrLdKSd.exe
1312	dzqqanC.exe
2232	FndcThL.exe
2084	kbxuGaZ.exe
2064	rvuMSmd.exe
1528	DHUnXkT.exe
2400	mrpFGcj.exe
2108	FwXEeLk.exe
2236	ABdLxOb.exe
1872	MzpDaDw.exe
2364	HiodJRC.exe
1684	gylCOpF.exe
1876	GdnZwTM.exe
2508	koIMuvo.exe
2504	FsLbmgN.exe
2216	kEEtYpy.exe
2068	FwPIgRF.exe
1308	BQWmzlz.exe
2164	YOzrBaR.exe
2560	ywAUXEn.exe
1368	ncSBFtO.exe
928	RqehBwM.exe
700	NyMneTm.exe
2564	PiShKAE.exe
1008	YwldkDh.exe
968	sCHYaqS.exe
328	VKJEnQP.exe
1380	KwGPHXW.exe
1800	axcYfyU.exe
552	RlRuxUQ.exe
1764	doSuLlb.exe
860	lHBntCs.exe
1740	DujdKHR.exe
916	PlSKapD.exe
1868	XikHrZm.exe
2004	TTmjuua.exe
2616	LmjIDGS.exe

Loads dropped DLL 64 IoCs

pid	Process
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\System\imFBmJW.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\SNhlSJy.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\zHWpkJu.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\FkmWXng.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\JWTFPlo.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\kqHYJtq.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\UnzfiOl.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\mylhzOW.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\juvGPZQ.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\bbwgADm.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\WohDcxV.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\hqjjrDo.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\AsXoWBv.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\yqLhaPn.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\bLzuCow.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\VnDDjtg.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\HxwbvoO.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\ZrTGHdx.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\ufmMdIq.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\ScluxQZ.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\hJLZcKe.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\pNYmnOI.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\TroDzsD.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\PEaCpuj.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\AIDXlEY.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\EbGzsBj.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\AuYaJhp.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\qJBihok.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\CpDSFWs.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\spStarH.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\AlPjyix.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\KdsTMji.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\DqTCOQO.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\pQpHlDT.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\lEPJyCd.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\JzmdjrE.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\eiWytjf.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\CiyAhCd.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\WkqKYjY.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\EdJRIdU.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\pMAApcA.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\pFizEEU.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\qQVwlBP.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\syrinLm.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\ixXpySc.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\Zxpfkfj.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\ANNOXmz.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\eEIYtMN.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\ZeDdZnb.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\CqTNQRU.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\uiOvFZS.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\YBSZhJl.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\aSrGTnd.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\XKszfzU.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\PYZaSsy.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\PufLzjJ.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\sPjzIzN.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\fbnxEpR.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\hwnmPYX.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\AAyWhoy.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\GllIAGh.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\FuchdCU.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\QYGyVEh.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
File created	C:\Windows\System\PUGEAbR.exe	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1996 wrote to memory of 1508	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	30
PID 1996 wrote to memory of 1508	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	30
PID 1996 wrote to memory of 1508	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	30
PID 1996 wrote to memory of 2756	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	31
PID 1996 wrote to memory of 2756	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	31
PID 1996 wrote to memory of 2756	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	31
PID 1996 wrote to memory of 2808	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	32
PID 1996 wrote to memory of 2808	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	32
PID 1996 wrote to memory of 2808	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	32
PID 1996 wrote to memory of 2912	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	33
PID 1996 wrote to memory of 2912	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	33
PID 1996 wrote to memory of 2912	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	33
PID 1996 wrote to memory of 2896	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	34
PID 1996 wrote to memory of 2896	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	34
PID 1996 wrote to memory of 2896	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	34
PID 1996 wrote to memory of 2772	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	35
PID 1996 wrote to memory of 2772	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	35
PID 1996 wrote to memory of 2772	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	35
PID 1996 wrote to memory of 2868	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	36
PID 1996 wrote to memory of 2868	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	36
PID 1996 wrote to memory of 2868	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	36
PID 1996 wrote to memory of 2132	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	37
PID 1996 wrote to memory of 2132	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	37
PID 1996 wrote to memory of 2132	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	37
PID 1996 wrote to memory of 2860	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	38
PID 1996 wrote to memory of 2860	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	38
PID 1996 wrote to memory of 2860	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	38
PID 1996 wrote to memory of 2856	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	39
PID 1996 wrote to memory of 2856	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	39
PID 1996 wrote to memory of 2856	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	39
PID 1996 wrote to memory of 2680	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	40
PID 1996 wrote to memory of 2680	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	40
PID 1996 wrote to memory of 2680	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	40
PID 1996 wrote to memory of 2740	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	41
PID 1996 wrote to memory of 2740	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	41
PID 1996 wrote to memory of 2740	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	41
PID 1996 wrote to memory of 2272	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	42
PID 1996 wrote to memory of 2272	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	42
PID 1996 wrote to memory of 2272	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	42
PID 1996 wrote to memory of 2292	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	43
PID 1996 wrote to memory of 2292	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	43
PID 1996 wrote to memory of 2292	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	43
PID 1996 wrote to memory of 2644	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	44
PID 1996 wrote to memory of 2644	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	44
PID 1996 wrote to memory of 2644	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	44
PID 1996 wrote to memory of 580	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	45
PID 1996 wrote to memory of 580	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	45
PID 1996 wrote to memory of 580	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	45
PID 1996 wrote to memory of 1196	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	46
PID 1996 wrote to memory of 1196	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	46
PID 1996 wrote to memory of 1196	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	46
PID 1996 wrote to memory of 2448	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	47
PID 1996 wrote to memory of 2448	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	47
PID 1996 wrote to memory of 2448	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	47
PID 1996 wrote to memory of 2244	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	48
PID 1996 wrote to memory of 2244	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	48
PID 1996 wrote to memory of 2244	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	48
PID 1996 wrote to memory of 1732	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	49
PID 1996 wrote to memory of 1732	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	49
PID 1996 wrote to memory of 1732	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	49
PID 1996 wrote to memory of 2956	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	50
PID 1996 wrote to memory of 2956	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	50
PID 1996 wrote to memory of 2956	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	50
PID 1996 wrote to memory of 1472	1996	2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe	51

C:\Users\Admin\AppData\Local\Temp\2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe
"C:\Users\Admin\AppData\Local\Temp\2b4bc506d3fa0970b6bee1da7967a2c8cfa6da11800ae31fe2e48e071a52e64a.exe"
1⤵
- Loads dropped DLL
- Drops file in Windows directory
- Suspicious use of WriteProcessMemory
PID:1996
- C:\Windows\System\JBHQmyJ.exe
  C:\Windows\System\JBHQmyJ.exe
  2⤵
  - Executes dropped EXE
  PID:1508
- C:\Windows\System\mfRIPgn.exe
  C:\Windows\System\mfRIPgn.exe
  2⤵
  - Executes dropped EXE
  PID:2756
- C:\Windows\System\SPeLPBt.exe
  C:\Windows\System\SPeLPBt.exe
  2⤵
  - Executes dropped EXE
  PID:2808
- C:\Windows\System\GCfEEDB.exe
  C:\Windows\System\GCfEEDB.exe
  2⤵
  - Executes dropped EXE
  PID:2912
- C:\Windows\System\KiwFrqa.exe
  C:\Windows\System\KiwFrqa.exe
  2⤵
  - Executes dropped EXE
  PID:2896
- C:\Windows\System\EKWfGEA.exe
  C:\Windows\System\EKWfGEA.exe
  2⤵
  - Executes dropped EXE
  PID:2772
- C:\Windows\System\jSroUmX.exe
  C:\Windows\System\jSroUmX.exe
  2⤵
  - Executes dropped EXE
  PID:2868
- C:\Windows\System\gCydcig.exe
  C:\Windows\System\gCydcig.exe
  2⤵
  - Executes dropped EXE
  PID:2132
- C:\Windows\System\kxrHJQj.exe
  C:\Windows\System\kxrHJQj.exe
  2⤵
  - Executes dropped EXE
  PID:2860
- C:\Windows\System\iEodkzR.exe
  C:\Windows\System\iEodkzR.exe
  2⤵
  - Executes dropped EXE
  PID:2856
- C:\Windows\System\tJVOCIA.exe
  C:\Windows\System\tJVOCIA.exe
  2⤵
  - Executes dropped EXE
  PID:2680
- C:\Windows\System\ISesXdZ.exe
  C:\Windows\System\ISesXdZ.exe
  2⤵
  - Executes dropped EXE
  PID:2740
- C:\Windows\System\ARkOaNs.exe
  C:\Windows\System\ARkOaNs.exe
  2⤵
  - Executes dropped EXE
  PID:2272
- C:\Windows\System\PLESewz.exe
  C:\Windows\System\PLESewz.exe
  2⤵
  - Executes dropped EXE
  PID:2292
- C:\Windows\System\kdDHTTL.exe
  C:\Windows\System\kdDHTTL.exe
  2⤵
  - Executes dropped EXE
  PID:2644
- C:\Windows\System\biaPMhj.exe
  C:\Windows\System\biaPMhj.exe
  2⤵
  - Executes dropped EXE
  PID:580
- C:\Windows\System\HTatMOc.exe
  C:\Windows\System\HTatMOc.exe
  2⤵
  - Executes dropped EXE
  PID:1196
- C:\Windows\System\VmqRRpX.exe
  C:\Windows\System\VmqRRpX.exe
  2⤵
  - Executes dropped EXE
  PID:2448
- C:\Windows\System\HFfXDIV.exe
  C:\Windows\System\HFfXDIV.exe
  2⤵
  - Executes dropped EXE
  PID:2244
- C:\Windows\System\kXfiKIx.exe
  C:\Windows\System\kXfiKIx.exe
  2⤵
  - Executes dropped EXE
  PID:1732
- C:\Windows\System\SclFMbi.exe
  C:\Windows\System\SclFMbi.exe
  2⤵
  - Executes dropped EXE
  PID:2956
- C:\Windows\System\hwnmPYX.exe
  C:\Windows\System\hwnmPYX.exe
  2⤵
  - Executes dropped EXE
  PID:1472
- C:\Windows\System\rlTLNKl.exe
  C:\Windows\System\rlTLNKl.exe
  2⤵
  - Executes dropped EXE
  PID:2752
- C:\Windows\System\IGKIAYK.exe
  C:\Windows\System\IGKIAYK.exe
  2⤵
  - Executes dropped EXE
  PID:2996
- C:\Windows\System\eINhFpb.exe
  C:\Windows\System\eINhFpb.exe
  2⤵
  - Executes dropped EXE
  PID:2512
- C:\Windows\System\LoTWrxN.exe
  C:\Windows\System\LoTWrxN.exe
  2⤵
  - Executes dropped EXE
  PID:1976
- C:\Windows\System\rcvokSe.exe
  C:\Windows\System\rcvokSe.exe
  2⤵
  - Executes dropped EXE
  PID:2964
- C:\Windows\System\rrLdKSd.exe
  C:\Windows\System\rrLdKSd.exe
  2⤵
  - Executes dropped EXE
  PID:1664
- C:\Windows\System\dzqqanC.exe
  C:\Windows\System\dzqqanC.exe
  2⤵
  - Executes dropped EXE
  PID:1312
- C:\Windows\System\FndcThL.exe
  C:\Windows\System\FndcThL.exe
  2⤵
  - Executes dropped EXE
  PID:2232
- C:\Windows\System\kbxuGaZ.exe
  C:\Windows\System\kbxuGaZ.exe
  2⤵
  - Executes dropped EXE
  PID:2084
- C:\Windows\System\rvuMSmd.exe
  C:\Windows\System\rvuMSmd.exe
  2⤵
  - Executes dropped EXE
  PID:2064
- C:\Windows\System\DHUnXkT.exe
  C:\Windows\System\DHUnXkT.exe
  2⤵
  - Executes dropped EXE
  PID:1528
- C:\Windows\System\mrpFGcj.exe
  C:\Windows\System\mrpFGcj.exe
  2⤵
  - Executes dropped EXE
  PID:2400
- C:\Windows\System\FwXEeLk.exe
  C:\Windows\System\FwXEeLk.exe
  2⤵
  - Executes dropped EXE
  PID:2108
- C:\Windows\System\ABdLxOb.exe
  C:\Windows\System\ABdLxOb.exe
  2⤵
  - Executes dropped EXE
  PID:2236
- C:\Windows\System\MzpDaDw.exe
  C:\Windows\System\MzpDaDw.exe
  2⤵
  - Executes dropped EXE
  PID:1872
- C:\Windows\System\HiodJRC.exe
  C:\Windows\System\HiodJRC.exe
  2⤵
  - Executes dropped EXE
  PID:2364
- C:\Windows\System\gylCOpF.exe
  C:\Windows\System\gylCOpF.exe
  2⤵
  - Executes dropped EXE
  PID:1684
- C:\Windows\System\GdnZwTM.exe
  C:\Windows\System\GdnZwTM.exe
  2⤵
  - Executes dropped EXE
  PID:1876
- C:\Windows\System\koIMuvo.exe
  C:\Windows\System\koIMuvo.exe
  2⤵
  - Executes dropped EXE
  PID:2508
- C:\Windows\System\FsLbmgN.exe
  C:\Windows\System\FsLbmgN.exe
  2⤵
  - Executes dropped EXE
  PID:2504
- C:\Windows\System\kEEtYpy.exe
  C:\Windows\System\kEEtYpy.exe
  2⤵
  - Executes dropped EXE
  PID:2216
- C:\Windows\System\FwPIgRF.exe
  C:\Windows\System\FwPIgRF.exe
  2⤵
  - Executes dropped EXE
  PID:2068
- C:\Windows\System\BQWmzlz.exe
  C:\Windows\System\BQWmzlz.exe
  2⤵
  - Executes dropped EXE
  PID:1308
- C:\Windows\System\YOzrBaR.exe
  C:\Windows\System\YOzrBaR.exe
  2⤵
  - Executes dropped EXE
  PID:2164
- C:\Windows\System\ywAUXEn.exe
  C:\Windows\System\ywAUXEn.exe
  2⤵
  - Executes dropped EXE
  PID:2560
- C:\Windows\System\ncSBFtO.exe
  C:\Windows\System\ncSBFtO.exe
  2⤵
  - Executes dropped EXE
  PID:1368
- C:\Windows\System\RqehBwM.exe
  C:\Windows\System\RqehBwM.exe
  2⤵
  - Executes dropped EXE
  PID:928
- C:\Windows\System\NyMneTm.exe
  C:\Windows\System\NyMneTm.exe
  2⤵
  - Executes dropped EXE
  PID:700
- C:\Windows\System\PiShKAE.exe
  C:\Windows\System\PiShKAE.exe
  2⤵
  - Executes dropped EXE
  PID:2564
- C:\Windows\System\YwldkDh.exe
  C:\Windows\System\YwldkDh.exe
  2⤵
  - Executes dropped EXE
  PID:1008
- C:\Windows\System\sCHYaqS.exe
  C:\Windows\System\sCHYaqS.exe
  2⤵
  - Executes dropped EXE
  PID:968
- C:\Windows\System\VKJEnQP.exe
  C:\Windows\System\VKJEnQP.exe
  2⤵
  - Executes dropped EXE
  PID:328
- C:\Windows\System\KwGPHXW.exe
  C:\Windows\System\KwGPHXW.exe
  2⤵
  - Executes dropped EXE
  PID:1380
- C:\Windows\System\axcYfyU.exe
  C:\Windows\System\axcYfyU.exe
  2⤵
  - Executes dropped EXE
  PID:1800
- C:\Windows\System\RlRuxUQ.exe
  C:\Windows\System\RlRuxUQ.exe
  2⤵
  - Executes dropped EXE
  PID:552
- C:\Windows\System\doSuLlb.exe
  C:\Windows\System\doSuLlb.exe
  2⤵
  - Executes dropped EXE
  PID:1764
- C:\Windows\System\lHBntCs.exe
  C:\Windows\System\lHBntCs.exe
  2⤵
  - Executes dropped EXE
  PID:860
- C:\Windows\System\DujdKHR.exe
  C:\Windows\System\DujdKHR.exe
  2⤵
  - Executes dropped EXE
  PID:1740
- C:\Windows\System\PlSKapD.exe
  C:\Windows\System\PlSKapD.exe
  2⤵
  - Executes dropped EXE
  PID:916
- C:\Windows\System\XikHrZm.exe
  C:\Windows\System\XikHrZm.exe
  2⤵
  - Executes dropped EXE
  PID:1868
- C:\Windows\System\TTmjuua.exe
  C:\Windows\System\TTmjuua.exe
  2⤵
  - Executes dropped EXE
  PID:2004
- C:\Windows\System\LmjIDGS.exe
  C:\Windows\System\LmjIDGS.exe
  2⤵
  - Executes dropped EXE
  PID:2616
- C:\Windows\System\zkpEGjh.exe
  C:\Windows\System\zkpEGjh.exe
  2⤵
  PID:1648
- C:\Windows\System\qwUcQRJ.exe
  C:\Windows\System\qwUcQRJ.exe
  2⤵
  PID:2240
- C:\Windows\System\RtjTQdI.exe
  C:\Windows\System\RtjTQdI.exe
  2⤵
  PID:1652
- C:\Windows\System\YfvaTwx.exe
  C:\Windows\System\YfvaTwx.exe
  2⤵
  PID:1152
- C:\Windows\System\DixxXGz.exe
  C:\Windows\System\DixxXGz.exe
  2⤵
  PID:568
- C:\Windows\System\qOzoSpY.exe
  C:\Windows\System\qOzoSpY.exe
  2⤵
  PID:2532
- C:\Windows\System\wUjvJcb.exe
  C:\Windows\System\wUjvJcb.exe
  2⤵
  PID:1568
- C:\Windows\System\zeecWCj.exe
  C:\Windows\System\zeecWCj.exe
  2⤵
  PID:1080
- C:\Windows\System\wTMPOLf.exe
  C:\Windows\System\wTMPOLf.exe
  2⤵
  PID:880
- C:\Windows\System\XifkwaB.exe
  C:\Windows\System\XifkwaB.exe
  2⤵
  PID:2584
- C:\Windows\System\kKOgiaZ.exe
  C:\Windows\System\kKOgiaZ.exe
  2⤵
  PID:2312
- C:\Windows\System\EQgPmts.exe
  C:\Windows\System\EQgPmts.exe
  2⤵
  PID:1584
- C:\Windows\System\UPrbgFx.exe
  C:\Windows\System\UPrbgFx.exe
  2⤵
  PID:1720
- C:\Windows\System\xSjiWtL.exe
  C:\Windows\System\xSjiWtL.exe
  2⤵
  PID:2148
- C:\Windows\System\BgvzyUx.exe
  C:\Windows\System\BgvzyUx.exe
  2⤵
  PID:2228
- C:\Windows\System\tHHqMMU.exe
  C:\Windows\System\tHHqMMU.exe
  2⤵
  PID:2476
- C:\Windows\System\VrmzyAl.exe
  C:\Windows\System\VrmzyAl.exe
  2⤵
  PID:2940
- C:\Windows\System\MHWICzd.exe
  C:\Windows\System\MHWICzd.exe
  2⤵
  PID:1856
- C:\Windows\System\GqqDvYe.exe
  C:\Windows\System\GqqDvYe.exe
  2⤵
  PID:2804
- C:\Windows\System\tDHjpQr.exe
  C:\Windows\System\tDHjpQr.exe
  2⤵
  PID:2800
- C:\Windows\System\AkhGMfl.exe
  C:\Windows\System\AkhGMfl.exe
  2⤵
  PID:2668
- C:\Windows\System\ixXpySc.exe
  C:\Windows\System\ixXpySc.exe
  2⤵
  PID:2104
- C:\Windows\System\pQCRcyP.exe
  C:\Windows\System\pQCRcyP.exe
  2⤵
  PID:2156
- C:\Windows\System\BXKJeaQ.exe
  C:\Windows\System\BXKJeaQ.exe
  2⤵
  PID:2732
- C:\Windows\System\yJBXWeA.exe
  C:\Windows\System\yJBXWeA.exe
  2⤵
  PID:1708
- C:\Windows\System\owkxaIt.exe
  C:\Windows\System\owkxaIt.exe
  2⤵
  PID:2428
- C:\Windows\System\pHRBauq.exe
  C:\Windows\System\pHRBauq.exe
  2⤵
  PID:1744
- C:\Windows\System\rWIPIlq.exe
  C:\Windows\System\rWIPIlq.exe
  2⤵
  PID:2672
- C:\Windows\System\ctuVdpd.exe
  C:\Windows\System\ctuVdpd.exe
  2⤵
  PID:2652
- C:\Windows\System\wPHDHMI.exe
  C:\Windows\System\wPHDHMI.exe
  2⤵
  PID:2764
- C:\Windows\System\pOYoLTX.exe
  C:\Windows\System\pOYoLTX.exe
  2⤵
  PID:936
- C:\Windows\System\qYHweSt.exe
  C:\Windows\System\qYHweSt.exe
  2⤵
  PID:1964
- C:\Windows\System\GZslSiz.exe
  C:\Windows\System\GZslSiz.exe
  2⤵
  PID:2832
- C:\Windows\System\JUHImOO.exe
  C:\Windows\System\JUHImOO.exe
  2⤵
  PID:2176
- C:\Windows\System\GjfrGcj.exe
  C:\Windows\System\GjfrGcj.exe
  2⤵
  PID:2152
- C:\Windows\System\ENTyyva.exe
  C:\Windows\System\ENTyyva.exe
  2⤵
  PID:2664
- C:\Windows\System\KZrwvqy.exe
  C:\Windows\System\KZrwvqy.exe
  2⤵
  PID:2392
- C:\Windows\System\LaLsgaC.exe
  C:\Windows\System\LaLsgaC.exe
  2⤵
  PID:1812
- C:\Windows\System\mgdwHxL.exe
  C:\Windows\System\mgdwHxL.exe
  2⤵
  PID:2136
- C:\Windows\System\EJurpkz.exe
  C:\Windows\System\EJurpkz.exe
  2⤵
  PID:920
- C:\Windows\System\ckFPIoy.exe
  C:\Windows\System\ckFPIoy.exe
  2⤵
  PID:1580
- C:\Windows\System\TgokELH.exe
  C:\Windows\System\TgokELH.exe
  2⤵
  PID:996
- C:\Windows\System\ADaLCeo.exe
  C:\Windows\System\ADaLCeo.exe
  2⤵
  PID:1096
- C:\Windows\System\dLSuIci.exe
  C:\Windows\System\dLSuIci.exe
  2⤵
  PID:1692
- C:\Windows\System\QmsBoew.exe
  C:\Windows\System\QmsBoew.exe
  2⤵
  PID:2500
- C:\Windows\System\mCqzGCN.exe
  C:\Windows\System\mCqzGCN.exe
  2⤵
  PID:2440
- C:\Windows\System\RiuKQBg.exe
  C:\Windows\System\RiuKQBg.exe
  2⤵
  PID:1088
- C:\Windows\System\lfkJSMW.exe
  C:\Windows\System\lfkJSMW.exe
  2⤵
  PID:696
- C:\Windows\System\dGJpubj.exe
  C:\Windows\System\dGJpubj.exe
  2⤵
  PID:2852
- C:\Windows\System\aHCcHKs.exe
  C:\Windows\System\aHCcHKs.exe
  2⤵
  PID:2900
- C:\Windows\System\kYsQZyM.exe
  C:\Windows\System\kYsQZyM.exe
  2⤵
  PID:924
- C:\Windows\System\KwrEdvW.exe
  C:\Windows\System\KwrEdvW.exe
  2⤵
  PID:1356
- C:\Windows\System\zMUHLey.exe
  C:\Windows\System\zMUHLey.exe
  2⤵
  PID:3020
- C:\Windows\System\oGTFcWX.exe
  C:\Windows\System\oGTFcWX.exe
  2⤵
  PID:3024
- C:\Windows\System\EdJRIdU.exe
  C:\Windows\System\EdJRIdU.exe
  2⤵
  PID:2948
- C:\Windows\System\GajQtJW.exe
  C:\Windows\System\GajQtJW.exe
  2⤵
  PID:1060
- C:\Windows\System\qbllWLr.exe
  C:\Windows\System\qbllWLr.exe
  2⤵
  PID:2468
- C:\Windows\System\ruoiHWp.exe
  C:\Windows\System\ruoiHWp.exe
  2⤵
  PID:1988
- C:\Windows\System\sdYFNlb.exe
  C:\Windows\System\sdYFNlb.exe
  2⤵
  PID:1836
- C:\Windows\System\rzQXRPX.exe
  C:\Windows\System\rzQXRPX.exe
  2⤵
  PID:2248
- C:\Windows\System\AEEQFAH.exe
  C:\Windows\System\AEEQFAH.exe
  2⤵
  PID:1016
- C:\Windows\System\GbCqvHh.exe
  C:\Windows\System\GbCqvHh.exe
  2⤵
  PID:2112
- C:\Windows\System\aOzrmpw.exe
  C:\Windows\System\aOzrmpw.exe
  2⤵
  PID:2212
- C:\Windows\System\uxRNflw.exe
  C:\Windows\System\uxRNflw.exe
  2⤵
  PID:1532
- C:\Windows\System\xuAMoFk.exe
  C:\Windows\System\xuAMoFk.exe
  2⤵
  PID:1756
- C:\Windows\System\AcZBnYI.exe
  C:\Windows\System\AcZBnYI.exe
  2⤵
  PID:820
- C:\Windows\System\JZeBEoE.exe
  C:\Windows\System\JZeBEoE.exe
  2⤵
  PID:1672
- C:\Windows\System\WHzfHyn.exe
  C:\Windows\System\WHzfHyn.exe
  2⤵
  PID:1752
- C:\Windows\System\djjPapv.exe
  C:\Windows\System\djjPapv.exe
  2⤵
  PID:3064
- C:\Windows\System\SCJArPT.exe
  C:\Windows\System\SCJArPT.exe
  2⤵
  PID:2636
- C:\Windows\System\lEPJyCd.exe
  C:\Windows\System\lEPJyCd.exe
  2⤵
  PID:952
- C:\Windows\System\IKftLJi.exe
  C:\Windows\System\IKftLJi.exe
  2⤵
  PID:1564
- C:\Windows\System\PlRKleV.exe
  C:\Windows\System\PlRKleV.exe
  2⤵
  PID:2144
- C:\Windows\System\SstaUdN.exe
  C:\Windows\System\SstaUdN.exe
  2⤵
  PID:2052
- C:\Windows\System\AQMXVSx.exe
  C:\Windows\System\AQMXVSx.exe
  2⤵
  PID:2540
- C:\Windows\System\XsLdyaC.exe
  C:\Windows\System\XsLdyaC.exe
  2⤵
  PID:2932
- C:\Windows\System\NRRFlcZ.exe
  C:\Windows\System\NRRFlcZ.exe
  2⤵
  PID:2872
- C:\Windows\System\yzfJczE.exe
  C:\Windows\System\yzfJczE.exe
  2⤵
  PID:2828
- C:\Windows\System\ldkLSRN.exe
  C:\Windows\System\ldkLSRN.exe
  2⤵
  PID:760
- C:\Windows\System\nISmSOa.exe
  C:\Windows\System\nISmSOa.exe
  2⤵
  PID:2352
- C:\Windows\System\yCyFyQA.exe
  C:\Windows\System\yCyFyQA.exe
  2⤵
  PID:2776
- C:\Windows\System\EJUjiQb.exe
  C:\Windows\System\EJUjiQb.exe
  2⤵
  PID:2696
- C:\Windows\System\eRUpFOS.exe
  C:\Windows\System\eRUpFOS.exe
  2⤵
  PID:864
- C:\Windows\System\YOnUZdw.exe
  C:\Windows\System\YOnUZdw.exe
  2⤵
  PID:440
- C:\Windows\System\ntHaavr.exe
  C:\Windows\System\ntHaavr.exe
  2⤵
  PID:2036
- C:\Windows\System\rZmrZBI.exe
  C:\Windows\System\rZmrZBI.exe
  2⤵
  PID:1592
- C:\Windows\System\LWFuRyS.exe
  C:\Windows\System\LWFuRyS.exe
  2⤵
  PID:1628
- C:\Windows\System\QZoVUiW.exe
  C:\Windows\System\QZoVUiW.exe
  2⤵
  PID:1608
- C:\Windows\System\abFercs.exe
  C:\Windows\System\abFercs.exe
  2⤵
  PID:2712
- C:\Windows\System\egLiHFN.exe
  C:\Windows\System\egLiHFN.exe
  2⤵
  PID:2648
- C:\Windows\System\cPhjUhm.exe
  C:\Windows\System\cPhjUhm.exe
  2⤵
  PID:3032
- C:\Windows\System\PUGEAbR.exe
  C:\Windows\System\PUGEAbR.exe
  2⤵
  PID:824
- C:\Windows\System\zdcWniE.exe
  C:\Windows\System\zdcWniE.exe
  2⤵
  PID:1212
- C:\Windows\System\GmuBLEL.exe
  C:\Windows\System\GmuBLEL.exe
  2⤵
  PID:976
- C:\Windows\System\dwDOCms.exe
  C:\Windows\System\dwDOCms.exe
  2⤵
  PID:2660
- C:\Windows\System\qOJacQR.exe
  C:\Windows\System\qOJacQR.exe
  2⤵
  PID:1204
- C:\Windows\System\KbgTqJs.exe
  C:\Windows\System\KbgTqJs.exe
  2⤵
  PID:2552
- C:\Windows\System\dNfQRWI.exe
  C:\Windows\System\dNfQRWI.exe
  2⤵
  PID:560
- C:\Windows\System\AKJvplH.exe
  C:\Windows\System\AKJvplH.exe
  2⤵
  PID:1712
- C:\Windows\System\nRJxEdT.exe
  C:\Windows\System\nRJxEdT.exe
  2⤵
  PID:3000
- C:\Windows\System\AkfPvEN.exe
  C:\Windows\System\AkfPvEN.exe
  2⤵
  PID:2588
- C:\Windows\System\lVLaggI.exe
  C:\Windows\System\lVLaggI.exe
  2⤵
  PID:972
- C:\Windows\System\aCJuhlm.exe
  C:\Windows\System\aCJuhlm.exe
  2⤵
  PID:848
- C:\Windows\System\TaOnagm.exe
  C:\Windows\System\TaOnagm.exe
  2⤵
  PID:1288
- C:\Windows\System\nCiHDOx.exe
  C:\Windows\System\nCiHDOx.exe
  2⤵
  PID:1400
- C:\Windows\System\KVyuFBd.exe
  C:\Windows\System\KVyuFBd.exe
  2⤵
  PID:584
- C:\Windows\System\YkJvzxb.exe
  C:\Windows\System\YkJvzxb.exe
  2⤵
  PID:2012
- C:\Windows\System\rIwgVnh.exe
  C:\Windows\System\rIwgVnh.exe
  2⤵
  PID:2944
- C:\Windows\System\cEJeZKg.exe
  C:\Windows\System\cEJeZKg.exe
  2⤵
  PID:1144
- C:\Windows\System\bhFSUSE.exe
  C:\Windows\System\bhFSUSE.exe
  2⤵
  PID:2788
- C:\Windows\System\DaFMTTv.exe
  C:\Windows\System\DaFMTTv.exe
  2⤵
  PID:2184
- C:\Windows\System\caUKHxW.exe
  C:\Windows\System\caUKHxW.exe
  2⤵
  PID:1804
- C:\Windows\System\IkDwpux.exe
  C:\Windows\System\IkDwpux.exe
  2⤵
  PID:2528
- C:\Windows\System\wlzKfsO.exe
  C:\Windows\System\wlzKfsO.exe
  2⤵
  PID:2880
- C:\Windows\System\TTBtXlJ.exe
  C:\Windows\System\TTBtXlJ.exe
  2⤵
  PID:2848
- C:\Windows\System\PVtTkJO.exe
  C:\Windows\System\PVtTkJO.exe
  2⤵
  PID:1504
- C:\Windows\System\KTLvDRv.exe
  C:\Windows\System\KTLvDRv.exe
  2⤵
  PID:1236
- C:\Windows\System\CidRKdN.exe
  C:\Windows\System\CidRKdN.exe
  2⤵
  PID:2340
- C:\Windows\System\hgYaRod.exe
  C:\Windows\System\hgYaRod.exe
  2⤵
  PID:3028
- C:\Windows\System\DwkTefw.exe
  C:\Windows\System\DwkTefw.exe
  2⤵
  PID:1588
- C:\Windows\System\ZPZrFPc.exe
  C:\Windows\System\ZPZrFPc.exe
  2⤵
  PID:2444
- C:\Windows\System\ZBUvufX.exe
  C:\Windows\System\ZBUvufX.exe
  2⤵
  PID:1864
- C:\Windows\System\YzRwIjN.exe
  C:\Windows\System\YzRwIjN.exe
  2⤵
  PID:3080
- C:\Windows\System\fmNEBdM.exe
  C:\Windows\System\fmNEBdM.exe
  2⤵
  PID:3100
- C:\Windows\System\SAFDDOC.exe
  C:\Windows\System\SAFDDOC.exe
  2⤵
  PID:3124
- C:\Windows\System\AglIYVN.exe
  C:\Windows\System\AglIYVN.exe
  2⤵
  PID:3140
- C:\Windows\System\PHoLbDE.exe
  C:\Windows\System\PHoLbDE.exe
  2⤵
  PID:3164
- C:\Windows\System\iFVfjTO.exe
  C:\Windows\System\iFVfjTO.exe
  2⤵
  PID:3180
- C:\Windows\System\tLmnmwE.exe
  C:\Windows\System\tLmnmwE.exe
  2⤵
  PID:3204
- C:\Windows\System\vShAidD.exe
  C:\Windows\System\vShAidD.exe
  2⤵
  PID:3224
- C:\Windows\System\OgDcfSI.exe
  C:\Windows\System\OgDcfSI.exe
  2⤵
  PID:3240
- C:\Windows\System\zyXsQlH.exe
  C:\Windows\System\zyXsQlH.exe
  2⤵
  PID:3260
- C:\Windows\System\MUUbvig.exe
  C:\Windows\System\MUUbvig.exe
  2⤵
  PID:3280
- C:\Windows\System\OMKpKtQ.exe
  C:\Windows\System\OMKpKtQ.exe
  2⤵
  PID:3296
- C:\Windows\System\JHXrBAp.exe
  C:\Windows\System\JHXrBAp.exe
  2⤵
  PID:3316
- C:\Windows\System\dcHczup.exe
  C:\Windows\System\dcHczup.exe
  2⤵
  PID:3336
- C:\Windows\System\GIqNoGK.exe
  C:\Windows\System\GIqNoGK.exe
  2⤵
  PID:3352
- C:\Windows\System\FuQsbKt.exe
  C:\Windows\System\FuQsbKt.exe
  2⤵
  PID:3376
- C:\Windows\System\FzRjMEZ.exe
  C:\Windows\System\FzRjMEZ.exe
  2⤵
  PID:3392
- C:\Windows\System\xDVzIHW.exe
  C:\Windows\System\xDVzIHW.exe
  2⤵
  PID:3408
- C:\Windows\System\QAsBxNV.exe
  C:\Windows\System\QAsBxNV.exe
  2⤵
  PID:3432
- C:\Windows\System\vTOUuqo.exe
  C:\Windows\System\vTOUuqo.exe
  2⤵
  PID:3456
- C:\Windows\System\Zxpfkfj.exe
  C:\Windows\System\Zxpfkfj.exe
  2⤵
  PID:3484
- C:\Windows\System\HWjAoSg.exe
  C:\Windows\System\HWjAoSg.exe
  2⤵
  PID:3500
- C:\Windows\System\afvyTrN.exe
  C:\Windows\System\afvyTrN.exe
  2⤵
  PID:3516
- C:\Windows\System\lIYBuXB.exe
  C:\Windows\System\lIYBuXB.exe
  2⤵
  PID:3532
- C:\Windows\System\jIYFHrj.exe
  C:\Windows\System\jIYFHrj.exe
  2⤵
  PID:3548
- C:\Windows\System\fnbFana.exe
  C:\Windows\System\fnbFana.exe
  2⤵
  PID:3564
- C:\Windows\System\wWELYRu.exe
  C:\Windows\System\wWELYRu.exe
  2⤵
  PID:3584
- C:\Windows\System\TwCGqMd.exe
  C:\Windows\System\TwCGqMd.exe
  2⤵
  PID:3620
- C:\Windows\System\nyFnfvs.exe
  C:\Windows\System\nyFnfvs.exe
  2⤵
  PID:3640
- C:\Windows\System\fcIWRZQ.exe
  C:\Windows\System\fcIWRZQ.exe
  2⤵
  PID:3656
- C:\Windows\System\dlNkGWm.exe
  C:\Windows\System\dlNkGWm.exe
  2⤵
  PID:3672
- C:\Windows\System\kBgcwxl.exe
  C:\Windows\System\kBgcwxl.exe
  2⤵
  PID:3704
- C:\Windows\System\RUTnEff.exe
  C:\Windows\System\RUTnEff.exe
  2⤵
  PID:3720
- C:\Windows\System\WJTlYPG.exe
  C:\Windows\System\WJTlYPG.exe
  2⤵
  PID:3736
- C:\Windows\System\ohkIwpw.exe
  C:\Windows\System\ohkIwpw.exe
  2⤵
  PID:3756
- C:\Windows\System\DMszRZp.exe
  C:\Windows\System\DMszRZp.exe
  2⤵
  PID:3780
- C:\Windows\System\gxegaxD.exe
  C:\Windows\System\gxegaxD.exe
  2⤵
  PID:3800
- C:\Windows\System\DsCxdCx.exe
  C:\Windows\System\DsCxdCx.exe
  2⤵
  PID:3820
- C:\Windows\System\cvZAvMA.exe
  C:\Windows\System\cvZAvMA.exe
  2⤵
  PID:3840
- C:\Windows\System\GOSCnpP.exe
  C:\Windows\System\GOSCnpP.exe
  2⤵
  PID:3856
- C:\Windows\System\wKxFYoz.exe
  C:\Windows\System\wKxFYoz.exe
  2⤵
  PID:3880
- C:\Windows\System\SunMooT.exe
  C:\Windows\System\SunMooT.exe
  2⤵
  PID:3896
- C:\Windows\System\UnpzGEA.exe
  C:\Windows\System\UnpzGEA.exe
  2⤵
  PID:3912
- C:\Windows\System\WenAprH.exe
  C:\Windows\System\WenAprH.exe
  2⤵
  PID:3936
- C:\Windows\System\yGSgNKU.exe
  C:\Windows\System\yGSgNKU.exe
  2⤵
  PID:3952
- C:\Windows\System\TgFgtDt.exe
  C:\Windows\System\TgFgtDt.exe
  2⤵
  PID:3972
- C:\Windows\System\hDoFrAX.exe
  C:\Windows\System\hDoFrAX.exe
  2⤵
  PID:3988
- C:\Windows\System\TBzytNU.exe
  C:\Windows\System\TBzytNU.exe
  2⤵
  PID:4008
- C:\Windows\System\WJjYrvN.exe
  C:\Windows\System\WJjYrvN.exe
  2⤵
  PID:4032
- C:\Windows\System\plHarWl.exe
  C:\Windows\System\plHarWl.exe
  2⤵
  PID:4052
- C:\Windows\System\hYrJltB.exe
  C:\Windows\System\hYrJltB.exe
  2⤵
  PID:4072
- C:\Windows\System\riJRmXd.exe
  C:\Windows\System\riJRmXd.exe
  2⤵
  PID:4092
- C:\Windows\System\wRMNLtJ.exe
  C:\Windows\System\wRMNLtJ.exe
  2⤵
  PID:3088
- C:\Windows\System\oHrZGBy.exe
  C:\Windows\System\oHrZGBy.exe
  2⤵
  PID:3112
- C:\Windows\System\mMVfcfF.exe
  C:\Windows\System\mMVfcfF.exe
  2⤵
  PID:3156
- C:\Windows\System\EAHqCZw.exe
  C:\Windows\System\EAHqCZw.exe
  2⤵
  PID:3216
- C:\Windows\System\bewYNYC.exe
  C:\Windows\System\bewYNYC.exe
  2⤵
  PID:3248
- C:\Windows\System\QSkKQzc.exe
  C:\Windows\System\QSkKQzc.exe
  2⤵
  PID:3272
- C:\Windows\System\PfZVyOw.exe
  C:\Windows\System\PfZVyOw.exe
  2⤵
  PID:3312
- C:\Windows\System\Mvfdxdm.exe
  C:\Windows\System\Mvfdxdm.exe
  2⤵
  PID:3328
- C:\Windows\System\llDmDvo.exe
  C:\Windows\System\llDmDvo.exe
  2⤵
  PID:3364
- C:\Windows\System\JLvGPwq.exe
  C:\Windows\System\JLvGPwq.exe
  2⤵
  PID:3420
- C:\Windows\System\MqpYEgn.exe
  C:\Windows\System\MqpYEgn.exe
  2⤵
  PID:3444
- C:\Windows\System\gwWGMmF.exe
  C:\Windows\System\gwWGMmF.exe
  2⤵
  PID:3464
- C:\Windows\System\BuNNOwo.exe
  C:\Windows\System\BuNNOwo.exe
  2⤵
  PID:3528
- C:\Windows\System\VobEaWG.exe
  C:\Windows\System\VobEaWG.exe
  2⤵
  PID:3592
- C:\Windows\System\VEUtjqi.exe
  C:\Windows\System\VEUtjqi.exe
  2⤵
  PID:3540
- C:\Windows\System\IfHaqMn.exe
  C:\Windows\System\IfHaqMn.exe
  2⤵
  PID:3572
- C:\Windows\System\gfxuijm.exe
  C:\Windows\System\gfxuijm.exe
  2⤵
  PID:3680
- C:\Windows\System\cCmLewM.exe
  C:\Windows\System\cCmLewM.exe
  2⤵
  PID:3668
- C:\Windows\System\JuFWSXb.exe
  C:\Windows\System\JuFWSXb.exe
  2⤵
  PID:3688
- C:\Windows\System\zHWpkJu.exe
  C:\Windows\System\zHWpkJu.exe
  2⤵
  PID:2516
- C:\Windows\System\kJjwFmU.exe
  C:\Windows\System\kJjwFmU.exe
  2⤵
  PID:3788
- C:\Windows\System\kzcxaAB.exe
  C:\Windows\System\kzcxaAB.exe
  2⤵
  PID:3776
- C:\Windows\System\UWfYIGp.exe
  C:\Windows\System\UWfYIGp.exe
  2⤵
  PID:3816
- C:\Windows\System\tkclRwW.exe
  C:\Windows\System\tkclRwW.exe
  2⤵
  PID:3892
- C:\Windows\System\gAohlYc.exe
  C:\Windows\System\gAohlYc.exe
  2⤵
  PID:3928
- C:\Windows\System\QudYKCh.exe
  C:\Windows\System\QudYKCh.exe
  2⤵
  PID:3904
- C:\Windows\System\zjzoJjE.exe
  C:\Windows\System\zjzoJjE.exe
  2⤵
  PID:3864
- C:\Windows\System\KWaNlyR.exe
  C:\Windows\System\KWaNlyR.exe
  2⤵
  PID:3980
- C:\Windows\System\saPSymC.exe
  C:\Windows\System\saPSymC.exe
  2⤵
  PID:4048
- C:\Windows\System\HJkFKhH.exe
  C:\Windows\System\HJkFKhH.exe
  2⤵
  PID:4064
- C:\Windows\System\rEafNRC.exe
  C:\Windows\System\rEafNRC.exe
  2⤵
  PID:3148
- C:\Windows\System\uiOvFZS.exe
  C:\Windows\System\uiOvFZS.exe
  2⤵
  PID:3108
- C:\Windows\System\AEmWWSY.exe
  C:\Windows\System\AEmWWSY.exe
  2⤵
  PID:3196
- C:\Windows\System\slbIJBC.exe
  C:\Windows\System\slbIJBC.exe
  2⤵
  PID:3172
- C:\Windows\System\enzPRAU.exe
  C:\Windows\System\enzPRAU.exe
  2⤵
  PID:3252
- C:\Windows\System\HbuwYhv.exe
  C:\Windows\System\HbuwYhv.exe
  2⤵
  PID:3308
- C:\Windows\System\GLxSkDo.exe
  C:\Windows\System\GLxSkDo.exe
  2⤵
  PID:3400
- C:\Windows\System\tKfRVJL.exe
  C:\Windows\System\tKfRVJL.exe
  2⤵
  PID:3348
- C:\Windows\System\dAHlchB.exe
  C:\Windows\System\dAHlchB.exe
  2⤵
  PID:3512
- C:\Windows\System\BtaUoUA.exe
  C:\Windows\System\BtaUoUA.exe
  2⤵
  PID:3560
- C:\Windows\System\PhgnqcN.exe
  C:\Windows\System\PhgnqcN.exe
  2⤵
  PID:3608
- C:\Windows\System\IHOkEzu.exe
  C:\Windows\System\IHOkEzu.exe
  2⤵
  PID:3700
- C:\Windows\System\QZKlaQf.exe
  C:\Windows\System\QZKlaQf.exe
  2⤵
  PID:3716
- C:\Windows\System\xybMMLC.exe
  C:\Windows\System\xybMMLC.exe
  2⤵
  PID:3728
- C:\Windows\System\zxbtQuE.exe
  C:\Windows\System\zxbtQuE.exe
  2⤵
  PID:3872
- C:\Windows\System\IsZmmLG.exe
  C:\Windows\System\IsZmmLG.exe
  2⤵
  PID:4020
- C:\Windows\System\SeeocaD.exe
  C:\Windows\System\SeeocaD.exe
  2⤵
  PID:3116
- C:\Windows\System\HIvZzKw.exe
  C:\Windows\System\HIvZzKw.exe
  2⤵
  PID:4004
- C:\Windows\System\vEpVjpU.exe
  C:\Windows\System\vEpVjpU.exe
  2⤵
  PID:3384
- C:\Windows\System\RjlyiBh.exe
  C:\Windows\System\RjlyiBh.exe
  2⤵
  PID:3492
- C:\Windows\System\Fqipyrh.exe
  C:\Windows\System\Fqipyrh.exe
  2⤵
  PID:3468
- C:\Windows\System\gBPJUKe.exe
  C:\Windows\System\gBPJUKe.exe
  2⤵
  PID:3192
- C:\Windows\System\cLYxKZf.exe
  C:\Windows\System\cLYxKZf.exe
  2⤵
  PID:3440
- C:\Windows\System\wrGOxLg.exe
  C:\Windows\System\wrGOxLg.exe
  2⤵
  PID:3604
- C:\Windows\System\NThJVMr.exe
  C:\Windows\System\NThJVMr.exe
  2⤵
  PID:3752
- C:\Windows\System\fSnabel.exe
  C:\Windows\System\fSnabel.exe
  2⤵
  PID:4088
- C:\Windows\System\AtCWdAb.exe
  C:\Windows\System\AtCWdAb.exe
  2⤵
  PID:3960
- C:\Windows\System\AKaXMAo.exe
  C:\Windows\System\AKaXMAo.exe
  2⤵
  PID:3924
- C:\Windows\System\ZjdMMTW.exe
  C:\Windows\System\ZjdMMTW.exe
  2⤵
  PID:3188
- C:\Windows\System\kTxLdIK.exe
  C:\Windows\System\kTxLdIK.exe
  2⤵
  PID:3428
- C:\Windows\System\FKrLLsc.exe
  C:\Windows\System\FKrLLsc.exe
  2⤵
  PID:3616
- C:\Windows\System\aURQmyk.exe
  C:\Windows\System\aURQmyk.exe
  2⤵
  PID:1660
- C:\Windows\System\XgsiseV.exe
  C:\Windows\System\XgsiseV.exe
  2⤵
  PID:3764
- C:\Windows\System\iiVXKgc.exe
  C:\Windows\System\iiVXKgc.exe
  2⤵
  PID:3812
- C:\Windows\System\IvHWhMt.exe
  C:\Windows\System\IvHWhMt.exe
  2⤵
  PID:3876
- C:\Windows\System\OIjdMHO.exe
  C:\Windows\System\OIjdMHO.exe
  2⤵
  PID:3524
- C:\Windows\System\DUIOJfw.exe
  C:\Windows\System\DUIOJfw.exe
  2⤵
  PID:3200
- C:\Windows\System\NIAEEcu.exe
  C:\Windows\System\NIAEEcu.exe
  2⤵
  PID:3948
- C:\Windows\System\QuJAFBr.exe
  C:\Windows\System\QuJAFBr.exe
  2⤵
  PID:3964
- C:\Windows\System\DpmspFc.exe
  C:\Windows\System\DpmspFc.exe
  2⤵
  PID:3748
- C:\Windows\System\pPlMomN.exe
  C:\Windows\System\pPlMomN.exe
  2⤵
  PID:3848
- C:\Windows\System\gkkliSo.exe
  C:\Windows\System\gkkliSo.exe
  2⤵
  PID:3636
- C:\Windows\System\pyPjvTF.exe
  C:\Windows\System\pyPjvTF.exe
  2⤵
  PID:4112
- C:\Windows\System\cmJgGTV.exe
  C:\Windows\System\cmJgGTV.exe
  2⤵
  PID:4128
- C:\Windows\System\BzuWMRM.exe
  C:\Windows\System\BzuWMRM.exe
  2⤵
  PID:4144
- C:\Windows\System\VbejSkr.exe
  C:\Windows\System\VbejSkr.exe
  2⤵
  PID:4168
- C:\Windows\System\beGPvXK.exe
  C:\Windows\System\beGPvXK.exe
  2⤵
  PID:4188
- C:\Windows\System\bBltRVS.exe
  C:\Windows\System\bBltRVS.exe
  2⤵
  PID:4212
- C:\Windows\System\CSWMDNF.exe
  C:\Windows\System\CSWMDNF.exe
  2⤵
  PID:4228
- C:\Windows\System\YMKHtkz.exe
  C:\Windows\System\YMKHtkz.exe
  2⤵
  PID:4264
- C:\Windows\System\YBahBnm.exe
  C:\Windows\System\YBahBnm.exe
  2⤵
  PID:4280
- C:\Windows\System\PHSNMrn.exe
  C:\Windows\System\PHSNMrn.exe
  2⤵
  PID:4300
- C:\Windows\System\kIvALrX.exe
  C:\Windows\System\kIvALrX.exe
  2⤵
  PID:4316
- C:\Windows\System\QaGHpUh.exe
  C:\Windows\System\QaGHpUh.exe
  2⤵
  PID:4332
- C:\Windows\System\XSwfKZU.exe
  C:\Windows\System\XSwfKZU.exe
  2⤵
  PID:4352
- C:\Windows\System\TOkFZjq.exe
  C:\Windows\System\TOkFZjq.exe
  2⤵
  PID:4368
- C:\Windows\System\OUVnQpO.exe
  C:\Windows\System\OUVnQpO.exe
  2⤵
  PID:4388
- C:\Windows\System\PLSoioX.exe
  C:\Windows\System\PLSoioX.exe
  2⤵
  PID:4428
- C:\Windows\System\GMwSdAx.exe
  C:\Windows\System\GMwSdAx.exe
  2⤵
  PID:4444
- C:\Windows\System\TMpWgdE.exe
  C:\Windows\System\TMpWgdE.exe
  2⤵
  PID:4460
- C:\Windows\System\goNKuAd.exe
  C:\Windows\System\goNKuAd.exe
  2⤵
  PID:4480
- C:\Windows\System\QSqfCwy.exe
  C:\Windows\System\QSqfCwy.exe
  2⤵
  PID:4504
- C:\Windows\System\XaUSXaX.exe
  C:\Windows\System\XaUSXaX.exe
  2⤵
  PID:4520
- C:\Windows\System\jljqiHX.exe
  C:\Windows\System\jljqiHX.exe
  2⤵
  PID:4536
- C:\Windows\System\wIKeXMG.exe
  C:\Windows\System\wIKeXMG.exe
  2⤵
  PID:4560
- C:\Windows\System\xnOtGFO.exe
  C:\Windows\System\xnOtGFO.exe
  2⤵
  PID:4580
- C:\Windows\System\tJrJqFD.exe
  C:\Windows\System\tJrJqFD.exe
  2⤵
  PID:4600
- C:\Windows\System\KIUZkzN.exe
  C:\Windows\System\KIUZkzN.exe
  2⤵
  PID:4616
- C:\Windows\System\smEfkFN.exe
  C:\Windows\System\smEfkFN.exe
  2⤵
  PID:4632
- C:\Windows\System\WHLYmxZ.exe
  C:\Windows\System\WHLYmxZ.exe
  2⤵
  PID:4652
- C:\Windows\System\xPNBset.exe
  C:\Windows\System\xPNBset.exe
  2⤵
  PID:4668
- C:\Windows\System\eNEBwoC.exe
  C:\Windows\System\eNEBwoC.exe
  2⤵
  PID:4684
- C:\Windows\System\kfPOAAo.exe
  C:\Windows\System\kfPOAAo.exe
  2⤵
  PID:4720
- C:\Windows\System\blyFvxe.exe
  C:\Windows\System\blyFvxe.exe
  2⤵
  PID:4736
- C:\Windows\System\eDsguyT.exe
  C:\Windows\System\eDsguyT.exe
  2⤵
  PID:4752
- C:\Windows\System\eaTggHh.exe
  C:\Windows\System\eaTggHh.exe
  2⤵
  PID:4768
- C:\Windows\System\FEaOfoh.exe
  C:\Windows\System\FEaOfoh.exe
  2⤵
  PID:4784
- C:\Windows\System\eIcmiYe.exe
  C:\Windows\System\eIcmiYe.exe
  2⤵
  PID:4800
- C:\Windows\System\RDpkmVg.exe
  C:\Windows\System\RDpkmVg.exe
  2⤵
  PID:4824
- C:\Windows\System\VSXixcz.exe
  C:\Windows\System\VSXixcz.exe
  2⤵
  PID:4848
- C:\Windows\System\FvXKQub.exe
  C:\Windows\System\FvXKQub.exe
  2⤵
  PID:4868
- C:\Windows\System\TbtuLMG.exe
  C:\Windows\System\TbtuLMG.exe
  2⤵
  PID:4888
- C:\Windows\System\pKQuFhc.exe
  C:\Windows\System\pKQuFhc.exe
  2⤵
  PID:4912
- C:\Windows\System\tDCZGoF.exe
  C:\Windows\System\tDCZGoF.exe
  2⤵
  PID:4928
- C:\Windows\System\JHWZdDh.exe
  C:\Windows\System\JHWZdDh.exe
  2⤵
  PID:4968
- C:\Windows\System\MIpKlOW.exe
  C:\Windows\System\MIpKlOW.exe
  2⤵
  PID:4984
- C:\Windows\System\ahUCGxT.exe
  C:\Windows\System\ahUCGxT.exe
  2⤵
  PID:5004
- C:\Windows\System\huIoLjL.exe
  C:\Windows\System\huIoLjL.exe
  2⤵
  PID:5028
- C:\Windows\System\XQDRKyi.exe
  C:\Windows\System\XQDRKyi.exe
  2⤵
  PID:5044
- C:\Windows\System\uoHYumx.exe
  C:\Windows\System\uoHYumx.exe
  2⤵
  PID:5064
- C:\Windows\System\WKibSCp.exe
  C:\Windows\System\WKibSCp.exe
  2⤵
  PID:5080
- C:\Windows\System\qhZLWIU.exe
  C:\Windows\System\qhZLWIU.exe
  2⤵
  PID:5100
- C:\Windows\System\RBaSDug.exe
  C:\Windows\System\RBaSDug.exe
  2⤵
  PID:3416
- C:\Windows\System\eNyKsio.exe
  C:\Windows\System\eNyKsio.exe
  2⤵
  PID:4104
- C:\Windows\System\dApcVzn.exe
  C:\Windows\System\dApcVzn.exe
  2⤵
  PID:4140
- C:\Windows\System\qJAFOfp.exe
  C:\Windows\System\qJAFOfp.exe
  2⤵
  PID:3808
- C:\Windows\System\fkTsCeO.exe
  C:\Windows\System\fkTsCeO.exe
  2⤵
  PID:4160
- C:\Windows\System\gxsFwuF.exe
  C:\Windows\System\gxsFwuF.exe
  2⤵
  PID:4224
- C:\Windows\System\zgLLbwO.exe
  C:\Windows\System\zgLLbwO.exe
  2⤵
  PID:4248
- C:\Windows\System\EaCfKEe.exe
  C:\Windows\System\EaCfKEe.exe
  2⤵
  PID:4276
- C:\Windows\System\XePEzFI.exe
  C:\Windows\System\XePEzFI.exe
  2⤵
  PID:4344
- C:\Windows\System\WQHgdSk.exe
  C:\Windows\System\WQHgdSk.exe
  2⤵
  PID:4380
- C:\Windows\System\WTgtpNY.exe
  C:\Windows\System\WTgtpNY.exe
  2⤵
  PID:4364
- C:\Windows\System\qOVuvAi.exe
  C:\Windows\System\qOVuvAi.exe
  2⤵
  PID:4404
- C:\Windows\System\BMuRNlS.exe
  C:\Windows\System\BMuRNlS.exe
  2⤵
  PID:4420
- C:\Windows\System\zHDEHmJ.exe
  C:\Windows\System\zHDEHmJ.exe
  2⤵
  PID:4440
- C:\Windows\System\HRyLsjB.exe
  C:\Windows\System\HRyLsjB.exe
  2⤵
  PID:4456
- C:\Windows\System\tGQzZMf.exe
  C:\Windows\System\tGQzZMf.exe
  2⤵
  PID:4492
- C:\Windows\System\yDWjWKI.exe
  C:\Windows\System\yDWjWKI.exe
  2⤵
  PID:4532
- C:\Windows\System\rYddesu.exe
  C:\Windows\System\rYddesu.exe
  2⤵
  PID:4624
- C:\Windows\System\KSZDTNl.exe
  C:\Windows\System\KSZDTNl.exe
  2⤵
  PID:4568
- C:\Windows\System\UIiRUwN.exe
  C:\Windows\System\UIiRUwN.exe
  2⤵
  PID:4780
- C:\Windows\System\XPJQCfF.exe
  C:\Windows\System\XPJQCfF.exe
  2⤵
  PID:4572
- C:\Windows\System\DFFcBMu.exe
  C:\Windows\System\DFFcBMu.exe
  2⤵
  PID:4832
- C:\Windows\System\XmcEiEx.exe
  C:\Windows\System\XmcEiEx.exe
  2⤵
  PID:4732
- C:\Windows\System\nREgacJ.exe
  C:\Windows\System\nREgacJ.exe
  2⤵
  PID:4644
- C:\Windows\System\qtyThIe.exe
  C:\Windows\System\qtyThIe.exe
  2⤵
  PID:4896
- C:\Windows\System\qNwLFeM.exe
  C:\Windows\System\qNwLFeM.exe
  2⤵
  PID:4908
- C:\Windows\System\DUjTKWo.exe
  C:\Windows\System\DUjTKWo.exe
  2⤵
  PID:4960
- C:\Windows\System\NtBolcw.exe
  C:\Windows\System\NtBolcw.exe
  2⤵
  PID:4876
- C:\Windows\System\IjIrLyv.exe
  C:\Windows\System\IjIrLyv.exe
  2⤵
  PID:4880
- C:\Windows\System\YJcQcIz.exe
  C:\Windows\System\YJcQcIz.exe
  2⤵
  PID:5112
- C:\Windows\System\nrBfvQM.exe
  C:\Windows\System\nrBfvQM.exe
  2⤵
  PID:3612
- C:\Windows\System\ILfpNeM.exe
  C:\Windows\System\ILfpNeM.exe
  2⤵
  PID:4152
- C:\Windows\System\XfegheY.exe
  C:\Windows\System\XfegheY.exe
  2⤵
  PID:5096
- C:\Windows\System\jWcniBy.exe
  C:\Windows\System\jWcniBy.exe
  2⤵
  PID:4312
- C:\Windows\System\kyrTHoc.exe
  C:\Windows\System\kyrTHoc.exe
  2⤵
  PID:4416
- C:\Windows\System\aAhPXet.exe
  C:\Windows\System\aAhPXet.exe
  2⤵
  PID:4476
- C:\Windows\System\mhIDRFb.exe
  C:\Windows\System\mhIDRFb.exe
  2⤵
  PID:4120
- C:\Windows\System\PTVfXhc.exe
  C:\Windows\System\PTVfXhc.exe
  2⤵
  PID:4348
- C:\Windows\System\WEFIDdA.exe
  C:\Windows\System\WEFIDdA.exe
  2⤵
  PID:4488
- C:\Windows\System\tIMsYbL.exe
  C:\Windows\System\tIMsYbL.exe
  2⤵
  PID:4256
- C:\Windows\System\mjZbQXQ.exe
  C:\Windows\System\mjZbQXQ.exe
  2⤵
  PID:4664
- C:\Windows\System\KPVqLpb.exe
  C:\Windows\System\KPVqLpb.exe
  2⤵
  PID:4696
- C:\Windows\System\aYnRvXy.exe
  C:\Windows\System\aYnRvXy.exe
  2⤵
  PID:4812
- C:\Windows\System\aaohBPf.exe
  C:\Windows\System\aaohBPf.exe
  2⤵
  PID:4764
- C:\Windows\System\MCyfHqH.exe
  C:\Windows\System\MCyfHqH.exe
  2⤵
  PID:4864
- C:\Windows\System\svaKbGV.exe
  C:\Windows\System\svaKbGV.exe
  2⤵
  PID:4748
- C:\Windows\System\MvHzLhH.exe
  C:\Windows\System\MvHzLhH.exe
  2⤵
  PID:4680
- C:\Windows\System\pjBWOCA.exe
  C:\Windows\System\pjBWOCA.exe
  2⤵
  PID:4956
- C:\Windows\System\htfvRgZ.exe
  C:\Windows\System\htfvRgZ.exe
  2⤵
  PID:4980
- C:\Windows\System\sHoZkMv.exe
  C:\Windows\System\sHoZkMv.exe
  2⤵
  PID:4996
- C:\Windows\System\RGGVsGl.exe
  C:\Windows\System\RGGVsGl.exe
  2⤵
  PID:5076
- C:\Windows\System\yjgyVFb.exe
  C:\Windows\System\yjgyVFb.exe
  2⤵
  PID:4288
- C:\Windows\System\hlJhitr.exe
  C:\Windows\System\hlJhitr.exe
  2⤵
  PID:4100
- C:\Windows\System\SlkHQTB.exe
  C:\Windows\System\SlkHQTB.exe
  2⤵
  PID:4436
- C:\Windows\System\xCkagad.exe
  C:\Windows\System\xCkagad.exe
  2⤵
  PID:4240
- C:\Windows\System\hTdFRNq.exe
  C:\Windows\System\hTdFRNq.exe
  2⤵
  PID:4200
- C:\Windows\System\FbLtmkD.exe
  C:\Windows\System\FbLtmkD.exe
  2⤵
  PID:4712
- C:\Windows\System\ZTGJkth.exe
  C:\Windows\System\ZTGJkth.exe
  2⤵
  PID:4648
- C:\Windows\System\VjSxOgX.exe
  C:\Windows\System\VjSxOgX.exe
  2⤵
  PID:4940
- C:\Windows\System\NbHOuYJ.exe
  C:\Windows\System\NbHOuYJ.exe
  2⤵
  PID:4924
- C:\Windows\System\WtXKniN.exe
  C:\Windows\System\WtXKniN.exe
  2⤵
  PID:5000
- C:\Windows\System\JunlDmf.exe
  C:\Windows\System\JunlDmf.exe
  2⤵
  PID:4820
- C:\Windows\System\DqzfBRB.exe
  C:\Windows\System\DqzfBRB.exe
  2⤵
  PID:4136
- C:\Windows\System\FkmWXng.exe
  C:\Windows\System\FkmWXng.exe
  2⤵
  PID:4296
- C:\Windows\System\JGYkufk.exe
  C:\Windows\System\JGYkufk.exe
  2⤵
  PID:5092
- C:\Windows\System\GMFShqT.exe
  C:\Windows\System\GMFShqT.exe
  2⤵
  PID:4596
- C:\Windows\System\HbRWHta.exe
  C:\Windows\System\HbRWHta.exe
  2⤵
  PID:5108
- C:\Windows\System\hNjeXRg.exe
  C:\Windows\System\hNjeXRg.exe
  2⤵
  PID:4976
- C:\Windows\System\fhMocQn.exe
  C:\Windows\System\fhMocQn.exe
  2⤵
  PID:5136
- C:\Windows\System\imkTSVI.exe
  C:\Windows\System\imkTSVI.exe
  2⤵
  PID:5152
- C:\Windows\System\WDmfeoy.exe
  C:\Windows\System\WDmfeoy.exe
  2⤵
  PID:5168
- C:\Windows\System\MYGLWYH.exe
  C:\Windows\System\MYGLWYH.exe
  2⤵
  PID:5188
- C:\Windows\System\KuuWRjO.exe
  C:\Windows\System\KuuWRjO.exe
  2⤵
  PID:5236
- C:\Windows\System\RIlFueC.exe
  C:\Windows\System\RIlFueC.exe
  2⤵
  PID:5252
- C:\Windows\System\FghIfjB.exe
  C:\Windows\System\FghIfjB.exe
  2⤵
  PID:5268
- C:\Windows\System\ErHbecm.exe
  C:\Windows\System\ErHbecm.exe
  2⤵
  PID:5284
- C:\Windows\System\RVOUGyr.exe
  C:\Windows\System\RVOUGyr.exe
  2⤵
  PID:5300
- C:\Windows\System\Wdhfucf.exe
  C:\Windows\System\Wdhfucf.exe
  2⤵
  PID:5320
- C:\Windows\System\JuSaRoK.exe
  C:\Windows\System\JuSaRoK.exe
  2⤵
  PID:5352
- C:\Windows\System\vTarCdm.exe
  C:\Windows\System\vTarCdm.exe
  2⤵
  PID:5368
- C:\Windows\System\umjfJRV.exe
  C:\Windows\System\umjfJRV.exe
  2⤵
  PID:5388
- C:\Windows\System\xJpltvE.exe
  C:\Windows\System\xJpltvE.exe
  2⤵
  PID:5404
- C:\Windows\System\jLnZuBM.exe
  C:\Windows\System\jLnZuBM.exe
  2⤵
  PID:5428
- C:\Windows\System\EmswhvB.exe
  C:\Windows\System\EmswhvB.exe
  2⤵
  PID:5444
- C:\Windows\System\COKWkTZ.exe
  C:\Windows\System\COKWkTZ.exe
  2⤵
  PID:5464
- C:\Windows\System\efgtjFv.exe
  C:\Windows\System\efgtjFv.exe
  2⤵
  PID:5480
- C:\Windows\System\iyZGjRx.exe
  C:\Windows\System\iyZGjRx.exe
  2⤵
  PID:5500
- C:\Windows\System\cfQOOpX.exe
  C:\Windows\System\cfQOOpX.exe
  2⤵
  PID:5524
- C:\Windows\System\XIhcEhv.exe
  C:\Windows\System\XIhcEhv.exe
  2⤵
  PID:5548
- C:\Windows\System\pRcgQSQ.exe
  C:\Windows\System\pRcgQSQ.exe
  2⤵
  PID:5564
- C:\Windows\System\gqVBaOo.exe
  C:\Windows\System\gqVBaOo.exe
  2⤵
  PID:5584
- C:\Windows\System\nOisjZx.exe
  C:\Windows\System\nOisjZx.exe
  2⤵
  PID:5600
- C:\Windows\System\kTZhpuM.exe
  C:\Windows\System\kTZhpuM.exe
  2⤵
  PID:5620
- C:\Windows\System\pSCHHNY.exe
  C:\Windows\System\pSCHHNY.exe
  2⤵
  PID:5636
- C:\Windows\System\UIZrLlA.exe
  C:\Windows\System\UIZrLlA.exe
  2⤵
  PID:5660
- C:\Windows\System\KfnWuqI.exe
  C:\Windows\System\KfnWuqI.exe
  2⤵
  PID:5676
- C:\Windows\System\CSUFFhN.exe
  C:\Windows\System\CSUFFhN.exe
  2⤵
  PID:5692
- C:\Windows\System\fzsYdJn.exe
  C:\Windows\System\fzsYdJn.exe
  2⤵
  PID:5744
- C:\Windows\System\ODYmiph.exe
  C:\Windows\System\ODYmiph.exe
  2⤵
  PID:5764
- C:\Windows\System\RJEUgCi.exe
  C:\Windows\System\RJEUgCi.exe
  2⤵
  PID:5780
- C:\Windows\System\ReIeOBs.exe
  C:\Windows\System\ReIeOBs.exe
  2⤵
  PID:5796
- C:\Windows\System\cGBNaSU.exe
  C:\Windows\System\cGBNaSU.exe
  2⤵
  PID:5816
- C:\Windows\System\unmSdxr.exe
  C:\Windows\System\unmSdxr.exe
  2⤵
  PID:5844
- C:\Windows\System\BFdAeiF.exe
  C:\Windows\System\BFdAeiF.exe
  2⤵
  PID:5860
- C:\Windows\System\PfWLCxO.exe
  C:\Windows\System\PfWLCxO.exe
  2⤵
  PID:5876
- C:\Windows\System\osyuruG.exe
  C:\Windows\System\osyuruG.exe
  2⤵
  PID:5892
- C:\Windows\System\fSfHtHU.exe
  C:\Windows\System\fSfHtHU.exe
  2⤵
  PID:5924
- C:\Windows\System\qthkvfW.exe
  C:\Windows\System\qthkvfW.exe
  2⤵
  PID:5940
- C:\Windows\System\dqjvBzS.exe
  C:\Windows\System\dqjvBzS.exe
  2⤵
  PID:5960
- C:\Windows\System\IUezUMD.exe
  C:\Windows\System\IUezUMD.exe
  2⤵
  PID:5976
- C:\Windows\System\ZSPPCgK.exe
  C:\Windows\System\ZSPPCgK.exe
  2⤵
  PID:6004
- C:\Windows\System\xoKyrQe.exe
  C:\Windows\System\xoKyrQe.exe
  2⤵
  PID:6024
- C:\Windows\System\BtfsIJE.exe
  C:\Windows\System\BtfsIJE.exe
  2⤵
  PID:6040
- C:\Windows\System\jeBCduz.exe
  C:\Windows\System\jeBCduz.exe
  2⤵
  PID:6056
- C:\Windows\System\HBNbpeG.exe
  C:\Windows\System\HBNbpeG.exe
  2⤵
  PID:6080
- C:\Windows\System\diCxqLE.exe
  C:\Windows\System\diCxqLE.exe
  2⤵
  PID:6096
- C:\Windows\System\uQVqsXz.exe
  C:\Windows\System\uQVqsXz.exe
  2⤵
  PID:6116
- C:\Windows\System\TNbXSGv.exe
  C:\Windows\System\TNbXSGv.exe
  2⤵
  PID:4904
- C:\Windows\System\lRPmswU.exe
  C:\Windows\System\lRPmswU.exe
  2⤵
  PID:5160
- C:\Windows\System\vLGTWkm.exe
  C:\Windows\System\vLGTWkm.exe
  2⤵
  PID:4260
- C:\Windows\System\QZkpDGX.exe
  C:\Windows\System\QZkpDGX.exe
  2⤵
  PID:4244
- C:\Windows\System\GnNlnzM.exe
  C:\Windows\System\GnNlnzM.exe
  2⤵
  PID:5228
- C:\Windows\System\ZVbilFz.exe
  C:\Windows\System\ZVbilFz.exe
  2⤵
  PID:5292
- C:\Windows\System\oIqvGxx.exe
  C:\Windows\System\oIqvGxx.exe
  2⤵
  PID:4860
- C:\Windows\System\WvWRbtw.exe
  C:\Windows\System\WvWRbtw.exe
  2⤵
  PID:4792
- C:\Windows\System\vVzNArc.exe
  C:\Windows\System\vVzNArc.exe
  2⤵
  PID:4236
- C:\Windows\System\PJQMUxX.exe
  C:\Windows\System\PJQMUxX.exe
  2⤵
  PID:5176
- C:\Windows\System\OcxNjwb.exe
  C:\Windows\System\OcxNjwb.exe
  2⤵
  PID:5344
- C:\Windows\System\zWmdbnu.exe
  C:\Windows\System\zWmdbnu.exe
  2⤵
  PID:5376
- C:\Windows\System\PsKpWNS.exe
  C:\Windows\System\PsKpWNS.exe
  2⤵
  PID:5416
- C:\Windows\System\ZrTGHdx.exe
  C:\Windows\System\ZrTGHdx.exe
  2⤵
  PID:5488
- C:\Windows\System\LEKOGXV.exe
  C:\Windows\System\LEKOGXV.exe
  2⤵
  PID:5532
- C:\Windows\System\xjHZYyA.exe
  C:\Windows\System\xjHZYyA.exe
  2⤵
  PID:5576
- C:\Windows\System\ySgIVlV.exe
  C:\Windows\System\ySgIVlV.exe
  2⤵
  PID:5616
- C:\Windows\System\ggtnjxs.exe
  C:\Windows\System\ggtnjxs.exe
  2⤵
  PID:5244
- C:\Windows\System\hfBIiib.exe
  C:\Windows\System\hfBIiib.exe
  2⤵
  PID:5652
- C:\Windows\System\hthDFdD.exe
  C:\Windows\System\hthDFdD.exe
  2⤵
  PID:5628
- C:\Windows\System\NuYzpdN.exe
  C:\Windows\System\NuYzpdN.exe
  2⤵
  PID:5508
- C:\Windows\System\pOcFpkm.exe
  C:\Windows\System\pOcFpkm.exe
  2⤵
  PID:5684
- C:\Windows\System\EWCMvwA.exe
  C:\Windows\System\EWCMvwA.exe
  2⤵
  PID:5668
- C:\Windows\System\mkMwpNY.exe
  C:\Windows\System\mkMwpNY.exe
  2⤵
  PID:5732
- C:\Windows\System\YxjWpOY.exe
  C:\Windows\System\YxjWpOY.exe
  2⤵
  PID:5720
- C:\Windows\System\yTmRYCu.exe
  C:\Windows\System\yTmRYCu.exe
  2⤵
  PID:5772
- C:\Windows\System\tIyVDbF.exe
  C:\Windows\System\tIyVDbF.exe
  2⤵
  PID:5836
- C:\Windows\System\BPIQAMV.exe
  C:\Windows\System\BPIQAMV.exe
  2⤵
  PID:5852
- C:\Windows\System\NOEXcpn.exe
  C:\Windows\System\NOEXcpn.exe
  2⤵
  PID:5872
- C:\Windows\System\wJLMVQj.exe
  C:\Windows\System\wJLMVQj.exe
  2⤵
  PID:5920
- C:\Windows\System\vSjMOwc.exe
  C:\Windows\System\vSjMOwc.exe
  2⤵
  PID:5952
- C:\Windows\System\mliKlSp.exe
  C:\Windows\System\mliKlSp.exe
  2⤵
  PID:5992
- C:\Windows\System\nJfpyHC.exe
  C:\Windows\System\nJfpyHC.exe
  2⤵
  PID:5968
- C:\Windows\System\XkCMOzM.exe
  C:\Windows\System\XkCMOzM.exe
  2⤵
  PID:6032
- C:\Windows\System\CbncOYa.exe
  C:\Windows\System\CbncOYa.exe
  2⤵
  PID:6108
- C:\Windows\System\PSUSUri.exe
  C:\Windows\System\PSUSUri.exe
  2⤵
  PID:5132
- C:\Windows\System\heGLiwL.exe
  C:\Windows\System\heGLiwL.exe
  2⤵
  PID:5216
- C:\Windows\System\PdBUsNE.exe
  C:\Windows\System\PdBUsNE.exe
  2⤵
  PID:5264
- C:\Windows\System\DFSbSek.exe
  C:\Windows\System\DFSbSek.exe
  2⤵
  PID:5200
- C:\Windows\System\InhBvgh.exe
  C:\Windows\System\InhBvgh.exe
  2⤵
  PID:4576
- C:\Windows\System\YptFviX.exe
  C:\Windows\System\YptFviX.exe
  2⤵
  PID:4856
- C:\Windows\System\jMKULfQ.exe
  C:\Windows\System\jMKULfQ.exe
  2⤵
  PID:4592
- C:\Windows\System\NEJYChP.exe
  C:\Windows\System\NEJYChP.exe
  2⤵
  PID:5336
- C:\Windows\System\cfSiqkY.exe
  C:\Windows\System\cfSiqkY.exe
  2⤵
  PID:5460
- C:\Windows\System\EZqXczA.exe
  C:\Windows\System\EZqXczA.exe
  2⤵
  PID:5412
- C:\Windows\System\thgPcha.exe
  C:\Windows\System\thgPcha.exe
  2⤵
  PID:5316
- C:\Windows\System\nKAIAnI.exe
  C:\Windows\System\nKAIAnI.exe
  2⤵
  PID:5592
- C:\Windows\System\VoqyCnx.exe
  C:\Windows\System\VoqyCnx.exe
  2⤵
  PID:5716
- C:\Windows\System\crRqegn.exe
  C:\Windows\System\crRqegn.exe
  2⤵
  PID:5648
- C:\Windows\System\hAcwozA.exe
  C:\Windows\System\hAcwozA.exe
  2⤵
  PID:5476
- C:\Windows\System\DyBKjwg.exe
  C:\Windows\System\DyBKjwg.exe
  2⤵
  PID:5704
- C:\Windows\System\vFLCckd.exe
  C:\Windows\System\vFLCckd.exe
  2⤵
  PID:5792
- C:\Windows\System\SSQkKLY.exe
  C:\Windows\System\SSQkKLY.exe
  2⤵
  PID:5916
- C:\Windows\System\aMGbrpt.exe
  C:\Windows\System\aMGbrpt.exe
  2⤵
  PID:5824
- C:\Windows\System\gEufucr.exe
  C:\Windows\System\gEufucr.exe
  2⤵
  PID:6000
- C:\Windows\System\fSisiix.exe
  C:\Windows\System\fSisiix.exe
  2⤵
  PID:6064
- C:\Windows\System\EYTnWvn.exe
  C:\Windows\System\EYTnWvn.exe
  2⤵
  PID:6068
- C:\Windows\System\KwnmhEa.exe
  C:\Windows\System\KwnmhEa.exe
  2⤵
  PID:6088
- C:\Windows\System\PlJbbod.exe
  C:\Windows\System\PlJbbod.exe
  2⤵
  PID:5260
- C:\Windows\System\nLocdCs.exe
  C:\Windows\System\nLocdCs.exe
  2⤵
  PID:5040
- C:\Windows\System\UmtkabA.exe
  C:\Windows\System\UmtkabA.exe
  2⤵
  PID:5452
- C:\Windows\System\VlVMFYU.exe
  C:\Windows\System\VlVMFYU.exe
  2⤵
  PID:5208
- C:\Windows\System\kfRkBRQ.exe
  C:\Windows\System\kfRkBRQ.exe
  2⤵
  PID:5544
- C:\Windows\System\BbwVBHL.exe
  C:\Windows\System\BbwVBHL.exe
  2⤵
  PID:5280
- C:\Windows\System\kELvNGT.exe
  C:\Windows\System\kELvNGT.exe
  2⤵
  PID:5332
- C:\Windows\System\cjXSyem.exe
  C:\Windows\System\cjXSyem.exe
  2⤵
  PID:5420
- C:\Windows\System\hxyikDf.exe
  C:\Windows\System\hxyikDf.exe
  2⤵
  PID:5984
- C:\Windows\System\hWxoOQV.exe
  C:\Windows\System\hWxoOQV.exe
  2⤵
  PID:5740
- C:\Windows\System\hcjfhXs.exe
  C:\Windows\System\hcjfhXs.exe
  2⤵
  PID:5948
- C:\Windows\System\qwycvtE.exe
  C:\Windows\System\qwycvtE.exe
  2⤵
  PID:5808
- C:\Windows\System\aGMzTTT.exe
  C:\Windows\System\aGMzTTT.exe
  2⤵
  PID:5088
- C:\Windows\System\LavGmDH.exe
  C:\Windows\System\LavGmDH.exe
  2⤵
  PID:4512
- C:\Windows\System\scXqbJG.exe
  C:\Windows\System\scXqbJG.exe
  2⤵
  PID:5608
- C:\Windows\System\WyJfRVH.exe
  C:\Windows\System\WyJfRVH.exe
  2⤵
  PID:5144
- C:\Windows\System\XdjrOcf.exe
  C:\Windows\System\XdjrOcf.exe
  2⤵
  PID:5644
- C:\Windows\System\IksyMBu.exe
  C:\Windows\System\IksyMBu.exe
  2⤵
  PID:5672
- C:\Windows\System\gIygCvB.exe
  C:\Windows\System\gIygCvB.exe
  2⤵
  PID:5472
- C:\Windows\System\crXQvIQ.exe
  C:\Windows\System\crXQvIQ.exe
  2⤵
  PID:4744
- C:\Windows\System\ZmxqFeJ.exe
  C:\Windows\System\ZmxqFeJ.exe
  2⤵
  PID:6052
- C:\Windows\System\rawoYVJ.exe
  C:\Windows\System\rawoYVJ.exe
  2⤵
  PID:5340
- C:\Windows\System\OUdVSxV.exe
  C:\Windows\System\OUdVSxV.exe
  2⤵
  PID:5832
- C:\Windows\System\IZBjpiE.exe
  C:\Windows\System\IZBjpiE.exe
  2⤵
  PID:5328
- C:\Windows\System\jyijBns.exe
  C:\Windows\System\jyijBns.exe
  2⤵
  PID:6156
- C:\Windows\System\mDAAqtS.exe
  C:\Windows\System\mDAAqtS.exe
  2⤵
  PID:6176
- C:\Windows\System\bACkQrD.exe
  C:\Windows\System\bACkQrD.exe
  2⤵
  PID:6200
- C:\Windows\System\KwxIOAg.exe
  C:\Windows\System\KwxIOAg.exe
  2⤵
  PID:6248
- C:\Windows\System\ErNdAaI.exe
  C:\Windows\System\ErNdAaI.exe
  2⤵
  PID:6264
- C:\Windows\System\ZiRekQN.exe
  C:\Windows\System\ZiRekQN.exe
  2⤵
  PID:6280
- C:\Windows\System\oYhAyNb.exe
  C:\Windows\System\oYhAyNb.exe
  2⤵
  PID:6304
- C:\Windows\System\ZiWkAEj.exe
  C:\Windows\System\ZiWkAEj.exe
  2⤵
  PID:6320
- C:\Windows\System\VGcxLhA.exe
  C:\Windows\System\VGcxLhA.exe
  2⤵
  PID:6340
- C:\Windows\System\PDRvRXu.exe
  C:\Windows\System\PDRvRXu.exe
  2⤵
  PID:6356
- C:\Windows\System\vFQKGtS.exe
  C:\Windows\System\vFQKGtS.exe
  2⤵
  PID:6376
- C:\Windows\System\bDJpCqn.exe
  C:\Windows\System\bDJpCqn.exe
  2⤵
  PID:6396
- C:\Windows\System\hJdPpYV.exe
  C:\Windows\System\hJdPpYV.exe
  2⤵
  PID:6412
- C:\Windows\System\nsozejd.exe
  C:\Windows\System\nsozejd.exe
  2⤵
  PID:6432
- C:\Windows\System\rxWZJdb.exe
  C:\Windows\System\rxWZJdb.exe
  2⤵
  PID:6448
- C:\Windows\System\MBYdimI.exe
  C:\Windows\System\MBYdimI.exe
  2⤵
  PID:6468
- C:\Windows\System\tqfYwJN.exe
  C:\Windows\System\tqfYwJN.exe
  2⤵
  PID:6504
- C:\Windows\System\yanntlH.exe
  C:\Windows\System\yanntlH.exe
  2⤵
  PID:6520
- C:\Windows\System\XnPIPyz.exe
  C:\Windows\System\XnPIPyz.exe
  2⤵
  PID:6540
- C:\Windows\System\vUXxeCN.exe
  C:\Windows\System\vUXxeCN.exe
  2⤵
  PID:6568
- C:\Windows\System\PHzVtcd.exe
  C:\Windows\System\PHzVtcd.exe
  2⤵
  PID:6584
- C:\Windows\System\CkDSrRS.exe
  C:\Windows\System\CkDSrRS.exe
  2⤵
  PID:6600
- C:\Windows\System\jiTDgEA.exe
  C:\Windows\System\jiTDgEA.exe
  2⤵
  PID:6620
- C:\Windows\System\GyjbYGZ.exe
  C:\Windows\System\GyjbYGZ.exe
  2⤵
  PID:6636
- C:\Windows\System\BluNQKn.exe
  C:\Windows\System\BluNQKn.exe
  2⤵
  PID:6660
- C:\Windows\System\JeUrtnF.exe
  C:\Windows\System\JeUrtnF.exe
  2⤵
  PID:6676
- C:\Windows\System\LLSAJUl.exe
  C:\Windows\System\LLSAJUl.exe
  2⤵
  PID:6704
- C:\Windows\System\pTdBtTL.exe
  C:\Windows\System\pTdBtTL.exe
  2⤵
  PID:6724
- C:\Windows\System\AEboYkI.exe
  C:\Windows\System\AEboYkI.exe
  2⤵
  PID:6744
- C:\Windows\System\ufmMdIq.exe
  C:\Windows\System\ufmMdIq.exe
  2⤵
  PID:6760
- C:\Windows\System\ziyzzKX.exe
  C:\Windows\System\ziyzzKX.exe
  2⤵
  PID:6776
- C:\Windows\System\cXZVAMb.exe
  C:\Windows\System\cXZVAMb.exe
  2⤵
  PID:6796
- C:\Windows\System\Fgjqnwn.exe
  C:\Windows\System\Fgjqnwn.exe
  2⤵
  PID:6812
- C:\Windows\System\KXwxEUP.exe
  C:\Windows\System\KXwxEUP.exe
  2⤵
  PID:6828
- C:\Windows\System\uglrAZX.exe
  C:\Windows\System\uglrAZX.exe
  2⤵
  PID:6848
- C:\Windows\System\anuQLKD.exe
  C:\Windows\System\anuQLKD.exe
  2⤵
  PID:6868
- C:\Windows\System\GwXamFT.exe
  C:\Windows\System\GwXamFT.exe
  2⤵
  PID:6884
- C:\Windows\System\mDIviLR.exe
  C:\Windows\System\mDIviLR.exe
  2⤵
  PID:6904
- C:\Windows\System\imnruWZ.exe
  C:\Windows\System\imnruWZ.exe
  2⤵
  PID:6924
- C:\Windows\System\tYDsSxJ.exe
  C:\Windows\System\tYDsSxJ.exe
  2⤵
  PID:6940
- C:\Windows\System\JzmdjrE.exe
  C:\Windows\System\JzmdjrE.exe
  2⤵
  PID:6960
- C:\Windows\System\htNzyIn.exe
  C:\Windows\System\htNzyIn.exe
  2⤵
  PID:6980
- C:\Windows\System\RzfkpaB.exe
  C:\Windows\System\RzfkpaB.exe
  2⤵
  PID:7020
- C:\Windows\System\cyIVkCB.exe
  C:\Windows\System\cyIVkCB.exe
  2⤵
  PID:7040
- C:\Windows\System\hQPzkNO.exe
  C:\Windows\System\hQPzkNO.exe
  2⤵
  PID:7060
- C:\Windows\System\wfZtNmv.exe
  C:\Windows\System\wfZtNmv.exe
  2⤵
  PID:7076
- C:\Windows\System\slqHmXN.exe
  C:\Windows\System\slqHmXN.exe
  2⤵
  PID:7096
- C:\Windows\System\KHGZYdq.exe
  C:\Windows\System\KHGZYdq.exe
  2⤵
  PID:7112
- C:\Windows\System\ZLfzoIE.exe
  C:\Windows\System\ZLfzoIE.exe
  2⤵
  PID:7128
- C:\Windows\System\GqiHaPh.exe
  C:\Windows\System\GqiHaPh.exe
  2⤵
  PID:7148
- C:\Windows\System\dFqrKxM.exe
  C:\Windows\System\dFqrKxM.exe
  2⤵
  PID:7164
- C:\Windows\System\AIDXlEY.exe
  C:\Windows\System\AIDXlEY.exe
  2⤵
  PID:5364
- C:\Windows\System\PgDghmm.exe
  C:\Windows\System\PgDghmm.exe
  2⤵
  PID:6152
- C:\Windows\System\WxhUMvD.exe
  C:\Windows\System\WxhUMvD.exe
  2⤵
  PID:5788
- C:\Windows\System\EVYKSzH.exe
  C:\Windows\System\EVYKSzH.exe
  2⤵
  PID:6196
- C:\Windows\System\ESazfax.exe
  C:\Windows\System\ESazfax.exe
  2⤵
  PID:6220
- C:\Windows\System\eiWytjf.exe
  C:\Windows\System\eiWytjf.exe
  2⤵
  PID:6232
- C:\Windows\System\VZyyTfZ.exe
  C:\Windows\System\VZyyTfZ.exe
  2⤵
  PID:6272
- C:\Windows\System\DkrqdLU.exe
  C:\Windows\System\DkrqdLU.exe
  2⤵
  PID:6296
- C:\Windows\System\pHynGeb.exe
  C:\Windows\System\pHynGeb.exe
  2⤵
  PID:6352
- C:\Windows\System\hWwRGhy.exe
  C:\Windows\System\hWwRGhy.exe
  2⤵
  PID:6364
- C:\Windows\System\fprBawy.exe
  C:\Windows\System\fprBawy.exe
  2⤵
  PID:6424
- C:\Windows\System\lJFKjJu.exe
  C:\Windows\System\lJFKjJu.exe
  2⤵
  PID:6368
- C:\Windows\System\AkxCzET.exe
  C:\Windows\System\AkxCzET.exe
  2⤵
  PID:6484
- C:\Windows\System\GDhQfTl.exe
  C:\Windows\System\GDhQfTl.exe
  2⤵
  PID:6516
- C:\Windows\System\TwjFldm.exe
  C:\Windows\System\TwjFldm.exe
  2⤵
  PID:6536
- C:\Windows\System\ZCyCyDO.exe
  C:\Windows\System\ZCyCyDO.exe
  2⤵
  PID:6556
- C:\Windows\System\dnpcSqx.exe
  C:\Windows\System\dnpcSqx.exe
  2⤵
  PID:6632
- C:\Windows\System\kPktzTH.exe
  C:\Windows\System\kPktzTH.exe
  2⤵
  PID:6672
- C:\Windows\System\VqPiyZb.exe
  C:\Windows\System\VqPiyZb.exe
  2⤵
  PID:6684
- C:\Windows\System\kicSEBo.exe
  C:\Windows\System\kicSEBo.exe
  2⤵
  PID:6720
- C:\Windows\System\ozSviXX.exe
  C:\Windows\System\ozSviXX.exe
  2⤵
  PID:6756
- C:\Windows\System\mdQHOtP.exe
  C:\Windows\System\mdQHOtP.exe
  2⤵
  PID:6228
- C:\Windows\System\xxujUXW.exe
  C:\Windows\System\xxujUXW.exe
  2⤵
  PID:6892
- C:\Windows\System\poDrbEp.exe
  C:\Windows\System\poDrbEp.exe
  2⤵
  PID:6936
- C:\Windows\System\velsTnO.exe
  C:\Windows\System\velsTnO.exe
  2⤵
  PID:6768
- C:\Windows\System\WPnlxmo.exe
  C:\Windows\System\WPnlxmo.exe
  2⤵
  PID:6920
- C:\Windows\System\toUCpDB.exe
  C:\Windows\System\toUCpDB.exe
  2⤵
  PID:7032
- C:\Windows\System\jAthGoq.exe
  C:\Windows\System\jAthGoq.exe
  2⤵
  PID:6836
- C:\Windows\System\PZaenlr.exe
  C:\Windows\System\PZaenlr.exe
  2⤵
  PID:6912
- C:\Windows\System\yrWKiaP.exe
  C:\Windows\System\yrWKiaP.exe
  2⤵
  PID:4716
- C:\Windows\System\dtmIEoz.exe
  C:\Windows\System\dtmIEoz.exe
  2⤵
  PID:6124
- C:\Windows\System\ZEhOEJP.exe
  C:\Windows\System\ZEhOEJP.exe
  2⤵
  PID:7048
- C:\Windows\System\LcTTLet.exe
  C:\Windows\System\LcTTLet.exe
  2⤵
  PID:7156
- C:\Windows\System\aQRbebU.exe
  C:\Windows\System\aQRbebU.exe
  2⤵
  PID:5708
- C:\Windows\System\JWTFPlo.exe
  C:\Windows\System\JWTFPlo.exe
  2⤵
  PID:6208
- C:\Windows\System\dLadSHg.exe
  C:\Windows\System\dLadSHg.exe
  2⤵
  PID:6192
- C:\Windows\System\YMMfbRY.exe
  C:\Windows\System\YMMfbRY.exe
  2⤵
  PID:6312
- C:\Windows\System\yyorGSj.exe
  C:\Windows\System\yyorGSj.exe
  2⤵
  PID:6240
- C:\Windows\System\hcKjoAl.exe
  C:\Windows\System\hcKjoAl.exe
  2⤵
  PID:6332
- C:\Windows\System\uaAqSbi.exe
  C:\Windows\System\uaAqSbi.exe
  2⤵
  PID:6224
- C:\Windows\System\aOdZqoQ.exe
  C:\Windows\System\aOdZqoQ.exe
  2⤵
  PID:6408
- C:\Windows\System\sWKLRtv.exe
  C:\Windows\System\sWKLRtv.exe
  2⤵
  PID:6492
- C:\Windows\System\RXUPPoI.exe
  C:\Windows\System\RXUPPoI.exe
  2⤵
  PID:6592
- C:\Windows\System\KBCfhhC.exe
  C:\Windows\System\KBCfhhC.exe
  2⤵
  PID:6652
- C:\Windows\System\diziCPg.exe
  C:\Windows\System\diziCPg.exe
  2⤵
  PID:6564
- C:\Windows\System\xOHTHju.exe
  C:\Windows\System\xOHTHju.exe
  2⤵
  PID:6716
- C:\Windows\System\diVEBsn.exe
  C:\Windows\System\diVEBsn.exe
  2⤵
  PID:6824
- C:\Windows\System\TLkARTa.exe
  C:\Windows\System\TLkARTa.exe
  2⤵
  PID:6788
- C:\Windows\System\nKJzDSg.exe
  C:\Windows\System\nKJzDSg.exe
  2⤵
  PID:6976
- C:\Windows\System\GYcUvvs.exe
  C:\Windows\System\GYcUvvs.exe
  2⤵
  PID:7028
- C:\Windows\System\OJTzmwU.exe
  C:\Windows\System\OJTzmwU.exe
  2⤵
  PID:7136
- C:\Windows\System\QDkDmOF.exe
  C:\Windows\System\QDkDmOF.exe
  2⤵
  PID:7068
- C:\Windows\System\IDzXwuq.exe
  C:\Windows\System\IDzXwuq.exe
  2⤵
  PID:7084
- C:\Windows\System\leJRKwz.exe
  C:\Windows\System\leJRKwz.exe
  2⤵
  PID:6172
- C:\Windows\System\CcqPVug.exe
  C:\Windows\System\CcqPVug.exe
  2⤵
  PID:5560
- C:\Windows\System\YMzKrZy.exe
  C:\Windows\System\YMzKrZy.exe
  2⤵
  PID:6212
- C:\Windows\System\cbpFepC.exe
  C:\Windows\System\cbpFepC.exe
  2⤵
  PID:6292
- C:\Windows\System\CrlNlQO.exe
  C:\Windows\System\CrlNlQO.exe
  2⤵
  PID:6404
- C:\Windows\System\hAMzUjg.exe
  C:\Windows\System\hAMzUjg.exe
  2⤵
  PID:6532
- C:\Windows\System\bxZmfkh.exe
  C:\Windows\System\bxZmfkh.exe
  2⤵
  PID:6560
- C:\Windows\System\vCeIYlU.exe
  C:\Windows\System\vCeIYlU.exe
  2⤵
  PID:6668
- C:\Windows\System\OhHqvjA.exe
  C:\Windows\System\OhHqvjA.exe
  2⤵
  PID:6712
- C:\Windows\System\mwYRfiY.exe
  C:\Windows\System\mwYRfiY.exe
  2⤵
  PID:6656
- C:\Windows\System\rLvYOKv.exe
  C:\Windows\System\rLvYOKv.exe
  2⤵
  PID:6860
- C:\Windows\System\YBSZhJl.exe
  C:\Windows\System\YBSZhJl.exe
  2⤵
  PID:6956
- C:\Windows\System\IoDUpBp.exe
  C:\Windows\System\IoDUpBp.exe
  2⤵
  PID:7008
- C:\Windows\System\hFGwxyy.exe
  C:\Windows\System\hFGwxyy.exe
  2⤵
  PID:6996
- C:\Windows\System\IsVxDOV.exe
  C:\Windows\System\IsVxDOV.exe
  2⤵
  PID:5756
- C:\Windows\System\JsfOifW.exe
  C:\Windows\System\JsfOifW.exe
  2⤵
  PID:6348
- C:\Windows\System\qAYbews.exe
  C:\Windows\System\qAYbews.exe
  2⤵
  PID:6496
- C:\Windows\System\NAQTLuJ.exe
  C:\Windows\System\NAQTLuJ.exe
  2⤵
  PID:6164
- C:\Windows\System\vWeBXiT.exe
  C:\Windows\System\vWeBXiT.exe
  2⤵
  PID:6420
- C:\Windows\System\LlSQcWf.exe
  C:\Windows\System\LlSQcWf.exe
  2⤵
  PID:6188
- C:\Windows\System\BIoVkBi.exe
  C:\Windows\System\BIoVkBi.exe
  2⤵
  PID:6864
- C:\Windows\System\IYlLEJD.exe
  C:\Windows\System\IYlLEJD.exe
  2⤵
  PID:7120
- C:\Windows\System\XBpqmPC.exe
  C:\Windows\System\XBpqmPC.exe
  2⤵
  PID:6456
- C:\Windows\System\jNhdvPn.exe
  C:\Windows\System\jNhdvPn.exe
  2⤵
  PID:6804
- C:\Windows\System\KTCKcJu.exe
  C:\Windows\System\KTCKcJu.exe
  2⤵
  PID:7184
- C:\Windows\System\bvqyQhF.exe
  C:\Windows\System\bvqyQhF.exe
  2⤵
  PID:7200
- C:\Windows\System\EdgVTyN.exe
  C:\Windows\System\EdgVTyN.exe
  2⤵
  PID:7216
- C:\Windows\System\hDOOdDD.exe
  C:\Windows\System\hDOOdDD.exe
  2⤵
  PID:7236
- C:\Windows\System\OuLZrpQ.exe
  C:\Windows\System\OuLZrpQ.exe
  2⤵
  PID:7252
- C:\Windows\System\FibDrUd.exe
  C:\Windows\System\FibDrUd.exe
  2⤵
  PID:7268
- C:\Windows\System\rqfXzdX.exe
  C:\Windows\System\rqfXzdX.exe
  2⤵
  PID:7284
- C:\Windows\System\XHOpczl.exe
  C:\Windows\System\XHOpczl.exe
  2⤵
  PID:7300
- C:\Windows\System\AAyWhoy.exe
  C:\Windows\System\AAyWhoy.exe
  2⤵
  PID:7316
- C:\Windows\System\BCHyTkA.exe
  C:\Windows\System\BCHyTkA.exe
  2⤵
  PID:7332
- C:\Windows\System\kHAqTRI.exe
  C:\Windows\System\kHAqTRI.exe
  2⤵
  PID:7348
- C:\Windows\System\UVncHSV.exe
  C:\Windows\System\UVncHSV.exe
  2⤵
  PID:7364
- C:\Windows\System\evyTKQx.exe
  C:\Windows\System\evyTKQx.exe
  2⤵
  PID:7380
- C:\Windows\System\ARmbAGW.exe
  C:\Windows\System\ARmbAGW.exe
  2⤵
  PID:7396
- C:\Windows\System\yRFwkrv.exe
  C:\Windows\System\yRFwkrv.exe
  2⤵
  PID:7416
- C:\Windows\System\yzsXOJc.exe
  C:\Windows\System\yzsXOJc.exe
  2⤵
  PID:7432
- C:\Windows\System\nEGKfYO.exe
  C:\Windows\System\nEGKfYO.exe
  2⤵
  PID:7448
- C:\Windows\System\zHeIIYI.exe
  C:\Windows\System\zHeIIYI.exe
  2⤵
  PID:7464
- C:\Windows\System\RTdeMwu.exe
  C:\Windows\System\RTdeMwu.exe
  2⤵
  PID:7484
- C:\Windows\System\BRZsrNe.exe
  C:\Windows\System\BRZsrNe.exe
  2⤵
  PID:7500
- C:\Windows\System\QQmVsjp.exe
  C:\Windows\System\QQmVsjp.exe
  2⤵
  PID:7520
- C:\Windows\System\lMJmWby.exe
  C:\Windows\System\lMJmWby.exe
  2⤵
  PID:7536
- C:\Windows\System\tOMyiCq.exe
  C:\Windows\System\tOMyiCq.exe
  2⤵
  PID:7552
- C:\Windows\System\xfBOSMV.exe
  C:\Windows\System\xfBOSMV.exe
  2⤵
  PID:7568
- C:\Windows\System\ZAdOfQk.exe
  C:\Windows\System\ZAdOfQk.exe
  2⤵
  PID:7584
- C:\Windows\System\YhMThJG.exe
  C:\Windows\System\YhMThJG.exe
  2⤵
  PID:7600
- C:\Windows\System\rKxCOBf.exe
  C:\Windows\System\rKxCOBf.exe
  2⤵
  PID:7620
- C:\Windows\System\UmibRga.exe
  C:\Windows\System\UmibRga.exe
  2⤵
  PID:7636
- C:\Windows\System\vCSmLEs.exe
  C:\Windows\System\vCSmLEs.exe
  2⤵
  PID:7652
- C:\Windows\System\InNwRSp.exe
  C:\Windows\System\InNwRSp.exe
  2⤵
  PID:7668
- C:\Windows\System\fKzLhVG.exe
  C:\Windows\System\fKzLhVG.exe
  2⤵
  PID:7684
- C:\Windows\System\auxbwmE.exe
  C:\Windows\System\auxbwmE.exe
  2⤵
  PID:7700
- C:\Windows\System\eFJSiBl.exe
  C:\Windows\System\eFJSiBl.exe
  2⤵
  PID:7716
- C:\Windows\System\OhXGmVl.exe
  C:\Windows\System\OhXGmVl.exe
  2⤵
  PID:7732
- C:\Windows\System\RSpqiPo.exe
  C:\Windows\System\RSpqiPo.exe
  2⤵
  PID:7748
- C:\Windows\System\RmZUmMW.exe
  C:\Windows\System\RmZUmMW.exe
  2⤵
  PID:7768
- C:\Windows\System\SOZZlKc.exe
  C:\Windows\System\SOZZlKc.exe
  2⤵
  PID:7788
- C:\Windows\System\XzwBYnc.exe
  C:\Windows\System\XzwBYnc.exe
  2⤵
  PID:7804
- C:\Windows\System\sTBmAGz.exe
  C:\Windows\System\sTBmAGz.exe
  2⤵
  PID:7820
- C:\Windows\System\hkHcPkV.exe
  C:\Windows\System\hkHcPkV.exe
  2⤵
  PID:7844
- C:\Windows\System\NuavLUP.exe
  C:\Windows\System\NuavLUP.exe
  2⤵
  PID:7860
- C:\Windows\System\erPRBFL.exe
  C:\Windows\System\erPRBFL.exe
  2⤵
  PID:7876
- C:\Windows\System\UexNtZL.exe
  C:\Windows\System\UexNtZL.exe
  2⤵
  PID:7892
- C:\Windows\System\elgCgsE.exe
  C:\Windows\System\elgCgsE.exe
  2⤵
  PID:7908
- C:\Windows\System\mtsnGFN.exe
  C:\Windows\System\mtsnGFN.exe
  2⤵
  PID:7924
- C:\Windows\System\fVhaSTU.exe
  C:\Windows\System\fVhaSTU.exe
  2⤵
  PID:7940
- C:\Windows\System\usNhKhX.exe
  C:\Windows\System\usNhKhX.exe
  2⤵
  PID:7964
- C:\Windows\System\cfWrpZY.exe
  C:\Windows\System\cfWrpZY.exe
  2⤵
  PID:7980
- C:\Windows\System\YtgCaNh.exe
  C:\Windows\System\YtgCaNh.exe
  2⤵
  PID:7996
- C:\Windows\System\JdBfFSw.exe
  C:\Windows\System\JdBfFSw.exe
  2⤵
  PID:8012
- C:\Windows\System\BqTCZWP.exe
  C:\Windows\System\BqTCZWP.exe
  2⤵
  PID:8028
- C:\Windows\System\kqHYJtq.exe
  C:\Windows\System\kqHYJtq.exe
  2⤵
  PID:8044
- C:\Windows\System\vLKfhBZ.exe
  C:\Windows\System\vLKfhBZ.exe
  2⤵
  PID:8060
- C:\Windows\System\SKhBlsu.exe
  C:\Windows\System\SKhBlsu.exe
  2⤵
  PID:8080
- C:\Windows\System\uDBYRyi.exe
  C:\Windows\System\uDBYRyi.exe
  2⤵
  PID:8100
- C:\Windows\System\yJIdCRQ.exe
  C:\Windows\System\yJIdCRQ.exe
  2⤵
  PID:8120
- C:\Windows\System\vPzFDHw.exe
  C:\Windows\System\vPzFDHw.exe
  2⤵
  PID:8140
- C:\Windows\System\DemyYtg.exe
  C:\Windows\System\DemyYtg.exe
  2⤵
  PID:8156
- C:\Windows\System\BMQKlbm.exe
  C:\Windows\System\BMQKlbm.exe
  2⤵
  PID:8172
- C:\Windows\System\ejxOFZK.exe
  C:\Windows\System\ejxOFZK.exe
  2⤵
  PID:6988
- C:\Windows\System\jiPoTVs.exe
  C:\Windows\System\jiPoTVs.exe
  2⤵
  PID:7004
- C:\Windows\System\SlQbllR.exe
  C:\Windows\System\SlQbllR.exe
  2⤵
  PID:6612
- C:\Windows\System\cvCCaJE.exe
  C:\Windows\System\cvCCaJE.exe
  2⤵
  PID:6464
- C:\Windows\System\lxhfEye.exe
  C:\Windows\System\lxhfEye.exe
  2⤵
  PID:7180
- C:\Windows\System\MRBhwOb.exe
  C:\Windows\System\MRBhwOb.exe
  2⤵
  PID:7228
- C:\Windows\System\uoqCkmm.exe
  C:\Windows\System\uoqCkmm.exe
  2⤵
  PID:7292
- C:\Windows\System\ZxIirns.exe
  C:\Windows\System\ZxIirns.exe
  2⤵
  PID:7388
- C:\Windows\System\NHylIrB.exe
  C:\Windows\System\NHylIrB.exe
  2⤵
  PID:7280
- C:\Windows\System\HXXVrcO.exe
  C:\Windows\System\HXXVrcO.exe
  2⤵
  PID:7340
- C:\Windows\System\XWiSHDK.exe
  C:\Windows\System\XWiSHDK.exe
  2⤵
  PID:7372
- C:\Windows\System\GllIAGh.exe
  C:\Windows\System\GllIAGh.exe
  2⤵
  PID:7412
- C:\Windows\System\MKKabDx.exe
  C:\Windows\System\MKKabDx.exe
  2⤵
  PID:7576
- C:\Windows\System\QUWympB.exe
  C:\Windows\System\QUWympB.exe
  2⤵
  PID:7644
- C:\Windows\System\BKQxTGI.exe
  C:\Windows\System\BKQxTGI.exe
  2⤵
  PID:7696
- C:\Windows\System\hbYaCVX.exe
  C:\Windows\System\hbYaCVX.exe
  2⤵
  PID:7712
- C:\Windows\System\axHWqrp.exe
  C:\Windows\System\axHWqrp.exe
  2⤵
  PID:7760
- C:\Windows\System\OCUJBrQ.exe
  C:\Windows\System\OCUJBrQ.exe
  2⤵
  PID:7828
- C:\Windows\System\ZTudyfy.exe
  C:\Windows\System\ZTudyfy.exe
  2⤵
  PID:7832
- C:\Windows\System\YlgnfHC.exe
  C:\Windows\System\YlgnfHC.exe
  2⤵
  PID:7872
- C:\Windows\System\AwCAJVH.exe
  C:\Windows\System\AwCAJVH.exe
  2⤵
  PID:7780
- C:\Windows\System\CpxbPCS.exe
  C:\Windows\System\CpxbPCS.exe
  2⤵
  PID:7976
- C:\Windows\System\bPNwQIQ.exe
  C:\Windows\System\bPNwQIQ.exe
  2⤵
  PID:8004
- C:\Windows\System\KaoQSpW.exe
  C:\Windows\System\KaoQSpW.exe
  2⤵
  PID:7948
- C:\Windows\System\sbFdeyP.exe
  C:\Windows\System\sbFdeyP.exe
  2⤵
  PID:7956
- C:\Windows\System\hqjjrDo.exe
  C:\Windows\System\hqjjrDo.exe
  2⤵
  PID:8036
- C:\Windows\System\bzxAoEr.exe
  C:\Windows\System\bzxAoEr.exe
  2⤵
  PID:8072
- C:\Windows\System\tnHzaWq.exe
  C:\Windows\System\tnHzaWq.exe
  2⤵
  PID:8112
- C:\Windows\System\piPcPhl.exe
  C:\Windows\System\piPcPhl.exe
  2⤵
  PID:8116
- C:\Windows\System\kDsPAlE.exe
  C:\Windows\System\kDsPAlE.exe
  2⤵
  PID:8136
- C:\Windows\System\nkKXSKO.exe
  C:\Windows\System\nkKXSKO.exe
  2⤵
  PID:8184
- C:\Windows\System\VGIoduo.exe
  C:\Windows\System\VGIoduo.exe
  2⤵
  PID:6260
- C:\Windows\System\TOmCUSE.exe
  C:\Windows\System\TOmCUSE.exe
  2⤵
  PID:7196
- C:\Windows\System\pcBpfKK.exe
  C:\Windows\System\pcBpfKK.exe
  2⤵
  PID:7260
- C:\Windows\System\pbPbZvH.exe
  C:\Windows\System\pbPbZvH.exe
  2⤵
  PID:7212
- C:\Windows\System\QGrTplJ.exe
  C:\Windows\System\QGrTplJ.exe
  2⤵
  PID:7360
- C:\Windows\System\xmbDcht.exe
  C:\Windows\System\xmbDcht.exe
  2⤵
  PID:7308
- C:\Windows\System\gFGDfdg.exe
  C:\Windows\System\gFGDfdg.exe
  2⤵
  PID:7456
- C:\Windows\System\OaksSyZ.exe
  C:\Windows\System\OaksSyZ.exe
  2⤵
  PID:7496
- C:\Windows\System\sOgapmb.exe
  C:\Windows\System\sOgapmb.exe
  2⤵
  PID:7532
- C:\Windows\System\tacyztQ.exe
  C:\Windows\System\tacyztQ.exe
  2⤵
  PID:7512
- C:\Windows\System\pXLXZJO.exe
  C:\Windows\System\pXLXZJO.exe
  2⤵
  PID:7560
- C:\Windows\System\OCEdWkU.exe
  C:\Windows\System\OCEdWkU.exe
  2⤵
  PID:7608
- C:\Windows\System\YtNVHXI.exe
  C:\Windows\System\YtNVHXI.exe
  2⤵
  PID:7616
- C:\Windows\System\WADyzma.exe
  C:\Windows\System\WADyzma.exe
  2⤵
  PID:7776
- C:\Windows\System\PKCzcXi.exe
  C:\Windows\System\PKCzcXi.exe
  2⤵
  PID:7988
- C:\Windows\System\JURsqpE.exe
  C:\Windows\System\JURsqpE.exe
  2⤵
  PID:8056
- C:\Windows\System\hwteSJh.exe
  C:\Windows\System\hwteSJh.exe
  2⤵
  PID:7492
- C:\Windows\System\tHOxkNt.exe
  C:\Windows\System\tHOxkNt.exe
  2⤵
  PID:7564
- C:\Windows\System\BNOVZuB.exe
  C:\Windows\System\BNOVZuB.exe
  2⤵
  PID:7628
- C:\Windows\System\abkPrCB.exe
  C:\Windows\System\abkPrCB.exe
  2⤵
  PID:7404
- C:\Windows\System\jBYAFgc.exe
  C:\Windows\System\jBYAFgc.exe
  2⤵
  PID:7480
- C:\Windows\System\nsqJfWe.exe
  C:\Windows\System\nsqJfWe.exe
  2⤵
  PID:7664
- C:\Windows\System\fNAgPSj.exe
  C:\Windows\System\fNAgPSj.exe
  2⤵
  PID:7836
- C:\Windows\System\AxjllfT.exe
  C:\Windows\System\AxjllfT.exe
  2⤵
  PID:7784
- C:\Windows\System\cZBDAJj.exe
  C:\Windows\System\cZBDAJj.exe
  2⤵
  PID:7856
- C:\Windows\System\mQmkPQv.exe
  C:\Windows\System\mQmkPQv.exe
  2⤵
  PID:8052
- C:\Windows\System\OIdjvhD.exe
  C:\Windows\System\OIdjvhD.exe
  2⤵
  PID:8164
- C:\Windows\System\krjMJci.exe
  C:\Windows\System\krjMJci.exe
  2⤵
  PID:6952
- C:\Windows\System\YTizAWZ.exe
  C:\Windows\System\YTizAWZ.exe
  2⤵
  PID:6820
- C:\Windows\System\NdFfIgx.exe
  C:\Windows\System\NdFfIgx.exe
  2⤵
  PID:7356
- C:\Windows\System\VWFRqes.exe
  C:\Windows\System\VWFRqes.exe
  2⤵
  PID:7528
- C:\Windows\System\xbQKWdI.exe
  C:\Windows\System\xbQKWdI.exe
  2⤵
  PID:7972
- C:\Windows\System\PCckdzJ.exe
  C:\Windows\System\PCckdzJ.exe
  2⤵
  PID:8096
- C:\Windows\System\ihaKKLy.exe
  C:\Windows\System\ihaKKLy.exe
  2⤵
  PID:7960
- C:\Windows\System\pqzeLHU.exe
  C:\Windows\System\pqzeLHU.exe
  2⤵
  PID:8024
- C:\Windows\System\FKKMtfz.exe
  C:\Windows\System\FKKMtfz.exe
  2⤵
  PID:7796
- C:\Windows\System\EAOKDbL.exe
  C:\Windows\System\EAOKDbL.exe
  2⤵
  PID:7884
- C:\Windows\System\GYluLCa.exe
  C:\Windows\System\GYluLCa.exe
  2⤵
  PID:7756
- C:\Windows\System\WbLHXVE.exe
  C:\Windows\System\WbLHXVE.exe
  2⤵
  PID:8188
- C:\Windows\System\sxqtqou.exe
  C:\Windows\System\sxqtqou.exe
  2⤵
  PID:7744
- C:\Windows\System\TNudurL.exe
  C:\Windows\System\TNudurL.exe
  2⤵
  PID:7868
- C:\Windows\System\jkIOFBL.exe
  C:\Windows\System\jkIOFBL.exe
  2⤵
  PID:8200
- C:\Windows\System\EHCARQP.exe
  C:\Windows\System\EHCARQP.exe
  2⤵
  PID:8220
- C:\Windows\System\vQfCyjQ.exe
  C:\Windows\System\vQfCyjQ.exe
  2⤵
  PID:8236
- C:\Windows\System\vjwZlbQ.exe
  C:\Windows\System\vjwZlbQ.exe
  2⤵
  PID:8260
- C:\Windows\System\kXaokbP.exe
  C:\Windows\System\kXaokbP.exe
  2⤵
  PID:8276
- C:\Windows\System\QAoBzNt.exe
  C:\Windows\System\QAoBzNt.exe
  2⤵
  PID:8292
- C:\Windows\System\rEVPREf.exe
  C:\Windows\System\rEVPREf.exe
  2⤵
  PID:8312
- C:\Windows\System\GQBTwEb.exe
  C:\Windows\System\GQBTwEb.exe
  2⤵
  PID:8340
- C:\Windows\System\KedRwHZ.exe
  C:\Windows\System\KedRwHZ.exe
  2⤵
  PID:8360
- C:\Windows\System\IUvCcia.exe
  C:\Windows\System\IUvCcia.exe
  2⤵
  PID:8384
- C:\Windows\System\KhUhGnX.exe
  C:\Windows\System\KhUhGnX.exe
  2⤵
  PID:8404
- C:\Windows\System\hAMZkII.exe
  C:\Windows\System\hAMZkII.exe
  2⤵
  PID:8424
- C:\Windows\System\pvcUpCk.exe
  C:\Windows\System\pvcUpCk.exe
  2⤵
  PID:8440
- C:\Windows\System\qHaWWmF.exe
  C:\Windows\System\qHaWWmF.exe
  2⤵
  PID:8456
- C:\Windows\System\HaVHWNy.exe
  C:\Windows\System\HaVHWNy.exe
  2⤵
  PID:8476
- C:\Windows\System\cNFXIxP.exe
  C:\Windows\System\cNFXIxP.exe
  2⤵
  PID:8512
- C:\Windows\System\wdzdISc.exe
  C:\Windows\System\wdzdISc.exe
  2⤵
  PID:8528
- C:\Windows\System\xGdYEXq.exe
  C:\Windows\System\xGdYEXq.exe
  2⤵
  PID:8544
- C:\Windows\System\VCbYBTJ.exe
  C:\Windows\System\VCbYBTJ.exe
  2⤵
  PID:8560
- C:\Windows\System\hLOcECU.exe
  C:\Windows\System\hLOcECU.exe
  2⤵
  PID:8584
- C:\Windows\System\AjwONSP.exe
  C:\Windows\System\AjwONSP.exe
  2⤵
  PID:8604
- C:\Windows\System\tnRuXdt.exe
  C:\Windows\System\tnRuXdt.exe
  2⤵
  PID:8624
- C:\Windows\System\kSEOlZr.exe
  C:\Windows\System\kSEOlZr.exe
  2⤵
  PID:8640
- C:\Windows\System\bPUzvel.exe
  C:\Windows\System\bPUzvel.exe
  2⤵
  PID:8672
- C:\Windows\System\YHgvmXZ.exe
  C:\Windows\System\YHgvmXZ.exe
  2⤵
  PID:8688
- C:\Windows\System\zGVLYar.exe
  C:\Windows\System\zGVLYar.exe
  2⤵
  PID:8716
- C:\Windows\System\bAAvlHs.exe
  C:\Windows\System\bAAvlHs.exe
  2⤵
  PID:8732
- C:\Windows\System\kggOree.exe
  C:\Windows\System\kggOree.exe
  2⤵
  PID:8748
- C:\Windows\System\QAFzdal.exe
  C:\Windows\System\QAFzdal.exe
  2⤵
  PID:8764
- C:\Windows\System\naUdEYj.exe
  C:\Windows\System\naUdEYj.exe
  2⤵
  PID:8780
- C:\Windows\System\uliteYb.exe
  C:\Windows\System\uliteYb.exe
  2⤵
  PID:8816
- C:\Windows\System\ETSMIkr.exe
  C:\Windows\System\ETSMIkr.exe
  2⤵
  PID:8832
- C:\Windows\System\hMhicMu.exe
  C:\Windows\System\hMhicMu.exe
  2⤵
  PID:8848
- C:\Windows\System\jKAEBdy.exe
  C:\Windows\System\jKAEBdy.exe
  2⤵
  PID:8872
- C:\Windows\System\xeGmvks.exe
  C:\Windows\System\xeGmvks.exe
  2⤵
  PID:8888
- C:\Windows\System\fKCwLpu.exe
  C:\Windows\System\fKCwLpu.exe
  2⤵
  PID:8908
- C:\Windows\System\ursfAil.exe
  C:\Windows\System\ursfAil.exe
  2⤵
  PID:8924
- C:\Windows\System\SifsAsp.exe
  C:\Windows\System\SifsAsp.exe
  2⤵
  PID:8940
- C:\Windows\System\HcWaoer.exe
  C:\Windows\System\HcWaoer.exe
  2⤵
  PID:8956
- C:\Windows\System\PDXxFHi.exe
  C:\Windows\System\PDXxFHi.exe
  2⤵
  PID:8972
- C:\Windows\System\lGxVAwb.exe
  C:\Windows\System\lGxVAwb.exe
  2⤵
  PID:9024
- C:\Windows\System\fAFaBsb.exe
  C:\Windows\System\fAFaBsb.exe
  2⤵
  PID:9040
- C:\Windows\System\qZluIrl.exe
  C:\Windows\System\qZluIrl.exe
  2⤵
  PID:9056
- C:\Windows\System\sNQGWLW.exe
  C:\Windows\System\sNQGWLW.exe
  2⤵
  PID:9084
- C:\Windows\System\KazDaHS.exe
  C:\Windows\System\KazDaHS.exe
  2⤵
  PID:9100
- C:\Windows\System\AJKEkKs.exe
  C:\Windows\System\AJKEkKs.exe
  2⤵
  PID:9116
- C:\Windows\System\lfgqxEc.exe
  C:\Windows\System\lfgqxEc.exe
  2⤵
  PID:9132
- C:\Windows\System\pBtRhSE.exe
  C:\Windows\System\pBtRhSE.exe
  2⤵
  PID:9148
- C:\Windows\System\siwDdRY.exe
  C:\Windows\System\siwDdRY.exe
  2⤵
  PID:9180
- C:\Windows\System\YslSGOk.exe
  C:\Windows\System\YslSGOk.exe
  2⤵
  PID:9204
- C:\Windows\System\PsShrXy.exe
  C:\Windows\System\PsShrXy.exe
  2⤵
  PID:6336
- C:\Windows\System\ozzltfK.exe
  C:\Windows\System\ozzltfK.exe
  2⤵
  PID:8232
- C:\Windows\System\ozLBqvr.exe
  C:\Windows\System\ozLBqvr.exe
  2⤵
  PID:8268
- C:\Windows\System\wuleJrp.exe
  C:\Windows\System\wuleJrp.exe
  2⤵
  PID:8308
- C:\Windows\System\yenpqmr.exe
  C:\Windows\System\yenpqmr.exe
  2⤵
  PID:8332
- C:\Windows\System\CiyAhCd.exe
  C:\Windows\System\CiyAhCd.exe
  2⤵
  PID:8244
- C:\Windows\System\XwdERLi.exe
  C:\Windows\System\XwdERLi.exe
  2⤵
  PID:8396
- C:\Windows\System\qEbkYhm.exe
  C:\Windows\System\qEbkYhm.exe
  2⤵
  PID:8436
- C:\Windows\System\GrOPokk.exe
  C:\Windows\System\GrOPokk.exe
  2⤵
  PID:8368
- C:\Windows\System\fsLdRGZ.exe
  C:\Windows\System\fsLdRGZ.exe
  2⤵
  PID:8380
- C:\Windows\System\jdRXWvx.exe
  C:\Windows\System\jdRXWvx.exe
  2⤵
  PID:8520
- C:\Windows\System\qZuKmXt.exe
  C:\Windows\System\qZuKmXt.exe
  2⤵
  PID:8600
- C:\Windows\System\xDdllqr.exe
  C:\Windows\System\xDdllqr.exe
  2⤵
  PID:8632
- C:\Windows\System\ifmhYWq.exe
  C:\Windows\System\ifmhYWq.exe
  2⤵
  PID:8508
- C:\Windows\System\ilIJWeJ.exe
  C:\Windows\System\ilIJWeJ.exe
  2⤵
  PID:8620
- C:\Windows\System\jeSvREi.exe
  C:\Windows\System\jeSvREi.exe
  2⤵
  PID:8580
- C:\Windows\System\rOpYATe.exe
  C:\Windows\System\rOpYATe.exe
  2⤵
  PID:8704
- C:\Windows\System\vXfxUdC.exe
  C:\Windows\System\vXfxUdC.exe
  2⤵
  PID:8724
- C:\Windows\System\EzHFyRH.exe
  C:\Windows\System\EzHFyRH.exe
  2⤵
  PID:8740
- C:\Windows\System\xdpZacQ.exe
  C:\Windows\System\xdpZacQ.exe
  2⤵
  PID:8792
- C:\Windows\System\xJbFjHj.exe
  C:\Windows\System\xJbFjHj.exe
  2⤵
  PID:8804
- C:\Windows\System\xhYTahq.exe
  C:\Windows\System\xhYTahq.exe
  2⤵
  PID:8828
- C:\Windows\System\WbiTlCl.exe
  C:\Windows\System\WbiTlCl.exe
  2⤵
  PID:8844
- C:\Windows\System\ecyjxSV.exe
  C:\Windows\System\ecyjxSV.exe
  2⤵
  PID:8900
- C:\Windows\System\JokzOqo.exe
  C:\Windows\System\JokzOqo.exe
  2⤵
  PID:8948
- C:\Windows\System\lhMTFFT.exe
  C:\Windows\System\lhMTFFT.exe
  2⤵
  PID:8984
- C:\Windows\System\tBqzvMj.exe
  C:\Windows\System\tBqzvMj.exe
  2⤵
  PID:8964
- C:\Windows\System\qqlmwxc.exe
  C:\Windows\System\qqlmwxc.exe
  2⤵
  PID:9008
- C:\Windows\System\ystWlXd.exe
  C:\Windows\System\ystWlXd.exe
  2⤵
  PID:9124
- C:\Windows\System\DxswBTr.exe
  C:\Windows\System\DxswBTr.exe
  2⤵
  PID:9164
- C:\Windows\System\CnECyZJ.exe
  C:\Windows\System\CnECyZJ.exe
  2⤵
  PID:9144
- C:\Windows\System\tCaIxlN.exe
  C:\Windows\System\tCaIxlN.exe
  2⤵
  PID:9212
- C:\Windows\System\gKTqVan.exe
  C:\Windows\System\gKTqVan.exe
  2⤵
  PID:8304
- C:\Windows\System\PWpAHLE.exe
  C:\Windows\System\PWpAHLE.exe
  2⤵
  PID:8212
- C:\Windows\System\uCGsQjf.exe
  C:\Windows\System\uCGsQjf.exe
  2⤵
  PID:8284
- C:\Windows\System\rDIadDJ.exe
  C:\Windows\System\rDIadDJ.exe
  2⤵
  PID:8336
- C:\Windows\System\VjXBhAf.exe
  C:\Windows\System\VjXBhAf.exe
  2⤵
  PID:8392
- C:\Windows\System\LNvgAwf.exe
  C:\Windows\System\LNvgAwf.exe
  2⤵
  PID:8416
- C:\Windows\System\SVwCDbz.exe
  C:\Windows\System\SVwCDbz.exe
  2⤵
  PID:8420
- C:\Windows\System\nFVdFaq.exe
  C:\Windows\System\nFVdFaq.exe
  2⤵
  PID:8288
- C:\Windows\System\OyvxkxC.exe
  C:\Windows\System\OyvxkxC.exe
  2⤵
  PID:8616
- C:\Windows\System\fhBRBMV.exe
  C:\Windows\System\fhBRBMV.exe
  2⤵
  PID:8684
- C:\Windows\System\OpoSWCD.exe
  C:\Windows\System\OpoSWCD.exe
  2⤵
  PID:8664
- C:\Windows\System\XnJFUlW.exe
  C:\Windows\System\XnJFUlW.exe
  2⤵
  PID:8772
- C:\Windows\System\dDAfbPc.exe
  C:\Windows\System\dDAfbPc.exe
  2⤵
  PID:8856
- C:\Windows\System\mURLaQa.exe
  C:\Windows\System\mURLaQa.exe
  2⤵
  PID:8904
- C:\Windows\System\nlUDFuE.exe
  C:\Windows\System\nlUDFuE.exe
  2⤵
  PID:8952
- C:\Windows\System\kMawbZI.exe
  C:\Windows\System\kMawbZI.exe
  2⤵
  PID:9092
- C:\Windows\System\CCydzLc.exe
  C:\Windows\System\CCydzLc.exe
  2⤵
  PID:9112
- C:\Windows\System\RVcyIPP.exe
  C:\Windows\System\RVcyIPP.exe
  2⤵
  PID:9156
- C:\Windows\System\BYEoihK.exe
  C:\Windows\System\BYEoihK.exe
  2⤵
  PID:9200
- C:\Windows\System\OsDrMEF.exe
  C:\Windows\System\OsDrMEF.exe
  2⤵
  PID:9192
- C:\Windows\System\NeEoPLl.exe
  C:\Windows\System\NeEoPLl.exe
  2⤵
  PID:8352
- C:\Windows\System\rfsBErf.exe
  C:\Windows\System\rfsBErf.exe
  2⤵
  PID:8468
- C:\Windows\System\GiTjbqd.exe
  C:\Windows\System\GiTjbqd.exe
  2⤵
  PID:8524
- C:\Windows\System\RBgviuQ.exe
  C:\Windows\System\RBgviuQ.exe
  2⤵
  PID:8648
- C:\Windows\System\volWzfO.exe
  C:\Windows\System\volWzfO.exe
  2⤵
  PID:8868
- C:\Windows\System\fsEYkWv.exe
  C:\Windows\System\fsEYkWv.exe
  2⤵
  PID:8208
- C:\Windows\System\XYrQOlM.exe
  C:\Windows\System\XYrQOlM.exe
  2⤵
  PID:8612
- C:\Windows\System\lqqNIIl.exe
  C:\Windows\System\lqqNIIl.exe
  2⤵
  PID:8812
- C:\Windows\System\ecCfnyf.exe
  C:\Windows\System\ecCfnyf.exe
  2⤵
  PID:8936
- C:\Windows\System\KmjsSSk.exe
  C:\Windows\System\KmjsSSk.exe
  2⤵
  PID:9048
- C:\Windows\System\IZDzeRl.exe
  C:\Windows\System\IZDzeRl.exe
  2⤵
  PID:8700
- C:\Windows\System\RHNgiYy.exe
  C:\Windows\System\RHNgiYy.exe
  2⤵
  PID:8776
- C:\Windows\System\bjbTJYa.exe
  C:\Windows\System\bjbTJYa.exe
  2⤵
  PID:8744
- C:\Windows\System\YpwoisZ.exe
  C:\Windows\System\YpwoisZ.exe
  2⤵
  PID:8472
- C:\Windows\System\OoAfiHE.exe
  C:\Windows\System\OoAfiHE.exe
  2⤵
  PID:8864
- C:\Windows\System\tKnWrud.exe
  C:\Windows\System\tKnWrud.exe
  2⤵
  PID:9072
- C:\Windows\System\LshwOPs.exe
  C:\Windows\System\LshwOPs.exe
  2⤵
  PID:8068
- C:\Windows\System\PZuiEjs.exe
  C:\Windows\System\PZuiEjs.exe
  2⤵
  PID:8572
- C:\Windows\System\BUiXAaS.exe
  C:\Windows\System\BUiXAaS.exe
  2⤵
  PID:8320
- C:\Windows\System\CtDCLjy.exe
  C:\Windows\System\CtDCLjy.exe
  2⤵
  PID:8196
- C:\Windows\System\rxQMfre.exe
  C:\Windows\System\rxQMfre.exe
  2⤵
  PID:8796
- C:\Windows\System\ymcQACe.exe
  C:\Windows\System\ymcQACe.exe
  2⤵
  PID:8840
- C:\Windows\System\yatlSQK.exe
  C:\Windows\System\yatlSQK.exe
  2⤵
  PID:9052
- C:\Windows\System\PxEugov.exe
  C:\Windows\System\PxEugov.exe
  2⤵
  PID:8372
- C:\Windows\System\dJNbIlq.exe
  C:\Windows\System\dJNbIlq.exe
  2⤵
  PID:9228
- C:\Windows\System\hspsBgW.exe
  C:\Windows\System\hspsBgW.exe
  2⤵
  PID:9252
- C:\Windows\System\awehRxL.exe
  C:\Windows\System\awehRxL.exe
  2⤵
  PID:9268
- C:\Windows\System\GbtxhBf.exe
  C:\Windows\System\GbtxhBf.exe
  2⤵
  PID:9288
- C:\Windows\System\cUCouxk.exe
  C:\Windows\System\cUCouxk.exe
  2⤵
  PID:9312
- C:\Windows\System\HebFTDt.exe
  C:\Windows\System\HebFTDt.exe
  2⤵
  PID:9332
- C:\Windows\System\iqMBkHO.exe
  C:\Windows\System\iqMBkHO.exe
  2⤵
  PID:9360
- C:\Windows\System\wHUSVdo.exe
  C:\Windows\System\wHUSVdo.exe
  2⤵
  PID:9376
- C:\Windows\System\yNQjbOx.exe
  C:\Windows\System\yNQjbOx.exe
  2⤵
  PID:9392
- C:\Windows\System\xnSoWlG.exe
  C:\Windows\System\xnSoWlG.exe
  2⤵
  PID:9408
- C:\Windows\System\LtARZgR.exe
  C:\Windows\System\LtARZgR.exe
  2⤵
  PID:9424
- C:\Windows\System\vXNgKnT.exe
  C:\Windows\System\vXNgKnT.exe
  2⤵
  PID:9464
- C:\Windows\System\IHLqdLl.exe
  C:\Windows\System\IHLqdLl.exe
  2⤵
  PID:9480
- C:\Windows\System\MJIhYPp.exe
  C:\Windows\System\MJIhYPp.exe
  2⤵
  PID:9496
- C:\Windows\System\wexrefx.exe
  C:\Windows\System\wexrefx.exe
  2⤵
  PID:9512
- C:\Windows\System\gKKQqOk.exe
  C:\Windows\System\gKKQqOk.exe
  2⤵
  PID:9528
- C:\Windows\System\QUNNNRT.exe
  C:\Windows\System\QUNNNRT.exe
  2⤵
  PID:9544
- C:\Windows\System\HKxemML.exe
  C:\Windows\System\HKxemML.exe
  2⤵
  PID:9560
- C:\Windows\System\sPutGqC.exe
  C:\Windows\System\sPutGqC.exe
  2⤵
  PID:9576
- C:\Windows\System\bHYtsjf.exe
  C:\Windows\System\bHYtsjf.exe
  2⤵
  PID:9600
- C:\Windows\System\JHStoeC.exe
  C:\Windows\System\JHStoeC.exe
  2⤵
  PID:9624
- C:\Windows\System\sgVIetO.exe
  C:\Windows\System\sgVIetO.exe
  2⤵
  PID:9640
- C:\Windows\System\wFLysRA.exe
  C:\Windows\System\wFLysRA.exe
  2⤵
  PID:9656
- C:\Windows\System\aUloTsu.exe
  C:\Windows\System\aUloTsu.exe
  2⤵
  PID:9676
- C:\Windows\System\guykmfF.exe
  C:\Windows\System\guykmfF.exe
  2⤵
  PID:9696
- C:\Windows\System\BToaQgl.exe
  C:\Windows\System\BToaQgl.exe
  2⤵
  PID:9728
- C:\Windows\System\EPWqfdZ.exe
  C:\Windows\System\EPWqfdZ.exe
  2⤵
  PID:9744
- C:\Windows\System\PwdHUjr.exe
  C:\Windows\System\PwdHUjr.exe
  2⤵
  PID:9764
- C:\Windows\System\CVAUuaE.exe
  C:\Windows\System\CVAUuaE.exe
  2⤵
  PID:9784
- C:\Windows\System\tsqgRar.exe
  C:\Windows\System\tsqgRar.exe
  2⤵
  PID:9800
- C:\Windows\System\zMiOpQT.exe
  C:\Windows\System\zMiOpQT.exe
  2⤵
  PID:9816
- C:\Windows\System\wAfSYxa.exe
  C:\Windows\System\wAfSYxa.exe
  2⤵
  PID:9832
- C:\Windows\System\fwuTpWy.exe
  C:\Windows\System\fwuTpWy.exe
  2⤵
  PID:9848
- C:\Windows\System\sWbgbmd.exe
  C:\Windows\System\sWbgbmd.exe
  2⤵
  PID:9904
- C:\Windows\System\NslGcTG.exe
  C:\Windows\System\NslGcTG.exe
  2⤵
  PID:9928
- C:\Windows\System\FkkZqXQ.exe
  C:\Windows\System\FkkZqXQ.exe
  2⤵
  PID:9948
- C:\Windows\System\QPopixM.exe
  C:\Windows\System\QPopixM.exe
  2⤵
  PID:9964
- C:\Windows\System\ezNoqKp.exe
  C:\Windows\System\ezNoqKp.exe
  2⤵
  PID:9980
- C:\Windows\System\zQhENma.exe
  C:\Windows\System\zQhENma.exe
  2⤵
  PID:10000
- C:\Windows\System\XSMrWLF.exe
  C:\Windows\System\XSMrWLF.exe
  2⤵
  PID:10024
- C:\Windows\System\pfhxDwI.exe
  C:\Windows\System\pfhxDwI.exe
  2⤵
  PID:10044
- C:\Windows\System\DziHCfl.exe
  C:\Windows\System\DziHCfl.exe
  2⤵
  PID:10060
- C:\Windows\System\gmKKJTH.exe
  C:\Windows\System\gmKKJTH.exe
  2⤵
  PID:10088
- C:\Windows\System\tFfLQFr.exe
  C:\Windows\System\tFfLQFr.exe
  2⤵
  PID:10104
- C:\Windows\System\pYCsaVz.exe
  C:\Windows\System\pYCsaVz.exe
  2⤵
  PID:10120
- C:\Windows\System\idstffx.exe
  C:\Windows\System\idstffx.exe
  2⤵
  PID:10136
- C:\Windows\System\oQTKPQZ.exe
  C:\Windows\System\oQTKPQZ.exe
  2⤵
  PID:10156
- C:\Windows\System\wIZgnMD.exe
  C:\Windows\System\wIZgnMD.exe
  2⤵
  PID:10172
- C:\Windows\System\pMAApcA.exe
  C:\Windows\System\pMAApcA.exe
  2⤵
  PID:10204
- C:\Windows\System\hLLuNwQ.exe
  C:\Windows\System\hLLuNwQ.exe
  2⤵
  PID:10220
- C:\Windows\System\FhdUiHu.exe
  C:\Windows\System\FhdUiHu.exe
  2⤵
  PID:9220
- C:\Windows\System\hQsavSn.exe
  C:\Windows\System\hQsavSn.exe
  2⤵
  PID:9260
- C:\Windows\System\AubfOYy.exe
  C:\Windows\System\AubfOYy.exe
  2⤵
  PID:9308
- C:\Windows\System\LiqBYaG.exe
  C:\Windows\System\LiqBYaG.exe
  2⤵
  PID:9344
- C:\Windows\System\TwuQOzz.exe
  C:\Windows\System\TwuQOzz.exe
  2⤵
  PID:9276
- C:\Windows\System\ifkaoRS.exe
  C:\Windows\System\ifkaoRS.exe
  2⤵
  PID:9368
- C:\Windows\System\WlUyMZL.exe
  C:\Windows\System\WlUyMZL.exe
  2⤵
  PID:9404
- C:\Windows\System\FKwhFns.exe
  C:\Windows\System\FKwhFns.exe
  2⤵
  PID:9444
- C:\Windows\System\QJhABce.exe
  C:\Windows\System\QJhABce.exe
  2⤵
  PID:9488
- C:\Windows\System\htrvSik.exe
  C:\Windows\System\htrvSik.exe
  2⤵
  PID:9536
- C:\Windows\System\qMMeUxk.exe
  C:\Windows\System\qMMeUxk.exe
  2⤵
  PID:9588
- C:\Windows\System\fndexCU.exe
  C:\Windows\System\fndexCU.exe
  2⤵
  PID:9608
- C:\Windows\System\VkWWoaN.exe
  C:\Windows\System\VkWWoaN.exe
  2⤵
  PID:9616
- C:\Windows\System\kJDVErA.exe
  C:\Windows\System\kJDVErA.exe
  2⤵
  PID:9684
- C:\Windows\System\ptRihRc.exe
  C:\Windows\System\ptRihRc.exe
  2⤵
  PID:9664
- C:\Windows\System\LzeTGAN.exe
  C:\Windows\System\LzeTGAN.exe
  2⤵
  PID:9736
- C:\Windows\System\PyqPAnZ.exe
  C:\Windows\System\PyqPAnZ.exe
  2⤵
  PID:9756
- C:\Windows\System\sThrGur.exe
  C:\Windows\System\sThrGur.exe
  2⤵
  PID:9792
- C:\Windows\System\GPZtyyD.exe
  C:\Windows\System\GPZtyyD.exe
  2⤵
  PID:9840
- C:\Windows\System\KzyJUbz.exe
  C:\Windows\System\KzyJUbz.exe
  2⤵
  PID:9888
- C:\Windows\System\ojIFomG.exe
  C:\Windows\System\ojIFomG.exe
  2⤵
  PID:9892
- C:\Windows\System\cRQZbhY.exe
  C:\Windows\System\cRQZbhY.exe
  2⤵
  PID:9924
- C:\Windows\System\uLmIAOC.exe
  C:\Windows\System\uLmIAOC.exe
  2⤵
  PID:9956
- C:\Windows\System\yCJSOYa.exe
  C:\Windows\System\yCJSOYa.exe
  2⤵
  PID:9996
- C:\Windows\System\ScluxQZ.exe
  C:\Windows\System\ScluxQZ.exe
  2⤵
  PID:9972
- C:\Windows\System\rBMQRQP.exe
  C:\Windows\System\rBMQRQP.exe
  2⤵
  PID:10016
- C:\Windows\System\lHTyQrm.exe
  C:\Windows\System\lHTyQrm.exe
  2⤵
  PID:10008
- C:\Windows\System\CnESjhh.exe
  C:\Windows\System\CnESjhh.exe
  2⤵
  PID:10096
- C:\Windows\System\fpzFKak.exe
  C:\Windows\System\fpzFKak.exe
  2⤵
  PID:10144

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Windows\system\ARkOaNs.exe

Filesize
1.1MB

MD5
5cffa250c19fdfa99c2b43c4224c33d2

SHA1
82576f1b58a82cfcb84b4d88fd42d1fda52ca607

SHA256
1dc748dcdf36bb0d83a42447db4fd1e726949db0280611778febc69bf86b6092

SHA512
b26fabeb2e276e6f65c7b03455f6ce2895f893f90889bd344d044a1f28c649fb6e21be2501223356dd675d56fa19c017a4c650127b1d0ac490a28528f68b31df

Download Submit
C:\Windows\system\EKWfGEA.exe

Filesize
1.1MB

MD5
7d9578333abac9d3096e1f037a4f5fb4

SHA1
37ccd0e732092e54cfeb290d64df2b48442f93f4

SHA256
3c505fb3df5634e7ceef00a5a71745272b9af991d752403c36085b14b50ff940

SHA512
11793f5bbb257997240db0e96e5fca85e8a8b8446833bdcd6bc4702488a125577789d88a26cc8417fe75e7dbcb2f49e6ae92504d418e84a3cd4061124058bd6c

Download Submit
C:\Windows\system\FndcThL.exe

Filesize
1.1MB

MD5
a3b476bdadd26725ce35486e583f4793

SHA1
45c5ec14c446da41c36a2f840fd03dceee022e8b

SHA256
7e646ea13b145de8ad20facd6e8b7cb8b86b84ee3069562e353741b87afd8718

SHA512
584cd2183b38f40c22dc6afcbb9b67e429b25849ec02e2a1779855280a449d59f8c302621f465f79785c2b8fbdc7e8d94efc72486de801eb1e52d9398db07310

Download Submit
C:\Windows\system\GCfEEDB.exe

Filesize
1.1MB

MD5
8cf6b80c2365ef89c55d69b2df7a43af

SHA1
820d31b4456bf09292455220b54947dd54dccd6f

SHA256
427a113ed0e5d3dcff9b9c5f56712f7095d77d0fb74224ed0cad77d8411eb27a

SHA512
bd2eb3e5846220a738a30bf8b9b0f472268d012e5832e281c4cd9424b971f2ed6ae12641498c4793614ed512ee747f430755b833fd8b367823031d42f7a49397

Download Submit
C:\Windows\system\HFfXDIV.exe

Filesize
1.1MB

MD5
16571788b938e748b19449e981dbe2b4

SHA1
19c1dfb6a4d02e6a7b763c82b9f06152f2930e3f

SHA256
5ca4f7cfdac95e4f02ef6bc324573be957d87fe15f65051838e1470a9afee2e6

SHA512
83265dfa7611beaead9114997b702cf3b7ce70cbeb20a441980afc6cdb717f8b52de046e7657968ef77a472d3f8915504bc7a983540a101bf39e537fff8b7364

Download Submit
C:\Windows\system\HTatMOc.exe

Filesize
1.1MB

MD5
81a992674a0d7f56322e8afbc6bef0ca

SHA1
42d2e93d16429dd1e636a693a88a08f5bfbef49d

SHA256
64f12ffcb63a4dcc6d36750b91926802f78f9a29be5406aca8607e4940ae7243

SHA512
51d18355c95ec9ddb04ee1fc7f775277f449a13a7c486c4032460fa18bbbb1155cd8ce8890285e6f613606338b53c5207fc3a6b985b0e39409a46b2dff6e63f4

Download Submit
C:\Windows\system\IGKIAYK.exe

Filesize
1.1MB

MD5
ffd3de33e7271ceefb3d22462ab6deae

SHA1
059732fb56a5beb91b1a855c56f03a5826cec7b7

SHA256
3be80e91858d07bed3e6712a035b31545cf7319218fe4b21a3a5803c0511d0a1

SHA512
3a31c531dc9a6621153deffb5a3a870b54b3cb5ce848f21e820bda8e387aa5af26efb3fb554429c8b40ab9e458ff04c77290fb4ba26098c5c1c64dfd6184afee

Download Submit
C:\Windows\system\ISesXdZ.exe

Filesize
1.1MB

MD5
d9399c04a43f72a3f8d3bba151d91302

SHA1
7420e1a87de912898565c032a7bff1cb2ee4e955

SHA256
2fc9b5c87e08798eec2b784dd476c6058287c200840a24810888f462b8d4d556

SHA512
648981a1bb6a735b6e97f48cc27b9dd0722d6991b3510dc55d20f00496842d09a194cd9ea021543f306c70c1ce151f69b7f488db9f11e32d79bb7bf145b13cad

Download Submit
C:\Windows\system\KiwFrqa.exe

Filesize
1.1MB

MD5
4a9a109e780199006e57f3c9d06b628d

SHA1
b7a81b927fe737a7540a944ef07d7eddd9276f2d

SHA256
e3de7148755e1e88e21ff10fe04058d1ea4fe2abe070916853d2584a375941aa

SHA512
d770ef39652e4344e74b45c8b59a96139af6cafae0a6c8f2e8e2d49e001efd088d0ab250e93f0aebc44b29875403c6d205c0098175732a8a0e4f91d2df76d84f

Download Submit
C:\Windows\system\LoTWrxN.exe

Filesize
1.1MB

MD5
7d6a8f05ac62397c711430d163802d4d

SHA1
19b2c4966374cb6ebf3bfb1dde2532d1abebe824

SHA256
f87d7aa6693fb806038bb1f9e1856316c2971c0ac2f9b3cb700ae404c406dfd9

SHA512
764747eea09ed1f190342ba875cbc205b5a140ff55388189c0b5545e6e2c827ed6d2ff6db7e0deffa74cf54bd4f874969c9f81b2ea52e3ab545c61371f8f6257

Download Submit
C:\Windows\system\PLESewz.exe

Filesize
1.1MB

MD5
de2cd42deeddf518e8260cd9c93f3900

SHA1
11c328c6011872ccae357ae6c3956a2978e5606a

SHA256
16e091ea7e1e7f5cc305f794a62e73aeb2d381314cbb3fa573a8e83f9dc7075f

SHA512
0fd1bde7d94662f5374fb8c45c6ece25f5729cc393e867bc6f08318c967ecf5afecd32fc449b21a4a0f5854766a6e3acfe6cfa6e7e608404acdd1d0a8f8e335e

Download Submit
C:\Windows\system\SPeLPBt.exe

Filesize
1.1MB

MD5
b2b4d14940864a55abd7a45cfde7ee35

SHA1
f32a917e1a52688afd539d74aceff7fdb06fd42a

SHA256
2ec4d6945dbc4aa652fde723be94da4d832d6e81ac200910823a885565a994fe

SHA512
1780a48f40d07e8529359c356dd60755af88af7db3aa20d23d07bf1dc2c9054c94626b4b2cadb87a9cb5522d496067db0d05a2503b0663b300078900a46a1b80

Download Submit
C:\Windows\system\SclFMbi.exe

Filesize
1.1MB

MD5
38f704a1e542ac72a0a525204ecff15e

SHA1
8e8b285b5e7051924cf223c7cf41d11368f728e9

SHA256
99fcb0480ecc52410f5be043148ede907045c6a565ec593a1f892d8de212f645

SHA512
2fd1a51a0593cf7f4951a09c782f5d5677e0b41f637944fa1d297fdb67364caf5f2522f139d7bf0e9075e226abfec2f9eb18927957d8e93fb26472f060cc37d0

Download Submit
C:\Windows\system\VmqRRpX.exe

Filesize
1.1MB

MD5
3198207b734bbb825f3907a11e31af68

SHA1
e6a3da28a37dabb90a65d9aad33b038bc8ea38a0

SHA256
c9a2769c75008a1d51760a30b05925d204b9290dd2aa68ffd384d7fab40fa0bd

SHA512
055209b465d6b03d4f9f0c4d809ca15a8b81f249c13208efb1595d84d4d4eaf9bd0f77f57ceae15ec3d95ab0e73e0f7a5fbe6ed584fcacbff7d985d81747c5fb

Download Submit
C:\Windows\system\biaPMhj.exe

Filesize
1.1MB

MD5
4114fc3f221dfcc09fc5981e405e5152

SHA1
22161919c947403509b63ed92b606e66d719fa80

SHA256
9fab4e444404000d2caa21d74aaaa720c7a34a9873e7eb7993468dc479377717

SHA512
c3dc288b48626fc53f09f25779122146c8910166fa57722bb2ee175a5a2d01255243145996055a33c56c71b75f67c4f9b71a41022d257e3d1fd902af5c07cf24

Download Submit
C:\Windows\system\dzqqanC.exe

Filesize
1.1MB

MD5
8fcb0eec603f9753b95194a1f2670726

SHA1
5965de881c64c58b32fb5d8f6ffd13716f3e27c6

SHA256
57ed32e1a52b7a99deaa781e3558572e4939004da181716c805af48eb4de0182

SHA512
bad3bf2d715d817c0a16fbee3ec144b732430b9e0f9b81d6381a8633e66e054bf723ecf9e70f1da9900101e72c7b923eb7ca9b1f3fd8438b631fe75cb4fb7938

Download Submit
C:\Windows\system\eINhFpb.exe

Filesize
1.1MB

MD5
e30d4f01b42f8c700b678b1dfe655d30

SHA1
1095697a99ce3750e82706b820c72c120e9b69b9

SHA256
7ed7dac81ceae751e45d1389b39d7f6d2a805b5002df1a5c77e16ee021fd5248

SHA512
0c87b9729783c2ff5b2a1bbc1368d01c230cf3f59a34ff1c8fa1691e4366ab73fee579a3114d89016d646bbc22e212671d07cca41a495db1dea5e070fddef095

Download Submit
C:\Windows\system\gCydcig.exe

Filesize
1.1MB

MD5
14fde7cfae20142bc04b55d088459df5

SHA1
3837a6b8b9a107a3303aa31a8cdbcc3a85f86050

SHA256
a596b7f0e59259dea406916e9c9f7f0e4a9a81b59380edaa555827162dbcc43a

SHA512
7586ef53ae0cb46b2f9fef7aaa596d374c15edd4bb009fdce95653002e521111751a365a7b8d2537f56c24bda481d31407e3de8a74cdb83bc0f46acb2df4685b

Download Submit
C:\Windows\system\hwnmPYX.exe

Filesize
1.1MB

MD5
8143959615c00f24df8141ee5772de28

SHA1
356f93796d22856d8272993e7544613e1e8b85a5

SHA256
6374f56977276a278b50a104447c516e15a376f5238e5831facaefbf332c9a8b

SHA512
ddb0e7eb3004dedd5bc1fea1c07a5383bb2ca183e4ff10b85886f5779fd9cf86d206b2708cc646916a10c6d4f160dfa7830504d7ff22204140c676adf03a65b6

Download Submit
C:\Windows\system\iEodkzR.exe

Filesize
1.1MB

MD5
e3593c59a443a016525e1cb94c19ad7f

SHA1
13e066462018dc6c018945228124a6aedcbea13d

SHA256
6a1dd57b3fbf46922fa4ecd416c770fa0680e54c7d01ee2a35d905de2e070391

SHA512
a0686a68965a088ad840083dfa07ce70b88f0c74c789564f116034cf66d8d95e63f38a453d3eb0e2e0e1dfc8e26e1190a283eadd462f1667810aa1d02aeadac4

Download Submit
C:\Windows\system\jSroUmX.exe

Filesize
1.1MB

MD5
d8a5a65614ba056fef0d159ba1409b84

SHA1
671485a9cac7ccbd71c35f6cb62da4b98ed448b9

SHA256
39c9caf61ab54847d58f1ebc7176fd9200ebcf12cd7032057d6e2910583ae61e

SHA512
1d2dcf3971cd7d7fa2fd0ab5de41387fc0c91e7e95532ab1104697419fc5891b6419c4a34e8b46ed731d8c07756c32511cfa6a8cbd68ac2a88ba6da56042e739

Download Submit
C:\Windows\system\kXfiKIx.exe

Filesize
1.1MB

MD5
9fc43b0a3df87cceea2cde7d1f045e02

SHA1
f5d4d12786b73e282af5054fa567be403acbb5fd

SHA256
e54c8a2fbf6dbf0b1d415e1fb068e8467034975df68876d2030577e484d67e96

SHA512
b7b1a119ae6f1190648edde5f7fc5fe7189436a97f97ad09b97fd8aed10dfa2dc8af8769238c67cd7e1b672c03079878a209cbe8b3c55e335a787ee64ba76fca

Download Submit
C:\Windows\system\kbxuGaZ.exe

Filesize
1.1MB

MD5
13b81c9875c8cc47a8af84c6fe23d2b9

SHA1
9f4eb47390e0bd226965bd28ccf37102e03c324c

SHA256
8c280210e8c2b9fd63282f621f0f5b1c7d80a8fc25e29fdf02ffe1ba2258c268

SHA512
228e9a13aa2c4237289ec0fd0e92738817dbfbb64e1cd810f554606501abe787eaf503f8a4afcefd6055caf9e5ff643ba7ba0221ce3720b9c48603dcba22d177

Download Submit
C:\Windows\system\kdDHTTL.exe

Filesize
1.1MB

MD5
877ab048200d69d73162d53282fbeab3

SHA1
5156347b72ffe6bbacfcf3776792728e5816e3cd

SHA256
f8d3543d0e53d4cfbfb2f5937010bbab54681a770006784506b1fed5b8e17737

SHA512
aa62414d7ae39235a196caf042d9667a7632ff83b9e9cc8bf9df3a435b384662d35c69f2384a1f7ec0cc07f5aa269448daeae69af29525548393719bf0b1ec59

Download Submit
C:\Windows\system\kxrHJQj.exe

Filesize
1.1MB

MD5
2f0d92e4fdf4232322830afd69e0bfb3

SHA1
9fcbb35c187fb14fffe80e99b4b03a33f41b5b84

SHA256
a557b5f98f634c57782dcde88ae762756e5ca3540ff84f22c30e9c922c491ad3

SHA512
9f3d1029d48e0a68a00c726100c1cfd8a770d388152399a0272c68e3af2aae24c5212db973d1dbb57e6c41ee06c53b0b93e29fe2b7b0545f01310d08ba70649c

Download Submit
C:\Windows\system\rcvokSe.exe

Filesize
1.1MB

MD5
860ed3246cabe864829864da528eeec9

SHA1
ff1cd98791df60e5a3d00451ac3ca56099939ce8

SHA256
d24d60d423fe80538440d28e699e95bd0e93e321d4b5d0676b15e36972691a44

SHA512
e5826a3f128ad2e86a7dd99a5045b22bec97c1b074496209c709ef6a30331920c506f4409bfed510ee92000d0fb0d66ef5e0e10a8ab8770cfdc50d52d1ed6b51

Download Submit
C:\Windows\system\rlTLNKl.exe

Filesize
1.1MB

MD5
d7fea35acf3957e916731747b0a8122f

SHA1
87a87a1cb9f9dd56da579e763e72cf06d9f4848c

SHA256
61ad66bb21ee1db76b41e538c49ed27759576b02fd2d1e99e3ae72ec6671e05f

SHA512
79506b756aa5277a95373f940bab48a23fdccd8573f53b89a57489f1ab29cc8b6a404fd3bca1d17b760e270ae62306df8b357f036804884b11a6ab8fb4194b7d

Download Submit
C:\Windows\system\rrLdKSd.exe

Filesize
1.1MB

MD5
0c2d7ca2db4535f5f59e8bf3405a7702

SHA1
b9b0cd5db8337c485c004ab8d49a900c99c5cc7e

SHA256
a8ecd564566a168c0b8e839d78592d6061206644aa5f47c0d731d6e6b554e68f

SHA512
2f8179b7f2a09c2aa87592c8c73f3cc1e59a9dae3600a9be84ba9adad31ece660f779d265f86163b22d71abc805dcf5bb3376d1a65a3abfe1189817b4c7e9115

Download Submit
C:\Windows\system\rvuMSmd.exe

Filesize
1.1MB

MD5
017c806dad74cbe1f732ddb9687c88b5

SHA1
ae521105d60263e98f200b89fa82f6a786fe9005

SHA256
f732217b7b746f1c7d4df3ad2bd230cca3f95fe774457f71039187613b5497b7

SHA512
f6f56817c438790caf1747cd6c1f8e732d7a91d42a2a33bd584c6ed925d54561c0ee8ffae99f2dfc4e30ebd52a71830c65a1d41e6a338d43b25c6ba0eb279759

Download Submit
C:\Windows\system\tJVOCIA.exe

Filesize
1.1MB

MD5
960ef9432d159a39c7f49f528422785f

SHA1
e674c915e609115568b49a02a04a219e7ebb03ca

SHA256
f0f7ef950e41b966b11ad6144adbe4839daba690d741d84070ba635624fc71fd

SHA512
1a1f52a4890270e518be6794e011981b94ac11224dcc4c15ddcddce579cbfb98f97effab21df2b695cf4ff5dfb2eeb64d811b65a3c911b903ba37f0e8e9cdc25

Download Submit
\Windows\system\JBHQmyJ.exe

Filesize
1.1MB

MD5
177cbd4ed9cd07a5f01334f7985f3310

SHA1
0f5fa589d48073ebd3c5c86be471fd77184f9bff

SHA256
acd6efff3774c1ee8691cd6d5d6ffe3586d14dcce727d9fdbe977539848ea2a1

SHA512
122acc0ddbab957cf02aaa3c3cf4ea472f09b1a9bb0ede7904f9ff7135ba2bfd66b0edf7b8035dcd105b75f1e732fcb6a8117d60e8d42a63a3c3452bc8d6c097

Download Submit
\Windows\system\mfRIPgn.exe

Filesize
1.1MB

MD5
47c03e672e079be0041feb9b8a68a143

SHA1
94b21ef4672e19157d1c6dab821d49e5640bac82

SHA256
ba7770020d61245fc22cc345a7b0980aeeedfcb7f2bd6c71e1cc525de04458ca

SHA512
f2076e0cfcbe344df560c3d8da65d1cf204b3ec71dc500e662309dffe539b80ac6d7da4e21a97f95a2a56f9e38c862f1ca8d02ea4ad0fb1cf66b96be8f2d14d4

Download Submit
memory/1996-0-0x00000000000F0000-0x0000000000100000-memory.dmp

Filesize
64KB

Download