6fd0fc4152e2812a6bd2c9d2ee791d8894695d5a0323a6624907ae61d3bad722

Analysis

max time kernel
150s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
16/09/2026, 10:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
6fd0fc4152e2812a6bd2c9d2ee791d8894695d5a0323a6624907ae61d3bad722.exe
Size 4.0MB
Sample260916-mlrd6aal3v
SHA256 6fd0fc4152e2812a6bd2c9d2ee791d8894695d5a0323a6624907ae61d3bad722
MD5 4ea1b31615c387be3b1b737559f196e1
SHA1 349733f9a224b9d9700e3dd513f6c172f4357ae5
SHA512 f6b211a55fc202c1667a1f2d403a69a0b3c1e372c8f8fe3eeb6efc0cd0abf734ef99a47495f4d2a3e7c118cb4ecf4e0f28e516499c5eba22c0207c03d2e825fa
SSDEEP 6144:Wcm4FmowdHoS+JsJlJeJPJoJEJhJ9JQJpJgJXJJJXJ2JXJWJXJZJXJ2JXJUJFJXk:44wFHoSzZ2gT
TLSH
T1CC1685E516D81CD6E59B1B3C25B22B1BCD80BB740476663118C8E8CF5E8EED7066C7B2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery upx

Malware Config

Signatures

Executes dropped EXE 64 IoCs

pid	Process
4808	nhbtbn.exe
4904	vdjjj.exe
5152	htbbhn.exe
1452	pvjpv.exe
5104	5xxxrlf.exe
2236	1llllrr.exe
3628	flfxrlf.exe
5736	jdpjj.exe
4736	tbhhtt.exe
1808	ffrrlrr.exe
944	hbntbb.exe
2464	hbntnn.exe
3044	vjpvp.exe
4440	bthbtb.exe
2164	lrfxxff.exe
2000	jdvpd.exe
5804	ntbbth.exe
4688	hhhtnb.exe
2364	ffrfrxx.exe
3620	rxfxrfl.exe
5100	rxlllfl.exe
4308	jpjpv.exe
6008	dpddv.exe
1848	thnntb.exe
5124	thnnbb.exe
4792	tntttn.exe
3052	djvvv.exe
5812	bbbtnh.exe
1244	5ttnnt.exe
4468	5nhnhn.exe
2356	frfflrr.exe
2180	frxxxrl.exe
1072	tnnntb.exe
824	5hbbhn.exe
4364	pppjv.exe
3716	vddjp.exe
3008	5jvpv.exe
2508	pdjjp.exe
4380	tnnhbb.exe
1564	fflflll.exe
3708	9xrxrfx.exe
2572	pjjjj.exe
5484	llfrxxx.exe
5756	nhtntt.exe
6016	rxrlflf.exe
5792	lfffxfr.exe
4180	ddvdd.exe
216	ppvdj.exe
224	djpjd.exe
3300	dpppp.exe
928	tnbtnh.exe
1080	jjjvd.exe
3800	1nttbb.exe
5412	thbthh.exe
2816	nhtnth.exe
1012	bhtbnt.exe
628	9ffxxxx.exe
5436	bnhhbt.exe
3336	vpppp.exe
5224	djvdd.exe
5108	tthbhh.exe
464	djjvd.exe
5032	xffrxxr.exe
3296	jdjjj.exe

UPX packed file 64 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral1/memory/4888-0-0x0000000000400000-0x0000000000843000-memory.dmp	upx
behavioral1/files/0x001000000002164c-5.dat	upx
behavioral1/memory/4808-13-0x0000000000400000-0x0000000000843000-memory.dmp	upx
behavioral1/files/0x000700000002459c-14.dat	upx
behavioral1/memory/5152-18-0x0000000000400000-0x0000000000843000-memory.dmp	upx
behavioral1/memory/4904-11-0x0000000000400000-0x0000000000843000-memory.dmp	upx
behavioral1/files/0x0008000000024598-10.dat	upx
behavioral1/files/0x0008000000024599-22.dat	upx
behavioral1/memory/1452-26-0x0000000000400000-0x0000000000843000-memory.dmp	upx
behavioral1/memory/5152-25-0x0000000000400000-0x0000000000843000-memory.dmp	upx
behavioral1/files/0x000700000002459d-29.dat	upx
behavioral1/memory/5104-32-0x0000000000400000-0x0000000000843000-memory.dmp	upx
behavioral1/files/0x000700000002459e-35.dat	upx
behavioral1/memory/5104-39-0x0000000000400000-0x0000000000843000-memory.dmp	upx
behavioral1/memory/2236-37-0x0000000000400000-0x0000000000843000-memory.dmp	upx
behavioral1/files/0x000700000002459f-42.dat	upx
behavioral1/memory/3628-44-0x0000000000400000-0x0000000000843000-memory.dmp	upx
behavioral1/memory/2236-46-0x0000000000400000-0x0000000000843000-memory.dmp	upx
behavioral1/files/0x00070000000245a0-50.dat	upx
behavioral1/memory/5736-51-0x0000000000400000-0x0000000000843000-memory.dmp	upx
behavioral1/files/0x00070000000245a1-55.dat	upx
behavioral1/memory/4736-58-0x0000000000400000-0x0000000000843000-memory.dmp	upx
behavioral1/files/0x00070000000245a2-61.dat	upx
behavioral1/memory/1808-64-0x0000000000400000-0x0000000000843000-memory.dmp	upx
behavioral1/files/0x00070000000245a3-69.dat	upx
behavioral1/memory/944-70-0x0000000000400000-0x0000000000843000-memory.dmp	upx
behavioral1/files/0x00070000000245a4-73.dat	upx
behavioral1/memory/2464-76-0x0000000000400000-0x0000000000843000-memory.dmp	upx
behavioral1/files/0x00070000000245a5-79.dat	upx
behavioral1/files/0x00070000000245a6-86.dat	upx
behavioral1/memory/3044-87-0x0000000000400000-0x0000000000843000-memory.dmp	upx
behavioral1/memory/4440-88-0x0000000000400000-0x0000000000843000-memory.dmp	upx
behavioral1/files/0x00070000000245a7-92.dat	upx
behavioral1/memory/2164-94-0x0000000000400000-0x0000000000843000-memory.dmp	upx
behavioral1/files/0x00070000000245a8-97.dat	upx
behavioral1/memory/2000-100-0x0000000000400000-0x0000000000843000-memory.dmp	upx
behavioral1/files/0x00070000000245a9-103.dat	upx
behavioral1/files/0x00070000000245aa-108.dat	upx
behavioral1/memory/4688-111-0x0000000000400000-0x0000000000843000-memory.dmp	upx
behavioral1/files/0x00070000000245ab-114.dat	upx
behavioral1/memory/4688-117-0x0000000000400000-0x0000000000843000-memory.dmp	upx
behavioral1/memory/2364-118-0x0000000000400000-0x0000000000843000-memory.dmp	upx
behavioral1/files/0x00070000000245ac-121.dat	upx
behavioral1/memory/3620-123-0x0000000000400000-0x0000000000843000-memory.dmp	upx
behavioral1/files/0x00070000000245ad-127.dat	upx
behavioral1/memory/5100-131-0x0000000000400000-0x0000000000843000-memory.dmp	upx
behavioral1/memory/3620-130-0x0000000000400000-0x0000000000843000-memory.dmp	upx
behavioral1/files/0x00070000000245ae-134.dat	upx
behavioral1/files/0x00070000000245af-139.dat	upx
behavioral1/files/0x00070000000245b0-144.dat	upx
behavioral1/memory/6008-145-0x0000000000400000-0x0000000000843000-memory.dmp	upx
behavioral1/files/0x00070000000245b1-150.dat	upx
behavioral1/files/0x00070000000245b2-154.dat	upx
behavioral1/memory/5124-156-0x0000000000400000-0x0000000000843000-memory.dmp	upx
behavioral1/files/0x00070000000245b3-159.dat	upx
behavioral1/memory/4792-160-0x0000000000400000-0x0000000000843000-memory.dmp	upx
behavioral1/files/0x00070000000245b4-166.dat	upx
behavioral1/memory/3052-165-0x0000000000400000-0x0000000000843000-memory.dmp	upx
behavioral1/files/0x00070000000245b5-169.dat	upx
behavioral1/memory/5812-170-0x0000000000400000-0x0000000000843000-memory.dmp	upx
behavioral1/memory/1244-175-0x0000000000400000-0x0000000000843000-memory.dmp	upx
behavioral1/files/0x00070000000245b6-176.dat	upx
behavioral1/files/0x00070000000245b7-179.dat	upx
behavioral1/memory/4468-180-0x0000000000400000-0x0000000000843000-memory.dmp	upx

System Location Discovery: System Language Discovery 1 TTPs 64 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	tnnnnt.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	pppjv.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rxrlflf.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	lffrrlr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	ddjdv.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	9tnnnt.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	5hnnhh.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rxfxrrr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	btbtbb.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	thhtht.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	dvdvj.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	1bbthh.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	jpjdp.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	1xxxrxl.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	bhbhhh.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	hbttnb.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	nhhbbt.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	jvjpp.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xflffxr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	9lffxxr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rrxxfxr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	llrrllf.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	hthhnn.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	hntbtt.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	9vvvv.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	vdjjj.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	flfxrlf.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	bthnhn.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	lfrxllr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xlrxfrr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	vvppj.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	dvppp.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	jvppj.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	nhntbb.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	vjvpp.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	bhnhbb.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	bntbbh.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	tbbnhb.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	pvjdp.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	nnhhbb.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	vdjjv.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	bnttnt.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	jdjjj.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rlrrfrx.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	dvjjd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	flxlrrl.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	ddddv.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	jpjjj.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	7tttnb.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	bhtbnt.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	bthbhh.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	vppjj.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	5nnhbb.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	fxfxrlx.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	pvdvv.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	jjvvv.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xfllrff.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	vjjdv.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xlxffff.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xllrxrr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	frfxfxx.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xlfrlxr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	ntthtn.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	ffrrlfr.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4888 wrote to memory of 4808	4888	6fd0fc4152e2812a6bd2c9d2ee791d8894695d5a0323a6624907ae61d3bad722.exe	83
PID 4808 wrote to memory of 4904	4808	nhbtbn.exe	84
PID 4904 wrote to memory of 5152	4904	vdjjj.exe	85
PID 5152 wrote to memory of 1452	5152	htbbhn.exe	86
PID 1452 wrote to memory of 5104	1452	pvjpv.exe	87
PID 5104 wrote to memory of 2236	5104	5xxxrlf.exe	88
PID 2236 wrote to memory of 3628	2236	1llllrr.exe	89
PID 3628 wrote to memory of 5736	3628	flfxrlf.exe	90
PID 5736 wrote to memory of 4736	5736	jdpjj.exe	91
PID 4736 wrote to memory of 1808	4736	tbhhtt.exe	92
PID 1808 wrote to memory of 944	1808	ffrrlrr.exe	93
PID 944 wrote to memory of 2464	944	hbntbb.exe	94
PID 2464 wrote to memory of 3044	2464	hbntnn.exe	95
PID 3044 wrote to memory of 4440	3044	vjpvp.exe	96
PID 4440 wrote to memory of 2164	4440	bthbtb.exe	97
PID 2164 wrote to memory of 2000	2164	lrfxxff.exe	98
PID 2000 wrote to memory of 5804	2000	jdvpd.exe	99
PID 5804 wrote to memory of 4688	5804	ntbbth.exe	100
PID 4688 wrote to memory of 2364	4688	hhhtnb.exe	101
PID 2364 wrote to memory of 3620	2364	ffrfrxx.exe	102
PID 3620 wrote to memory of 5100	3620	rxfxrfl.exe	103
PID 5100 wrote to memory of 4308	5100	rxlllfl.exe	104
PID 4308 wrote to memory of 6008	4308	jpjpv.exe	105
PID 6008 wrote to memory of 1848	6008	dpddv.exe	106
PID 1848 wrote to memory of 5124	1848	thnntb.exe	107
PID 5124 wrote to memory of 4792	5124	thnnbb.exe	108
PID 4792 wrote to memory of 3052	4792	tntttn.exe	109
PID 3052 wrote to memory of 5812	3052	djvvv.exe	110
PID 5812 wrote to memory of 1244	5812	bbbtnh.exe	111
PID 1244 wrote to memory of 4468	1244	5ttnnt.exe	112
PID 4468 wrote to memory of 2356	4468	5nhnhn.exe	113
PID 2356 wrote to memory of 2180	2356	frfflrr.exe	114
PID 2180 wrote to memory of 1072	2180	frxxxrl.exe	115
PID 1072 wrote to memory of 824	1072	tnnntb.exe	116
PID 824 wrote to memory of 4364	824	5hbbhn.exe	117
PID 4364 wrote to memory of 3716	4364	pppjv.exe	118
PID 3716 wrote to memory of 3008	3716	vddjp.exe	119
PID 3008 wrote to memory of 2508	3008	5jvpv.exe	120
PID 2508 wrote to memory of 4380	2508	pdjjp.exe	121
PID 4380 wrote to memory of 1564	4380	tnnhbb.exe	122
PID 1564 wrote to memory of 3708	1564	fflflll.exe	123
PID 3708 wrote to memory of 2572	3708	9xrxrfx.exe	124
PID 2572 wrote to memory of 5484	2572	pjjjj.exe	125
PID 5484 wrote to memory of 5756	5484	llfrxxx.exe	126
PID 5756 wrote to memory of 6016	5756	nhtntt.exe	127
PID 6016 wrote to memory of 5792	6016	rxrlflf.exe	128
PID 5792 wrote to memory of 4180	5792	lfffxfr.exe	129
PID 4180 wrote to memory of 216	4180	ddvdd.exe	130
PID 216 wrote to memory of 224	216	ppvdj.exe	131
PID 224 wrote to memory of 3300	224	djpjd.exe	132
PID 3300 wrote to memory of 928	3300	dpppp.exe	133
PID 928 wrote to memory of 1080	928	tnbtnh.exe	134
PID 1080 wrote to memory of 3800	1080	jjjvd.exe	135
PID 3800 wrote to memory of 5412	3800	1nttbb.exe	136
PID 5412 wrote to memory of 2816	5412	thbthh.exe	137
PID 2816 wrote to memory of 1012	2816	nhtnth.exe	138
PID 1012 wrote to memory of 628	1012	bhtbnt.exe	139
PID 628 wrote to memory of 5436	628	9ffxxxx.exe	140
PID 5436 wrote to memory of 3336	5436	bnhhbt.exe	141
PID 3336 wrote to memory of 5224	3336	vpppp.exe	142
PID 5224 wrote to memory of 5108	5224	djvdd.exe	143
PID 5108 wrote to memory of 464	5108	tthbhh.exe	144
PID 464 wrote to memory of 5032	464	djjvd.exe	145
PID 5032 wrote to memory of 3296	5032	xffrxxr.exe	146

C:\Users\Admin\AppData\Local\Temp\6fd0fc4152e2812a6bd2c9d2ee791d8894695d5a0323a6624907ae61d3bad722.exe
"C:\Users\Admin\AppData\Local\Temp\6fd0fc4152e2812a6bd2c9d2ee791d8894695d5a0323a6624907ae61d3bad722.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4888
- \??\c:\nhbtbn.exe
  c:\nhbtbn.exe
  2⤵
  - Executes dropped EXE
  - Suspicious use of WriteProcessMemory
  PID:4808
- - \??\c:\vdjjj.exe
    c:\vdjjj.exe
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    - Suspicious use of WriteProcessMemory
    PID:4904
  - - \??\c:\htbbhn.exe
      c:\htbbhn.exe
      4⤵
      Executes dropped EXE
      Suspicious use of WriteProcessMemory
      PID:5152
    - - \??\c:\pvjpv.exe
        
        c:\pvjpv.exe
        5⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:1452
      - \??\c:\5xxxrlf.exe
        
        c:\5xxxrlf.exe
        6⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:5104
        
        \??\c:\1llllrr.exe
        
        c:\1llllrr.exe
        7⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:2236
        
        \??\c:\flfxrlf.exe
        
        c:\flfxrlf.exe
        8⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:3628
        
        \??\c:\jdpjj.exe
        
        c:\jdpjj.exe
        9⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:5736
        
        \??\c:\tbhhtt.exe
        
        c:\tbhhtt.exe
        10⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4736
        
        \??\c:\ffrrlrr.exe
        
        c:\ffrrlrr.exe
        11⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:1808
        
        \??\c:\hbntbb.exe
        
        c:\hbntbb.exe
        12⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:944
        
        \??\c:\hbntnn.exe
        
        c:\hbntnn.exe
        13⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:2464
        
        \??\c:\vjpvp.exe
        
        c:\vjpvp.exe
        14⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:3044
        
        \??\c:\bthbtb.exe
        
        c:\bthbtb.exe
        15⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4440
        
        \??\c:\lrfxxff.exe
        
        c:\lrfxxff.exe
        16⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:2164
        
        \??\c:\jdvpd.exe
        
        c:\jdvpd.exe
        17⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:2000
        
        \??\c:\ntbbth.exe
        
        c:\ntbbth.exe
        18⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:5804
        
        \??\c:\hhhtnb.exe
        
        c:\hhhtnb.exe
        19⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4688
        
        \??\c:\ffrfrxx.exe
        
        c:\ffrfrxx.exe
        20⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:2364
        
        \??\c:\rxfxrfl.exe
        
        c:\rxfxrfl.exe
        21⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:3620
        
        \??\c:\rxlllfl.exe
        
        c:\rxlllfl.exe
        22⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:5100
        
        \??\c:\jpjpv.exe
        
        c:\jpjpv.exe
        23⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4308
        
        \??\c:\dpddv.exe
        
        c:\dpddv.exe
        24⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:6008
        
        \??\c:\thnntb.exe
        
        c:\thnntb.exe
        25⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:1848
        
        \??\c:\thnnbb.exe
        
        c:\thnnbb.exe
        26⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:5124
        
        \??\c:\tntttn.exe
        
        c:\tntttn.exe
        27⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4792
        
        \??\c:\djvvv.exe
        
        c:\djvvv.exe
        28⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:3052
        
        \??\c:\bbbtnh.exe
        
        c:\bbbtnh.exe
        29⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:5812
        
        \??\c:\5ttnnt.exe
        
        c:\5ttnnt.exe
        30⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:1244
        
        \??\c:\5nhnhn.exe
        
        c:\5nhnhn.exe
        31⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4468
        
        \??\c:\frfflrr.exe
        
        c:\frfflrr.exe
        32⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:2356
        
        \??\c:\frxxxrl.exe
        
        c:\frxxxrl.exe
        33⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:2180
        
        \??\c:\tnnntb.exe
        
        c:\tnnntb.exe
        34⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:1072
        
        \??\c:\5hbbhn.exe
        
        c:\5hbbhn.exe
        35⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:824
        
        \??\c:\pppjv.exe
        
        c:\pppjv.exe
        36⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:4364
        
        \??\c:\vddjp.exe
        
        c:\vddjp.exe
        37⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:3716
        
        \??\c:\5jvpv.exe
        
        c:\5jvpv.exe
        38⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:3008
        
        \??\c:\pdjjp.exe
        
        c:\pdjjp.exe
        39⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:2508
        
        \??\c:\tnnhbb.exe
        
        c:\tnnhbb.exe
        40⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4380
        
        \??\c:\fflflll.exe
        
        c:\fflflll.exe
        41⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:1564
        
        \??\c:\9xrxrfx.exe
        
        c:\9xrxrfx.exe
        42⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:3708
        
        \??\c:\pjjjj.exe
        
        c:\pjjjj.exe
        43⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:2572
        
        \??\c:\llfrxxx.exe
        
        c:\llfrxxx.exe
        44⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:5484
        
        \??\c:\nhtntt.exe
        
        c:\nhtntt.exe
        45⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:5756
        
        \??\c:\rxrlflf.exe
        
        c:\rxrlflf.exe
        46⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:6016
        
        \??\c:\lfffxfr.exe
        
        c:\lfffxfr.exe
        47⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:5792
        
        \??\c:\ddvdd.exe
        
        c:\ddvdd.exe
        48⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4180
        
        \??\c:\ppvdj.exe
        
        c:\ppvdj.exe
        49⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:216
        
        \??\c:\djpjd.exe
        
        c:\djpjd.exe
        50⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:224
        
        \??\c:\dpppp.exe
        
        c:\dpppp.exe
        51⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:3300
        
        \??\c:\tnbtnh.exe
        
        c:\tnbtnh.exe
        52⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:928
        
        \??\c:\jjjvd.exe
        
        c:\jjjvd.exe
        53⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:1080
        
        \??\c:\1nttbb.exe
        
        c:\1nttbb.exe
        54⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:3800
        
        \??\c:\thbthh.exe
        
        c:\thbthh.exe
        55⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:5412
        
        \??\c:\nhtnth.exe
        
        c:\nhtnth.exe
        56⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:2816
        
        \??\c:\bhtbnt.exe
        
        c:\bhtbnt.exe
        57⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:1012
        
        \??\c:\9ffxxxx.exe
        
        c:\9ffxxxx.exe
        58⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:628
        
        \??\c:\bnhhbt.exe
        
        c:\bnhhbt.exe
        59⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:5436
        
        \??\c:\vpppp.exe
        
        c:\vpppp.exe
        60⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:3336
        
        \??\c:\djvdd.exe
        
        c:\djvdd.exe
        61⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:5224
        
        \??\c:\tthbhh.exe
        
        c:\tthbhh.exe
        62⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:5108
        
        \??\c:\djjvd.exe
        
        c:\djjvd.exe
        63⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:464
        
        \??\c:\xffrxxr.exe
        
        c:\xffrxxr.exe
        64⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:5032
        
        \??\c:\jdjjj.exe
        
        c:\jdjjj.exe
        65⤵
        Executes dropped EXE
        
        PID:3296
        
        \??\c:\fxxlffl.exe
        
        c:\fxxlffl.exe
        66⤵
        
        PID:3784
        
        \??\c:\rxlrrrx.exe
        
        c:\rxlrrrx.exe
        67⤵
        
        PID:5912
        
        \??\c:\7nhhbt.exe
        
        c:\7nhhbt.exe
        68⤵
        
        PID:2200
        
        \??\c:\bbhhht.exe
        
        c:\bbhhht.exe
        69⤵
        
        PID:2944
        
        \??\c:\3djjd.exe
        
        c:\3djjd.exe
        70⤵
        
        PID:3432
        
        \??\c:\vpdjj.exe
        
        c:\vpdjj.exe
        71⤵
        
        PID:5640
        
        \??\c:\ttnbtn.exe
        
        c:\ttnbtn.exe
        72⤵
        
        PID:3940
        
        \??\c:\pddpd.exe
        
        c:\pddpd.exe
        73⤵
        
        PID:4612
        
        \??\c:\jpdvp.exe
        
        c:\jpdvp.exe
        74⤵
        
        PID:4160
        
        \??\c:\pjvdd.exe
        
        c:\pjvdd.exe
        75⤵
        
        PID:4236
        
        \??\c:\rflrlrx.exe
        
        c:\rflrlrx.exe
        76⤵
        
        PID:4816
        
        \??\c:\fffflll.exe
        
        c:\fffflll.exe
        77⤵
        
        PID:3160
        
        \??\c:\hbtnhh.exe
        
        c:\hbtnhh.exe
        78⤵
        
        PID:3416
        
        \??\c:\hbhbtb.exe
        
        c:\hbhbtb.exe
        79⤵
        
        PID:716
        
        \??\c:\tnhnnb.exe
        
        c:\tnhnnb.exe
        80⤵
        
        PID:5960
        
        \??\c:\bhbbnt.exe
        
        c:\bhbbnt.exe
        81⤵
        
        PID:5944
        
        \??\c:\ffllffl.exe
        
        c:\ffllffl.exe
        82⤵
        
        PID:4392
        
        \??\c:\lrxffll.exe
        
        c:\lrxffll.exe
        83⤵
        
        PID:4724
        
        \??\c:\xxrrflx.exe
        
        c:\xxrrflx.exe
        84⤵
        
        PID:4700
        
        \??\c:\pjvdd.exe
        
        c:\pjvdd.exe
        85⤵
        
        PID:4424
        
        \??\c:\djddv.exe
        
        c:\djddv.exe
        86⤵
        
        PID:4484
        
        \??\c:\hhhhth.exe
        
        c:\hhhhth.exe
        87⤵
        
        PID:3076
        
        \??\c:\hhttnb.exe
        
        c:\hhttnb.exe
        88⤵
        
        PID:5260
        
        \??\c:\hntttn.exe
        
        c:\hntttn.exe
        89⤵
        
        PID:4224
        
        \??\c:\hntthh.exe
        
        c:\hntthh.exe
        90⤵
        
        PID:8
        
        \??\c:\bhbhht.exe
        
        c:\bhbhht.exe
        91⤵
        
        PID:6068
        
        \??\c:\nbbhhn.exe
        
        c:\nbbhhn.exe
        92⤵
        
        PID:4916
        
        \??\c:\bhttnn.exe
        
        c:\bhttnn.exe
        93⤵
        
        PID:5564
        
        \??\c:\hhtthn.exe
        
        c:\hhtthn.exe
        94⤵
        
        PID:5916
        
        \??\c:\nhntbb.exe
        
        c:\nhntbb.exe
        95⤵
        System Location Discovery: System Language Discovery
        
        PID:5240
        
        \??\c:\nbnhtn.exe
        
        c:\nbnhtn.exe
        96⤵
        
        PID:5796
        
        \??\c:\nhbbbn.exe
        
        c:\nhbbbn.exe
        97⤵
        
        PID:1644
        
        \??\c:\lfrlffl.exe
        
        c:\lfrlffl.exe
        98⤵
        
        PID:6024
        
        \??\c:\lfxxrxf.exe
        
        c:\lfxxrxf.exe
        99⤵
        
        PID:4396
        
        \??\c:\lxxllll.exe
        
        c:\lxxllll.exe
        100⤵
        
        PID:4744
        
        \??\c:\bbbttt.exe
        
        c:\bbbttt.exe
        101⤵
        
        PID:2396
        
        \??\c:\ntbbtn.exe
        
        c:\ntbbtn.exe
        102⤵
        
        PID:4868
        
        \??\c:\hthhnb.exe
        
        c:\hthhnb.exe
        103⤵
        
        PID:5364
        
        \??\c:\vdddj.exe
        
        c:\vdddj.exe
        104⤵
        
        PID:5860
        
        \??\c:\vjjdv.exe
        
        c:\vjjdv.exe
        105⤵
        System Location Discovery: System Language Discovery
        
        PID:5456
        
        \??\c:\djvvp.exe
        
        c:\djvvp.exe
        106⤵
        
        PID:1196
        
        \??\c:\rxlllll.exe
        
        c:\rxlllll.exe
        107⤵
        
        PID:5432
        
        \??\c:\lxlffrl.exe
        
        c:\lxlffrl.exe
        108⤵
        
        PID:2100
        
        \??\c:\llxrfxl.exe
        
        c:\llxrfxl.exe
        109⤵
        
        PID:1152
        
        \??\c:\bnttnt.exe
        
        c:\bnttnt.exe
        110⤵
        System Location Discovery: System Language Discovery
        
        PID:1108
        
        \??\c:\9bbtnn.exe
        
        c:\9bbtnn.exe
        111⤵
        
        PID:1256
        
        \??\c:\ddjdd.exe
        
        c:\ddjdd.exe
        112⤵
        
        PID:2704
        
        \??\c:\dddvv.exe
        
        c:\dddvv.exe
        113⤵
        
        PID:2844
        
        \??\c:\vpddv.exe
        
        c:\vpddv.exe
        114⤵
        
        PID:4788
        
        \??\c:\xlxffff.exe
        
        c:\xlxffff.exe
        115⤵
        System Location Discovery: System Language Discovery
        
        PID:2432
        
        \??\c:\1vdvp.exe
        
        c:\1vdvp.exe
        116⤵
        
        PID:4928
        
        \??\c:\vjppp.exe
        
        c:\vjppp.exe
        117⤵
        
        PID:772
        
        \??\c:\jvddv.exe
        
        c:\jvddv.exe
        118⤵
        
        PID:732
        
        \??\c:\pjdvp.exe
        
        c:\pjdvp.exe
        119⤵
        
        PID:3972
        
        \??\c:\ppjdj.exe
        
        c:\ppjdj.exe
        120⤵
        
        PID:4256
        
        \??\c:\jpddj.exe
        
        c:\jpddj.exe
        121⤵
        
        PID:744
        
        \??\c:\vppjd.exe
        
        c:\vppjd.exe
        122⤵
        
        PID:2512
        
        \??\c:\jpppj.exe
        
        c:\jpppj.exe
        123⤵
        
        PID:5584
        
        \??\c:\1dvdd.exe
        
        c:\1dvdd.exe
        124⤵
        
        PID:1268
        
        \??\c:\bthntn.exe
        
        c:\bthntn.exe
        125⤵
        
        PID:5376
        
        \??\c:\bbhtht.exe
        
        c:\bbhtht.exe
        126⤵
        
        PID:3040
        
        \??\c:\jvjdd.exe
        
        c:\jvjdd.exe
        127⤵
        
        PID:5936
        
        \??\c:\flrxxll.exe
        
        c:\flrxxll.exe
        128⤵
        
        PID:5880
        
        \??\c:\fllfxxf.exe
        
        c:\fllfxxf.exe
        129⤵
        
        PID:2372
        
        \??\c:\rlfxrfx.exe
        
        c:\rlfxrfx.exe
        130⤵
        
        PID:4676
        
        \??\c:\ffffxrx.exe
        
        c:\ffffxrx.exe
        131⤵
        
        PID:5420
        
        \??\c:\lxfxrrr.exe
        
        c:\lxfxrrr.exe
        132⤵
        
        PID:4172
        
        \??\c:\flrffrr.exe
        
        c:\flrffrr.exe
        133⤵
        
        PID:3260
        
        \??\c:\dvddd.exe
        
        c:\dvddd.exe
        134⤵
        
        PID:2620
        
        \??\c:\vdjjv.exe
        
        c:\vdjjv.exe
        135⤵
        
        PID:1316
        
        \??\c:\7jddv.exe
        
        c:\7jddv.exe
        136⤵
        
        PID:1128
        
        \??\c:\dpjdj.exe
        
        c:\dpjdj.exe
        137⤵
        
        PID:2976
        
        \??\c:\jdjjj.exe
        
        c:\jdjjj.exe
        138⤵
        System Location Discovery: System Language Discovery
        
        PID:2036
        
        \??\c:\jvjpp.exe
        
        c:\jvjpp.exe
        139⤵
        System Location Discovery: System Language Discovery
        
        PID:3816
        
        \??\c:\ddppd.exe
        
        c:\ddppd.exe
        140⤵
        
        PID:4428
        
        \??\c:\dvdjd.exe
        
        c:\dvdjd.exe
        141⤵
        
        PID:3748
        
        \??\c:\jvvvj.exe
        
        c:\jvvvj.exe
        142⤵
        
        PID:1416
        
        \??\c:\vjvpp.exe
        
        c:\vjvpp.exe
        143⤵
        System Location Discovery: System Language Discovery
        
        PID:3332
        
        \??\c:\lxlrxfl.exe
        
        c:\lxlrxfl.exe
        144⤵
        
        PID:3824
        
        \??\c:\vdvvj.exe
        
        c:\vdvvj.exe
        145⤵
        
        PID:3060
        
        \??\c:\djjpp.exe
        
        c:\djjpp.exe
        146⤵
        
        PID:228
        
        \??\c:\jdddv.exe
        
        c:\jdddv.exe
        147⤵
        
        PID:4192
        
        \??\c:\vppjv.exe
        
        c:\vppjv.exe
        148⤵
        
        PID:2304
        
        \??\c:\lrxxffx.exe
        
        c:\lrxxffx.exe
        149⤵
        
        PID:1004
        
        \??\c:\pdppp.exe
        
        c:\pdppp.exe
        150⤵
        
        PID:3172
        
        \??\c:\llllrll.exe
        
        c:\llllrll.exe
        151⤵
        
        PID:1892
        
        \??\c:\rrlflll.exe
        
        c:\rrlflll.exe
        152⤵
        
        PID:440
        
        \??\c:\btttnn.exe
        
        c:\btttnn.exe
        153⤵
        
        PID:4664
        
        \??\c:\hthnnb.exe
        
        c:\hthnnb.exe
        154⤵
        
        PID:4436
        
        \??\c:\7ttbnn.exe
        
        c:\7ttbnn.exe
        155⤵
        
        PID:1520
        
        \??\c:\9jjjj.exe
        
        c:\9jjjj.exe
        156⤵
        
        PID:3996
        
        \??\c:\dpdvv.exe
        
        c:\dpdvv.exe
        157⤵
        
        PID:1048
        
        \??\c:\7jpjj.exe
        
        c:\7jpjj.exe
        158⤵
        
        PID:4544
        
        \??\c:\ddjdv.exe
        
        c:\ddjdv.exe
        159⤵
        
        PID:4496
        
        \??\c:\jpvpv.exe
        
        c:\jpvpv.exe
        160⤵
        
        PID:5000
        
        \??\c:\rlffxxx.exe
        
        c:\rlffxxx.exe
        161⤵
        
        PID:1904
        
        \??\c:\bbnttt.exe
        
        c:\bbnttt.exe
        162⤵
        
        PID:3156
        
        \??\c:\ttnnhh.exe
        
        c:\ttnnhh.exe
        163⤵
        
        PID:1752
        
        \??\c:\xllrxrr.exe
        
        c:\xllrxrr.exe
        164⤵
        System Location Discovery: System Language Discovery
        
        PID:2692
        
        \??\c:\jvddv.exe
        
        c:\jvddv.exe
        165⤵
        
        PID:5692
        
        \??\c:\jjjpj.exe
        
        c:\jjjpj.exe
        166⤵
        
        PID:4672
        
        \??\c:\nbhhhb.exe
        
        c:\nbhhhb.exe
        167⤵
        
        PID:1820
        
        \??\c:\hhnnnh.exe
        
        c:\hhnnnh.exe
        168⤵
        
        PID:1064
        
        \??\c:\bthnhn.exe
        
        c:\bthnhn.exe
        169⤵
        System Location Discovery: System Language Discovery
        
        PID:3788
        
        \??\c:\bbbthh.exe
        
        c:\bbbthh.exe
        170⤵
        
        PID:2320
        
        \??\c:\bthbhh.exe
        
        c:\bthbhh.exe
        171⤵
        System Location Discovery: System Language Discovery
        
        PID:1040
        
        \??\c:\ttbthb.exe
        
        c:\ttbthb.exe
        172⤵
        
        PID:3744
        
        \??\c:\9bnhhb.exe
        
        c:\9bnhhb.exe
        173⤵
        
        PID:2024
        
        \??\c:\hnbbtn.exe
        
        c:\hnbbtn.exe
        174⤵
        
        PID:5112
        
        \??\c:\nnbbbh.exe
        
        c:\nnbbbh.exe
        175⤵
        
        PID:2424
        
        \??\c:\hbthbt.exe
        
        c:\hbthbt.exe
        176⤵
        
        PID:5184
        
        \??\c:\dvpdv.exe
        
        c:\dvpdv.exe
        177⤵
        
        PID:4704
        
        \??\c:\jpppj.exe
        
        c:\jpppj.exe
        178⤵
        
        PID:4644
        
        \??\c:\dppdd.exe
        
        c:\dppdd.exe
        179⤵
        
        PID:4692
        
        \??\c:\tbhnnt.exe
        
        c:\tbhnnt.exe
        180⤵
        
        PID:4908
        
        \??\c:\rlrrfrx.exe
        
        c:\rlrrfrx.exe
        181⤵
        System Location Discovery: System Language Discovery
        
        PID:2796
        
        \??\c:\thhthh.exe
        
        c:\thhthh.exe
        182⤵
        
        PID:4316
        
        \??\c:\bnnnnh.exe
        
        c:\bnnnnh.exe
        183⤵
        
        PID:4276
        
        \??\c:\hhhtnh.exe
        
        c:\hhhtnh.exe
        184⤵
        
        PID:4352
        
        \??\c:\bbnhnn.exe
        
        c:\bbnhnn.exe
        185⤵
        
        PID:5292
        
        \??\c:\bbbtnh.exe
        
        c:\bbbtnh.exe
        186⤵
        
        PID:4900
        
        \??\c:\ttnhbt.exe
        
        c:\ttnhbt.exe
        187⤵
        
        PID:1280
        
        \??\c:\9lxxrrx.exe
        
        c:\9lxxrrx.exe
        188⤵
        
        PID:5700
        
        \??\c:\9rxrrlx.exe
        
        c:\9rxrrlx.exe
        189⤵
        
        PID:796
        
        \??\c:\lllrfxl.exe
        
        c:\lllrfxl.exe
        190⤵
        
        PID:5816
        
        \??\c:\lrlfxxr.exe
        
        c:\lrlfxxr.exe
        191⤵
        
        PID:5788
        
        \??\c:\rfrrfrx.exe
        
        c:\rfrrfrx.exe
        192⤵
        
        PID:5600
        
        \??\c:\frfxfxx.exe
        
        c:\frfxfxx.exe
        193⤵
        System Location Discovery: System Language Discovery
        
        PID:3448
        
        \??\c:\lllflrx.exe
        
        c:\lllflrx.exe
        194⤵
        
        PID:3116
        
        \??\c:\xflffxr.exe
        
        c:\xflffxr.exe
        195⤵
        System Location Discovery: System Language Discovery
        
        PID:5080
        
        \??\c:\xrxxfrl.exe
        
        c:\xrxxfrl.exe
        196⤵
        
        PID:2712
        
        \??\c:\ffllxxr.exe
        
        c:\ffllxxr.exe
        197⤵
        
        PID:1680
        
        \??\c:\xxxrlxr.exe
        
        c:\xxxrlxr.exe
        198⤵
        
        PID:5832
        
        \??\c:\7flfllx.exe
        
        c:\7flfllx.exe
        199⤵
        
        PID:4060
        
        \??\c:\5fffxxr.exe
        
        c:\5fffxxr.exe
        200⤵
        
        PID:2096
        
        \??\c:\lfrllff.exe
        
        c:\lfrllff.exe
        201⤵
        
        PID:2248
        
        \??\c:\5xfxffr.exe
        
        c:\5xfxffr.exe
        202⤵
        
        PID:2352
        
        \??\c:\lfxrlxr.exe
        
        c:\lfxrlxr.exe
        203⤵
        
        PID:2328
        
        \??\c:\fflflxr.exe
        
        c:\fflflxr.exe
        204⤵
        
        PID:2772
        
        \??\c:\lxxrrlx.exe
        
        c:\lxxrrlx.exe
        205⤵
        
        PID:4684
        
        \??\c:\jdpjp.exe
        
        c:\jdpjp.exe
        206⤵
        
        PID:4924
        
        \??\c:\bbtnnh.exe
        
        c:\bbtnnh.exe
        207⤵
        
        PID:2324
        
        \??\c:\5bbthb.exe
        
        c:\5bbthb.exe
        208⤵
        
        PID:5016
        
        \??\c:\bbbbnn.exe
        
        c:\bbbbnn.exe
        209⤵
        
        PID:5356
        
        \??\c:\rlrrlrl.exe
        
        c:\rlrrlrl.exe
        210⤵
        
        PID:5208
        
        \??\c:\fxxrxrx.exe
        
        c:\fxxrxrx.exe
        211⤵
        
        PID:6124
        
        \??\c:\1llfflf.exe
        
        c:\1llfflf.exe
        212⤵
        
        PID:2112
        
        \??\c:\5bbbtb.exe
        
        c:\5bbbtb.exe
        213⤵
        
        PID:2892
        
        \??\c:\nnhbbb.exe
        
        c:\nnhbbb.exe
        214⤵
        
        PID:636
        
        \??\c:\hbthbn.exe
        
        c:\hbthbn.exe
        215⤵
        
        PID:1236
        
        \??\c:\thnhbt.exe
        
        c:\thnhbt.exe
        216⤵
        
        PID:5540
        
        \??\c:\3hhbtt.exe
        
        c:\3hhbtt.exe
        217⤵
        
        PID:3212
        
        \??\c:\xrrfffr.exe
        
        c:\xrrfffr.exe
        218⤵
        
        PID:4304
        
        \??\c:\3lrrlfx.exe
        
        c:\3lrrlfx.exe
        219⤵
        
        PID:404
        
        \??\c:\7rrrrrl.exe
        
        c:\7rrrrrl.exe
        220⤵
        
        PID:6028
        
        \??\c:\vvpjd.exe
        
        c:\vvpjd.exe
        221⤵
        
        PID:1884
        
        \??\c:\9lffxxr.exe
        
        c:\9lffxxr.exe
        222⤵
        System Location Discovery: System Language Discovery
        
        PID:6032
        
        \??\c:\pjdvp.exe
        
        c:\pjdvp.exe
        223⤵
        
        PID:3348
        
        \??\c:\vpvpj.exe
        
        c:\vpvpj.exe
        224⤵
        
        PID:5276
        
        \??\c:\1hhbbb.exe
        
        c:\1hhbbb.exe
        225⤵
        
        PID:1084
        
        \??\c:\rlrrlxx.exe
        
        c:\rlrrlxx.exe
        226⤵
        
        PID:5348
        
        \??\c:\fllffxr.exe
        
        c:\fllffxr.exe
        227⤵
        
        PID:1768
        
        \??\c:\xlllflf.exe
        
        c:\xlllflf.exe
        228⤵
        
        PID:892
        
        \??\c:\flxrrrr.exe
        
        c:\flxrrrr.exe
        229⤵
        
        PID:4416
        
        \??\c:\rfxxlfr.exe
        
        c:\rfxxlfr.exe
        230⤵
        
        PID:5748
        
        \??\c:\djdvj.exe
        
        c:\djdvj.exe
        231⤵
        
        PID:1872
        
        \??\c:\xlxxrlf.exe
        
        c:\xlxxrlf.exe
        232⤵
        
        PID:220
        
        \??\c:\fxrfrlf.exe
        
        c:\fxrfrlf.exe
        233⤵
        
        PID:5976
        
        \??\c:\djpjd.exe
        
        c:\djpjd.exe
        234⤵
        
        PID:2956
        
        \??\c:\jjdpj.exe
        
        c:\jjdpj.exe
        235⤵
        
        PID:3220
        
        \??\c:\frlxfxl.exe
        
        c:\frlxfxl.exe
        236⤵
        
        PID:2052
        
        \??\c:\lllfxrx.exe
        
        c:\lllfxrx.exe
        237⤵
        
        PID:3928
        
        \??\c:\jdpjd.exe
        
        c:\jdpjd.exe
        238⤵
        
        PID:4152
        
        \??\c:\jdvdp.exe
        
        c:\jdvdp.exe
        239⤵
        
        PID:5556
        
        \??\c:\vdjjj.exe
        
        c:\vdjjj.exe
        240⤵
        
        PID:1032
        
        \??\c:\nnnnhb.exe
        
        c:\nnnnhb.exe
        241⤵
        
        PID:2032
        
        \??\c:\vjdvj.exe
        
        c:\vjdvj.exe
        242⤵
        
        PID:4448
        
        \??\c:\jvvvp.exe
        
        c:\jvvvp.exe
        243⤵
        
        PID:5852
        
        \??\c:\thhtht.exe
        
        c:\thhtht.exe
        244⤵
        System Location Discovery: System Language Discovery
        
        PID:4740
        
        \??\c:\7hbthh.exe
        
        c:\7hbthh.exe
        245⤵
        
        PID:3312
        
        \??\c:\3ttnhh.exe
        
        c:\3ttnhh.exe
        246⤵
        
        PID:848
        
        \??\c:\fflfxrx.exe
        
        c:\fflfxrx.exe
        247⤵
        
        PID:5620
        
        \??\c:\xlfrlxr.exe
        
        c:\xlfrlxr.exe
        248⤵
        System Location Discovery: System Language Discovery
        
        PID:5888
        
        \??\c:\jjjdd.exe
        
        c:\jjjdd.exe
        249⤵
        
        PID:3556
        
        \??\c:\dpjjj.exe
        
        c:\dpjjj.exe
        250⤵
        
        PID:1092
        
        \??\c:\pvjjd.exe
        
        c:\pvjjd.exe
        251⤵
        
        PID:6052
        
        \??\c:\vvjvj.exe
        
        c:\vvjvj.exe
        252⤵
        
        PID:4212
        
        \??\c:\hbhhnb.exe
        
        c:\hbhhnb.exe
        253⤵
        
        PID:5052
        
        \??\c:\rlfxlfx.exe
        
        c:\rlfxlfx.exe
        254⤵
        
        PID:3548
        
        \??\c:\xlrllff.exe
        
        c:\xlrllff.exe
        255⤵
        
        PID:1760
        
        \??\c:\lffrllf.exe
        
        c:\lffrllf.exe
        256⤵
        
        PID:5008
        
        \??\c:\xlrlllf.exe
        
        c:\xlrlllf.exe
        257⤵
        
        PID:4764
        
        \??\c:\xllfxrl.exe
        
        c:\xllfxrl.exe
        258⤵
        
        PID:4832
        
        \??\c:\xlrrrll.exe
        
        c:\xlrrrll.exe
        259⤵
        
        PID:4592
        
        \??\c:\jpvpp.exe
        
        c:\jpvpp.exe
        260⤵
        
        PID:4852
        
        \??\c:\5ddvv.exe
        
        c:\5ddvv.exe
        261⤵
        
        PID:4596
        
        \??\c:\jjddv.exe
        
        c:\jjddv.exe
        262⤵
        
        PID:4220
        
        \??\c:\htnbth.exe
        
        c:\htnbth.exe
        263⤵
        
        PID:4188
        
        \??\c:\hbhbbt.exe
        
        c:\hbhbbt.exe
        264⤵
        
        PID:1944
        
        \??\c:\fxrlffr.exe
        
        c:\fxrlffr.exe
        265⤵
        
        PID:3924
        
        \??\c:\fxlxlfl.exe
        
        c:\fxlxlfl.exe
        266⤵
        
        PID:5980
        
        \??\c:\9xxrxrl.exe
        
        c:\9xxrxrl.exe
        267⤵
        
        PID:3672
        
        \??\c:\xxfrlxr.exe
        
        c:\xxfrlxr.exe
        268⤵
        
        PID:1936
        
        \??\c:\xlllfxl.exe
        
        c:\xlllfxl.exe
        269⤵
        
        PID:4556
        
        \??\c:\dvdvj.exe
        
        c:\dvdvj.exe
        270⤵
        System Location Discovery: System Language Discovery
        
        PID:5672
        
        \??\c:\pddvv.exe
        
        c:\pddvv.exe
        271⤵
        
        PID:1132
        
        \??\c:\bbhtht.exe
        
        c:\bbhtht.exe
        272⤵
        
        PID:1312
        
        \??\c:\5rxflff.exe
        
        c:\5rxflff.exe
        273⤵
        
        PID:4504
        
        \??\c:\xlxxllf.exe
        
        c:\xlxxllf.exe
        274⤵
        
        PID:2268
        
        \??\c:\ffrlxxl.exe
        
        c:\ffrlxxl.exe
        275⤵
        
        PID:4324
        
        \??\c:\3ffxrlf.exe
        
        c:\3ffxrlf.exe
        276⤵
        
        PID:2764
        
        \??\c:\3vjjd.exe
        
        c:\3vjjd.exe
        277⤵
        
        PID:2500
        
        \??\c:\7jjdd.exe
        
        c:\7jjdd.exe
        278⤵
        
        PID:2108
        
        \??\c:\tnnbtt.exe
        
        c:\tnnbtt.exe
        279⤵
        
        PID:432
        
        \??\c:\bnhbnh.exe
        
        c:\bnhbnh.exe
        280⤵
        
        PID:6012
        
        \??\c:\lrfxlxr.exe
        
        c:\lrfxlxr.exe
        281⤵
        
        PID:3520
        
        \??\c:\xrlfrrl.exe
        
        c:\xrlfrrl.exe
        282⤵
        
        PID:3760
        
        \??\c:\3rxxxxr.exe
        
        c:\3rxxxxr.exe
        283⤵
        
        PID:2884
        
        \??\c:\rrfxrxx.exe
        
        c:\rrfxrxx.exe
        284⤵
        
        PID:6056
        
        \??\c:\1xxxrrl.exe
        
        c:\1xxxrrl.exe
        285⤵
        
        PID:3576
        
        \??\c:\ppvpj.exe
        
        c:\ppvpj.exe
        286⤵
        
        PID:5040
        
        \??\c:\pjvpj.exe
        
        c:\pjvpj.exe
        287⤵
        
        PID:4492
        
        \??\c:\9ttnhh.exe
        
        c:\9ttnhh.exe
        288⤵
        
        PID:1764
        
        \??\c:\xxxxrrf.exe
        
        c:\xxxxrrf.exe
        289⤵
        
        PID:5552
        
        \??\c:\9xxrrlf.exe
        
        c:\9xxrrlf.exe
        290⤵
        
        PID:4144
        
        \??\c:\lffrrlr.exe
        
        c:\lffrrlr.exe
        291⤵
        System Location Discovery: System Language Discovery
        
        PID:5156
        
        \??\c:\7ppjj.exe
        
        c:\7ppjj.exe
        292⤵
        
        PID:5592
        
        \??\c:\jddvp.exe
        
        c:\jddvp.exe
        293⤵
        
        PID:5344
        
        \??\c:\7ddvj.exe
        
        c:\7ddvj.exe
        294⤵
        
        PID:1572
        
        \??\c:\jjpjv.exe
        
        c:\jjpjv.exe
        295⤵
        
        PID:1384
        
        \??\c:\rrxxfxr.exe
        
        c:\rrxxfxr.exe
        296⤵
        System Location Discovery: System Language Discovery
        
        PID:6040
        
        \??\c:\9htnhb.exe
        
        c:\9htnhb.exe
        297⤵
        
        PID:5680
        
        \??\c:\nbttnn.exe
        
        c:\nbttnn.exe
        298⤵
        
        PID:5204
        
        \??\c:\lfrxllr.exe
        
        c:\lfrxllr.exe
        299⤵
        System Location Discovery: System Language Discovery
        
        PID:2260
        
        \??\c:\rffxrxr.exe
        
        c:\rffxrxr.exe
        300⤵
        
        PID:5036
        
        \??\c:\vddvv.exe
        
        c:\vddvv.exe
        301⤵
        
        PID:3952
        
        \??\c:\dpjvp.exe
        
        c:\dpjvp.exe
        302⤵
        
        PID:5568
        
        \??\c:\vjdvp.exe
        
        c:\vjdvp.exe
        303⤵
        
        PID:3864
        
        \??\c:\vjpjv.exe
        
        c:\vjpjv.exe
        304⤵
        
        PID:4984
        
        \??\c:\vjdvd.exe
        
        c:\vjdvd.exe
        305⤵
        
        PID:4208
        
        \??\c:\bhbtnt.exe
        
        c:\bhbtnt.exe
        306⤵
        
        PID:6004
        
        \??\c:\bnhbbt.exe
        
        c:\bnhbbt.exe
        307⤵
        
        PID:60
        
        \??\c:\hthhbb.exe
        
        c:\hthhbb.exe
        308⤵
        
        PID:4384
        
        \??\c:\xrrlxrf.exe
        
        c:\xrrlxrf.exe
        309⤵
        
        PID:5324
        
        \??\c:\3jjdv.exe
        
        c:\3jjdv.exe
        310⤵
        
        PID:5116
        
        \??\c:\vdjjj.exe
        
        c:\vdjjj.exe
        311⤵
        
        PID:4576
        
        \??\c:\1nntnt.exe
        
        c:\1nntnt.exe
        312⤵
        
        PID:5908
        
        \??\c:\xfxxrxr.exe
        
        c:\xfxxrxr.exe
        313⤵
        
        PID:6044
        
        \??\c:\xflfffx.exe
        
        c:\xflfffx.exe
        314⤵
        
        PID:5308
        
        \??\c:\pjpjd.exe
        
        c:\pjpjd.exe
        315⤵
        
        PID:3460
        
        \??\c:\vpdpp.exe
        
        c:\vpdpp.exe
        316⤵
        
        PID:4148
        
        \??\c:\pvjpj.exe
        
        c:\pvjpj.exe
        317⤵
        
        PID:2312
        
        \??\c:\bbhhhn.exe
        
        c:\bbhhhn.exe
        318⤵
        
        PID:1472
        
        \??\c:\nbbthh.exe
        
        c:\nbbthh.exe
        319⤵
        
        PID:5460
        
        \??\c:\5xxrllx.exe
        
        c:\5xxrllx.exe
        320⤵
        
        PID:2132
        
        \??\c:\1ddvp.exe
        
        c:\1ddvp.exe
        321⤵
        
        PID:5452
        
        \??\c:\pvpjv.exe
        
        c:\pvpjv.exe
        322⤵
        
        PID:3264
        
        \??\c:\dvvpv.exe
        
        c:\dvvpv.exe
        323⤵
        
        PID:1240
        
        \??\c:\jpvpp.exe
        
        c:\jpvpp.exe
        324⤵
        
        PID:2072
        
        \??\c:\bttntt.exe
        
        c:\bttntt.exe
        325⤵
        
        PID:3256
        
        \??\c:\bnnhbb.exe
        
        c:\bnnhbb.exe
        326⤵
        
        PID:976
        
        \??\c:\nthhhh.exe
        
        c:\nthhhh.exe
        327⤵
        
        PID:1116
        
        \??\c:\hhbtnh.exe
        
        c:\hhbtnh.exe
        328⤵
        
        PID:4716
        
        \??\c:\hbbthh.exe
        
        c:\hbbthh.exe
        329⤵
        
        PID:4720
        
        \??\c:\9hbtnb.exe
        
        c:\9hbtnb.exe
        330⤵
        
        PID:4896
        
        \??\c:\nhhbtn.exe
        
        c:\nhhbtn.exe
        331⤵
        
        PID:5656
        
        \??\c:\lxrrlff.exe
        
        c:\lxrrlff.exe
        332⤵
        
        PID:2564
        
        \??\c:\5lflflf.exe
        
        c:\5lflflf.exe
        333⤵
        
        PID:2820
        
        \??\c:\fxlfxrl.exe
        
        c:\fxlfxrl.exe
        334⤵
        
        PID:3720
        
        \??\c:\3vppp.exe
        
        c:\3vppp.exe
        335⤵
        
        PID:880
        
        \??\c:\dvjjd.exe
        
        c:\dvjjd.exe
        336⤵
        
        PID:5232
        
        \??\c:\btbbtt.exe
        
        c:\btbbtt.exe
        337⤵
        
        PID:5712
        
        \??\c:\bbhbtn.exe
        
        c:\bbhbtn.exe
        338⤵
        
        PID:5172
        
        \??\c:\nhhtnn.exe
        
        c:\nhhtnn.exe
        339⤵
        
        PID:5932
        
        \??\c:\nbnhtt.exe
        
        c:\nbnhtt.exe
        340⤵
        
        PID:1972
        
        \??\c:\lflffxr.exe
        
        c:\lflffxr.exe
        341⤵
        
        PID:6036
        
        \??\c:\rrlfxlf.exe
        
        c:\rrlfxlf.exe
        342⤵
        
        PID:2488
        
        \??\c:\lxrxfff.exe
        
        c:\lxrxfff.exe
        343⤵
        
        PID:5180
        
        \??\c:\xrrxrrl.exe
        
        c:\xrrxrrl.exe
        344⤵
        
        PID:1940
        
        \??\c:\vjvjd.exe
        
        c:\vjvjd.exe
        345⤵
        
        PID:3756
        
        \??\c:\5nnnnh.exe
        
        c:\5nnnnh.exe
        346⤵
        
        PID:1088
        
        \??\c:\nbntbt.exe
        
        c:\nbntbt.exe
        347⤵
        
        PID:1604
        
        \??\c:\hhhbhh.exe
        
        c:\hhhbhh.exe
        348⤵
        
        PID:2556
        
        \??\c:\btbnnn.exe
        
        c:\btbnnn.exe
        349⤵
        
        PID:6092
        
        \??\c:\1xxlxxl.exe
        
        c:\1xxlxxl.exe
        350⤵
        
        PID:2028
        
        \??\c:\xxrlllr.exe
        
        c:\xxrlllr.exe
        351⤵
        
        PID:5988
        
        \??\c:\djdvp.exe
        
        c:\djdvp.exe
        352⤵
        
        PID:1360
        
        \??\c:\djpjj.exe
        
        c:\djpjj.exe
        353⤵
        
        PID:2856
        
        \??\c:\vpjdv.exe
        
        c:\vpjdv.exe
        354⤵
        
        PID:640
        
        \??\c:\3hnbnh.exe
        
        c:\3hnbnh.exe
        355⤵
        
        PID:4108
        
        \??\c:\tnhthn.exe
        
        c:\tnhthn.exe
        356⤵
        
        PID:1576
        
        \??\c:\nhnhhb.exe
        
        c:\nhnhhb.exe
        357⤵
        
        PID:5360
        
        \??\c:\ntbbtn.exe
        
        c:\ntbbtn.exe
        358⤵
        
        PID:5384
        
        \??\c:\5ffxllf.exe
        
        c:\5ffxllf.exe
        359⤵
        
        PID:1228
        
        \??\c:\xxfffff.exe
        
        c:\xxfffff.exe
        360⤵
        
        PID:1832
        
        \??\c:\vdpjv.exe
        
        c:\vdpjv.exe
        361⤵
        
        PID:2992
        
        \??\c:\vvdvv.exe
        
        c:\vvdvv.exe
        362⤵
        
        PID:2056
        
        \??\c:\vpjdj.exe
        
        c:\vpjdj.exe
        363⤵
        
        PID:2408
        
        \??\c:\ppppv.exe
        
        c:\ppppv.exe
        364⤵
        
        PID:5216
        
        \??\c:\pvjdv.exe
        
        c:\pvjdv.exe
        365⤵
        
        PID:5252
        
        \??\c:\vppdv.exe
        
        c:\vppdv.exe
        366⤵
        
        PID:3544
        
        \??\c:\dvdvv.exe
        
        c:\dvdvv.exe
        367⤵
        
        PID:2228
        
        \??\c:\dvvdv.exe
        
        c:\dvvdv.exe
        368⤵
        
        PID:3376
        
        \??\c:\nnbbhb.exe
        
        c:\nnbbhb.exe
        369⤵
        
        PID:212
        
        \??\c:\3frrrlf.exe
        
        c:\3frrrlf.exe
        370⤵
        
        PID:3068
        
        \??\c:\9rxrffr.exe
        
        c:\9rxrffr.exe
        371⤵
        
        PID:2824
        
        \??\c:\llrrllf.exe
        
        c:\llrrllf.exe
        372⤵
        System Location Discovery: System Language Discovery
        
        PID:3840
        
        \??\c:\7pdpp.exe
        
        c:\7pdpp.exe
        373⤵
        
        PID:3344
        
        \??\c:\pjdpd.exe
        
        c:\pjdpd.exe
        374⤵
        
        PID:4400
        
        \??\c:\dvpdv.exe
        
        c:\dvpdv.exe
        375⤵
        
        PID:5604
        
        \??\c:\bbbhhh.exe
        
        c:\bbbhhh.exe
        376⤵
        
        PID:4280
        
        \??\c:\ddddd.exe
        
        c:\ddddd.exe
        377⤵
        
        PID:5632
        
        \??\c:\ppjdd.exe
        
        c:\ppjdd.exe
        378⤵
        
        PID:2436
        
        \??\c:\thhhbn.exe
        
        c:\thhhbn.exe
        379⤵
        
        PID:5644
        
        \??\c:\ttbbbb.exe
        
        c:\ttbbbb.exe
        380⤵
        
        PID:624
        
        \??\c:\9xxrlrr.exe
        
        c:\9xxrlrr.exe
        381⤵
        
        PID:1756
        
        \??\c:\rxxxrlr.exe
        
        c:\rxxxrlr.exe
        382⤵
        
        PID:5468
        
        \??\c:\1lllfxr.exe
        
        c:\1lllfxr.exe
        383⤵
        
        PID:3024
        
        \??\c:\dvpvj.exe
        
        c:\dvpvj.exe
        384⤵
        
        PID:2344
        
        \??\c:\1hbtht.exe
        
        c:\1hbtht.exe
        385⤵
        
        PID:3516
        
        \??\c:\9bbtnh.exe
        
        c:\9bbtnh.exe
        386⤵
        
        PID:3948
        
        \??\c:\1bbthh.exe
        
        c:\1bbthh.exe
        387⤵
        System Location Discovery: System Language Discovery
        
        PID:3732
        
        \??\c:\lxxxxrr.exe
        
        c:\lxxxxrr.exe
        388⤵
        
        PID:4848
        
        \??\c:\xxrlfxx.exe
        
        c:\xxrlfxx.exe
        389⤵
        
        PID:4892
        
        \??\c:\3xxrlfl.exe
        
        c:\3xxrlfl.exe
        390⤵
        
        PID:4912
        
        \??\c:\7llrrlx.exe
        
        c:\7llrrlx.exe
        391⤵
        
        PID:4524
        
        \??\c:\vvdvp.exe
        
        c:\vvdvp.exe
        392⤵
        
        PID:4768
        
        \??\c:\7dddv.exe
        
        c:\7dddv.exe
        393⤵
        
        PID:3908
        
        \??\c:\nbnhtn.exe
        
        c:\nbnhtn.exe
        394⤵
        
        PID:5092
        
        \??\c:\7bthbt.exe
        
        c:\7bthbt.exe
        395⤵
        
        PID:5272
        
        \??\c:\xlxxfff.exe
        
        c:\xlxxfff.exe
        396⤵
        
        PID:5704
        
        \??\c:\tbnhhh.exe
        
        c:\tbnhhh.exe
        397⤵
        
        PID:2184
        
        \??\c:\nthbtn.exe
        
        c:\nthbtn.exe
        398⤵
        
        PID:4528
        
        \??\c:\3ffxxxl.exe
        
        c:\3ffxxxl.exe
        399⤵
        
        PID:2448
        
        \??\c:\rlfxlfx.exe
        
        c:\rlfxlfx.exe
        400⤵
        
        PID:2612
        
        \??\c:\vvvpd.exe
        
        c:\vvvpd.exe
        401⤵
        
        PID:2444
        
        \??\c:\vppjj.exe
        
        c:\vppjj.exe
        402⤵
        System Location Discovery: System Language Discovery
        
        PID:5808
        
        \??\c:\rflxrlx.exe
        
        c:\rflxrlx.exe
        403⤵
        
        PID:2476
        
        \??\c:\lflffxr.exe
        
        c:\lflffxr.exe
        404⤵
        
        PID:5472
        
        \??\c:\dpdpv.exe
        
        c:\dpdpv.exe
        405⤵
        
        PID:64
        
        \??\c:\dvvpv.exe
        
        c:\dvvpv.exe
        406⤵
        
        PID:2852
        
        \??\c:\nthnhh.exe
        
        c:\nthnhh.exe
        407⤵
        
        PID:4980
        
        \??\c:\5flxrxl.exe
        
        c:\5flxrxl.exe
        408⤵
        
        PID:2936
        
        \??\c:\vvvpj.exe
        
        c:\vvvpj.exe
        409⤵
        
        PID:4564
        
        \??\c:\jvpvp.exe
        
        c:\jvpvp.exe
        410⤵
        
        PID:1580
        
        \??\c:\1tttnn.exe
        
        c:\1tttnn.exe
        411⤵
        
        PID:896
        
        \??\c:\ntthtn.exe
        
        c:\ntthtn.exe
        412⤵
        System Location Discovery: System Language Discovery
        
        PID:4320
        
        \??\c:\tbbbbn.exe
        
        c:\tbbbbn.exe
        413⤵
        
        PID:5164
        
        \??\c:\bbnnhb.exe
        
        c:\bbnnhb.exe
        414⤵
        
        PID:1232
        
        \??\c:\hhtttt.exe
        
        c:\hhtttt.exe
        415⤵
        
        PID:2276
        
        \??\c:\fxffllr.exe
        
        c:\fxffllr.exe
        416⤵
        
        PID:984
        
        \??\c:\rlrlfff.exe
        
        c:\rlrlfff.exe
        417⤵
        
        PID:2636
        
        \??\c:\xlfxrlf.exe
        
        c:\xlfxrlf.exe
        418⤵
        
        PID:5072
        
        \??\c:\ffrrllr.exe
        
        c:\ffrrllr.exe
        419⤵
        
        PID:2360
        
        \??\c:\xxxrrrx.exe
        
        c:\xxxrrrx.exe
        420⤵
        
        PID:2280
        
        \??\c:\dddvp.exe
        
        c:\dddvp.exe
        421⤵
        
        PID:3472
        
        \??\c:\vvdvp.exe
        
        c:\vvdvp.exe
        422⤵
        
        PID:4284
        
        \??\c:\htnhbb.exe
        
        c:\htnhbb.exe
        423⤵
        
        PID:4040
        
        \??\c:\bbtnbb.exe
        
        c:\bbtnbb.exe
        424⤵
        
        PID:412
        
        \??\c:\xffxrlf.exe
        
        c:\xffxrlf.exe
        425⤵
        
        PID:2960
        
        \??\c:\xrrlllf.exe
        
        c:\xrrlllf.exe
        426⤵
        
        PID:792
        
        \??\c:\3lfrlfx.exe
        
        c:\3lfrlfx.exe
        427⤵
        
        PID:4348
        
        \??\c:\7rrlxxl.exe
        
        c:\7rrlxxl.exe
        428⤵
        
        PID:2792
        
        \??\c:\3jpjp.exe
        
        c:\3jpjp.exe
        429⤵
        
        PID:3988
        
        \??\c:\dvpjv.exe
        
        c:\dvpjv.exe
        430⤵
        
        PID:816
        
        \??\c:\jvvvv.exe
        
        c:\jvvvv.exe
        431⤵
        
        PID:844
        
        \??\c:\ddjdv.exe
        
        c:\ddjdv.exe
        432⤵
        System Location Discovery: System Language Discovery
        
        PID:5268
        
        \??\c:\7tthbt.exe
        
        c:\7tthbt.exe
        433⤵
        
        PID:1676
        
        \??\c:\7xrlfxr.exe
        
        c:\7xrlfxr.exe
        434⤵
        
        PID:1852
        
        \??\c:\jvpjd.exe
        
        c:\jvpjd.exe
        435⤵
        
        PID:3936
        
        \??\c:\vpjdj.exe
        
        c:\vpjdj.exe
        436⤵
        
        PID:916
        
        \??\c:\llfffll.exe
        
        c:\llfffll.exe
        437⤵
        
        PID:2020
        
        \??\c:\lrxxxxx.exe
        
        c:\lrxxxxx.exe
        438⤵
        
        PID:5396
        
        \??\c:\hntttn.exe
        
        c:\hntttn.exe
        439⤵
        
        PID:4388
        
        \??\c:\llxrlll.exe
        
        c:\llxrlll.exe
        440⤵
        
        PID:2288
        
        \??\c:\bnnbnh.exe
        
        c:\bnnbnh.exe
        441⤵
        
        PID:4580
        
        \??\c:\ddvvp.exe
        
        c:\ddvvp.exe
        442⤵
        
        PID:1544
        
        \??\c:\ntbbbh.exe
        
        c:\ntbbbh.exe
        443⤵
        
        PID:5612
        
        \??\c:\3bbtnn.exe
        
        c:\3bbtnn.exe
        444⤵
        
        PID:1880
        
        \??\c:\bhnnhh.exe
        
        c:\bhnnhh.exe
        445⤵
        
        PID:5732
        
        \??\c:\nhnbhh.exe
        
        c:\nhnbhh.exe
        446⤵
        
        PID:5664
        
        \??\c:\3ntntn.exe
        
        c:\3ntntn.exe
        447⤵
        
        PID:4140
        
        \??\c:\7nttnn.exe
        
        c:\7nttnn.exe
        448⤵
        
        PID:5780
        
        \??\c:\hbtnnh.exe
        
        c:\hbtnnh.exe
        449⤵
        
        PID:4540
        
        \??\c:\1bnnhn.exe
        
        c:\1bnnhn.exe
        450⤵
        
        PID:1028
        
        \??\c:\ntbbnn.exe
        
        c:\ntbbnn.exe
        451⤵
        
        PID:2400
        
        \??\c:\lxxlfrl.exe
        
        c:\lxxlfrl.exe
        452⤵
        
        PID:2700
        
        \??\c:\frlfffr.exe
        
        c:\frlfffr.exe
        453⤵
        
        PID:5676
        
        \??\c:\pjpdd.exe
        
        c:\pjpdd.exe
        454⤵
        
        PID:4920
        
        \??\c:\ddvpj.exe
        
        c:\ddvpj.exe
        455⤵
        
        PID:5708
        
        \??\c:\5ddvv.exe
        
        c:\5ddvv.exe
        456⤵
        
        PID:4652
        
        \??\c:\1pjvp.exe
        
        c:\1pjvp.exe
        457⤵
        
        PID:4972
        
        \??\c:\rrllrlf.exe
        
        c:\rrllrlf.exe
        458⤵
        
        PID:5444
        
        \??\c:\vdjdd.exe
        
        c:\vdjdd.exe
        459⤵
        
        PID:3712
        
        \??\c:\bbbhhb.exe
        
        c:\bbbhhb.exe
        460⤵
        
        PID:5572
        
        \??\c:\1bnbhb.exe
        
        c:\1bnbhb.exe
        461⤵
        
        PID:5984
        
        \??\c:\bhnhbb.exe
        
        c:\bhnhbb.exe
        462⤵
        System Location Discovery: System Language Discovery
        
        PID:372
        
        \??\c:\3fllfxl.exe
        
        c:\3fllfxl.exe
        463⤵
        
        PID:4960
        
        \??\c:\rrllfff.exe
        
        c:\rrllfff.exe
        464⤵
        
        PID:4008
        
        \??\c:\jjjvj.exe
        
        c:\jjjvj.exe
        465⤵
        
        PID:2648
        
        \??\c:\hbbnth.exe
        
        c:\hbbnth.exe
        466⤵
        
        PID:4004
        
        \??\c:\hthhtn.exe
        
        c:\hthhtn.exe
        467⤵
        
        PID:5084
        
        \??\c:\hbtnhb.exe
        
        c:\hbtnhb.exe
        468⤵
        
        PID:5752
        
        \??\c:\nttnnh.exe
        
        c:\nttnnh.exe
        469⤵
        
        PID:3104
        
        \??\c:\ntbttt.exe
        
        c:\ntbttt.exe
        470⤵
        
        PID:5996
        
        \??\c:\rxflxxl.exe
        
        c:\rxflxxl.exe
        471⤵
        
        PID:5476
        
        \??\c:\xflfxxr.exe
        
        c:\xflfxxr.exe
        472⤵
        
        PID:3804
        
        \??\c:\djdvv.exe
        
        c:\djdvv.exe
        473⤵
        
        PID:1812
        
        \??\c:\jpjdp.exe
        
        c:\jpjdp.exe
        474⤵
        System Location Discovery: System Language Discovery
        
        PID:3032
        
        \??\c:\bntnht.exe
        
        c:\bntnht.exe
        475⤵
        
        PID:5020
        
        \??\c:\5djvd.exe
        
        c:\5djvd.exe
        476⤵
        
        PID:4472
        
        \??\c:\vpdjj.exe
        
        c:\vpdjj.exe
        477⤵
        
        PID:2988
        
        \??\c:\hbbbtt.exe
        
        c:\hbbbtt.exe
        478⤵
        
        PID:392
        
        \??\c:\dvdvj.exe
        
        c:\dvdvj.exe
        479⤵
        
        PID:2092
        
        \??\c:\hbbhbt.exe
        
        c:\hbbhbt.exe
        480⤵
        
        PID:5784
        
        \??\c:\frxlflx.exe
        
        c:\frxlflx.exe
        481⤵
        
        PID:4376
        
        \??\c:\1llxrrf.exe
        
        c:\1llxrrf.exe
        482⤵
        
        PID:5096
        
        \??\c:\rfrrfrl.exe
        
        c:\rfrrfrl.exe
        483⤵
        
        PID:1956
        
        \??\c:\xlxrlrr.exe
        
        c:\xlxrlrr.exe
        484⤵
        
        PID:4876
        
        \??\c:\5vjdd.exe
        
        c:\5vjdd.exe
        485⤵
        
        PID:4500
        
        \??\c:\btnbnh.exe
        
        c:\btnbnh.exe
        486⤵
        
        PID:4228
        
        \??\c:\bnhbtt.exe
        
        c:\bnhbtt.exe
        487⤵
        
        PID:4240
        
        \??\c:\nntnnn.exe
        
        c:\nntnnn.exe
        488⤵
        
        PID:2972
        
        \??\c:\9llfxrl.exe
        
        c:\9llfxrl.exe
        489⤵
        
        PID:1776
        
        \??\c:\rxfrrrl.exe
        
        c:\rxfrrrl.exe
        490⤵
        
        PID:4264
        
        \??\c:\fxfrrrl.exe
        
        c:\fxfrrrl.exe
        491⤵
        
        PID:5688
        
        \??\c:\xrfxrll.exe
        
        c:\xrfxrll.exe
        492⤵
        
        PID:4536
        
        \??\c:\1ddpj.exe
        
        c:\1ddpj.exe
        493⤵
        
        PID:3372
        
        \??\c:\ppjvj.exe
        
        c:\ppjvj.exe
        494⤵
        
        PID:5088
        
        \??\c:\dvdvj.exe
        
        c:\dvdvj.exe
        495⤵
        
        PID:2768
        
        \??\c:\7btnnn.exe
        
        c:\7btnnn.exe
        496⤵
        
        PID:5144
        
        \??\c:\nnhtnh.exe
        
        c:\nnhtnh.exe
        497⤵
        
        PID:4588
        
        \??\c:\9bnhnh.exe
        
        c:\9bnhnh.exe
        498⤵
        
        PID:4116
        
        \??\c:\fxffrxx.exe
        
        c:\fxffrxx.exe
        499⤵
        
        PID:2404
        
        \??\c:\3llfxlf.exe
        
        c:\3llfxlf.exe
        500⤵
        
        PID:996
        
        \??\c:\5xrfrlf.exe
        
        c:\5xrfrlf.exe
        501⤵
        
        PID:3228
        
        \??\c:\jdpjd.exe
        
        c:\jdpjd.exe
        502⤵
        
        PID:2560
        
        \??\c:\dvvpj.exe
        
        c:\dvvpj.exe
        503⤵
        
        PID:4460
        
        \??\c:\pjjpd.exe
        
        c:\pjjpd.exe
        504⤵
        
        PID:2740
        
        \??\c:\3jjjd.exe
        
        c:\3jjjd.exe
        505⤵
        
        PID:2348
        
        \??\c:\hthhtb.exe
        
        c:\hthhtb.exe
        506⤵
        
        PID:3724
        
        \??\c:\nttnhb.exe
        
        c:\nttnhb.exe
        507⤵
        
        PID:5856
        
        \??\c:\5hhbnn.exe
        
        c:\5hhbnn.exe
        508⤵
        
        PID:2388
        
        \??\c:\fffxxxl.exe
        
        c:\fffxxxl.exe
        509⤵
        
        PID:5776
        
        \??\c:\pdpjd.exe
        
        c:\pdpjd.exe
        510⤵
        
        PID:4064
        
        \??\c:\ppjdd.exe
        
        c:\ppjdd.exe
        511⤵
        
        PID:932
        
        \??\c:\vvpjj.exe
        
        c:\vvpjj.exe
        512⤵
        
        PID:1932
        
        \??\c:\flllrrx.exe
        
        c:\flllrrx.exe
        513⤵
        
        PID:2684
        
        \??\c:\xrxrrrf.exe
        
        c:\xrxrrrf.exe
        514⤵
        
        PID:3048
        
        \??\c:\dvdvj.exe
        
        c:\dvdvj.exe
        515⤵
        
        PID:4124
        
        \??\c:\vddvp.exe
        
        c:\vddvp.exe
        516⤵
        
        PID:1180
        
        \??\c:\hnttbt.exe
        
        c:\hnttbt.exe
        517⤵
        
        PID:468
        
        \??\c:\hthhnn.exe
        
        c:\hthhnn.exe
        518⤵
        System Location Discovery: System Language Discovery
        
        PID:456
        
        \??\c:\tnnbtn.exe
        
        c:\tnnbtn.exe
        519⤵
        
        PID:1044
        
        \??\c:\hhhhbt.exe
        
        c:\hhhhbt.exe
        520⤵
        
        PID:2220
        
        \??\c:\flfxrlx.exe
        
        c:\flfxrlx.exe
        521⤵
        
        PID:1960
        
        \??\c:\ffrrlfr.exe
        
        c:\ffrrlfr.exe
        522⤵
        System Location Discovery: System Language Discovery
        
        PID:3772
        
        \??\c:\xrlxlfx.exe
        
        c:\xrlxlfx.exe
        523⤵
        
        PID:4864
        
        \??\c:\lfxrrfr.exe
        
        c:\lfxrrfr.exe
        524⤵
        
        PID:5668
        
        \??\c:\vpdvd.exe
        
        c:\vpdvd.exe
        525⤵
        
        PID:3096
        
        \??\c:\vvdvv.exe
        
        c:\vvdvv.exe
        526⤵
        
        PID:536
        
        \??\c:\5nnhbb.exe
        
        c:\5nnhbb.exe
        527⤵
        System Location Discovery: System Language Discovery
        
        PID:3956
        
        \??\c:\1tnhbb.exe
        
        c:\1tnhbb.exe
        528⤵
        
        PID:1688
        
        \??\c:\nhnnbh.exe
        
        c:\nhnnbh.exe
        529⤵
        
        PID:5948
        
        \??\c:\1xxrlrl.exe
        
        c:\1xxrlrl.exe
        530⤵
        
        PID:3528
        
        \??\c:\fxxrlrr.exe
        
        c:\fxxrlrr.exe
        531⤵
        
        PID:540
        
        \??\c:\rrfxxfx.exe
        
        c:\rrfxxfx.exe
        532⤵
        
        PID:5940
        
        \??\c:\9fxxrrf.exe
        
        c:\9fxxrrf.exe
        533⤵
        
        PID:1376
        
        \??\c:\rxfxxll.exe
        
        c:\rxfxxll.exe
        534⤵
        
        PID:4184
        
        \??\c:\xxfxrlf.exe
        
        c:\xxfxrlf.exe
        535⤵
        
        PID:5044
        
        \??\c:\fxfxrlx.exe
        
        c:\fxfxrlx.exe
        536⤵
        System Location Discovery: System Language Discovery
        
        PID:3976
        
        \??\c:\rfrlfxl.exe
        
        c:\rfrlfxl.exe
        537⤵
        
        PID:3132
        
        \??\c:\9dpdv.exe
        
        c:\9dpdv.exe
        538⤵
        
        PID:1976
        
        \??\c:\vvpjv.exe
        
        c:\vvpjv.exe
        539⤵
        
        PID:4480
        
        \??\c:\jdvvp.exe
        
        c:\jdvvp.exe
        540⤵
        
        PID:1744
        
        \??\c:\nhnnbn.exe
        
        c:\nhnnbn.exe
        541⤵
        
        PID:2640
        
        \??\c:\jdjdp.exe
        
        c:\jdjdp.exe
        542⤵
        
        PID:2208
        
        \??\c:\9tthbn.exe
        
        c:\9tthbn.exe
        543⤵
        
        PID:4956
        
        \??\c:\bhtntn.exe
        
        c:\bhtntn.exe
        544⤵
        
        PID:5616
        
        \??\c:\flrllfx.exe
        
        c:\flrllfx.exe
        545⤵
        
        PID:1672
        
        \??\c:\xffxxxx.exe
        
        c:\xffxxxx.exe
        546⤵
        
        PID:3888
        
        \??\c:\lfrrffr.exe
        
        c:\lfrrffr.exe
        547⤵
        
        PID:2644
        
        \??\c:\ddjdj.exe
        
        c:\ddjdj.exe
        548⤵
        
        PID:5248
        
        \??\c:\1vjdd.exe
        
        c:\1vjdd.exe
        549⤵
        
        PID:2192
        
        \??\c:\dpvdv.exe
        
        c:\dpvdv.exe
        550⤵
        
        PID:176
        
        \??\c:\tnbbbb.exe
        
        c:\tnbbbb.exe
        551⤵
        
        PID:6116
        
        \??\c:\hhtbtt.exe
        
        c:\hhtbtt.exe
        552⤵
        
        PID:3540
        
        \??\c:\5fxrlfx.exe
        
        c:\5fxrlfx.exe
        553⤵
        
        PID:2428
        
        \??\c:\frrflll.exe
        
        c:\frrflll.exe
        554⤵
        
        PID:2800
        
        \??\c:\bhnnhb.exe
        
        c:\bhnnhb.exe
        555⤵
        
        PID:1868
        
        \??\c:\xfxlfxl.exe
        
        c:\xfxlfxl.exe
        556⤵
        
        PID:4620
        
        \??\c:\xrxxrlx.exe
        
        c:\xrxxrlx.exe
        557⤵
        
        PID:5724
        
        \??\c:\xrrfrlf.exe
        
        c:\xrrfrlf.exe
        558⤵
        
        PID:4296
        
        \??\c:\jdppv.exe
        
        c:\jdppv.exe
        559⤵
        
        PID:5404
        
        \??\c:\vvjpp.exe
        
        c:\vvjpp.exe
        560⤵
        
        PID:6080
        
        \??\c:\dvjjj.exe
        
        c:\dvjjj.exe
        561⤵
        
        PID:4048
        
        \??\c:\dvjjd.exe
        
        c:\dvjjd.exe
        562⤵
        System Location Discovery: System Language Discovery
        
        PID:5972
        
        \??\c:\vpppv.exe
        
        c:\vpppv.exe
        563⤵
        
        PID:5892
        
        \??\c:\nbhbhh.exe
        
        c:\nbhbhh.exe
        564⤵
        
        PID:1584
        
        \??\c:\hntbtt.exe
        
        c:\hntbtt.exe
        565⤵
        System Location Discovery: System Language Discovery
        
        PID:4976
        
        \??\c:\ttnntb.exe
        
        c:\ttnntb.exe
        566⤵
        
        PID:6100
        
        \??\c:\bbtnhh.exe
        
        c:\bbtnhh.exe
        567⤵
        
        PID:4776
        
        \??\c:\nhnnnn.exe
        
        c:\nhnnnn.exe
        568⤵
        
        PID:756
        
        \??\c:\jjdjj.exe
        
        c:\jjdjj.exe
        569⤵
        
        PID:3492
        
        \??\c:\jpvvv.exe
        
        c:\jpvvv.exe
        570⤵
        
        PID:4044
        
        \??\c:\jjdpj.exe
        
        c:\jjdpj.exe
        571⤵
        
        PID:2588
        
        \??\c:\jdvpj.exe
        
        c:\jdvpj.exe
        572⤵
        
        PID:5560
        
        \??\c:\vpddj.exe
        
        c:\vpddj.exe
        573⤵
        
        PID:5064
        
        \??\c:\jjjjp.exe
        
        c:\jjjjp.exe
        574⤵
        
        PID:4408
        
        \??\c:\9vvvv.exe
        
        c:\9vvvv.exe
        575⤵
        System Location Discovery: System Language Discovery
        
        PID:4196
        
        \??\c:\vdddd.exe
        
        c:\vdddd.exe
        576⤵
        
        PID:552
        
        \??\c:\jppvp.exe
        
        c:\jppvp.exe
        577⤵
        
        PID:6132
        
        \??\c:\jvvpj.exe
        
        c:\jvvpj.exe
        578⤵
        
        PID:2188
        
        \??\c:\7ppjd.exe
        
        c:\7ppjd.exe
        579⤵
        
        PID:5316
        
        \??\c:\vvdvv.exe
        
        c:\vvdvv.exe
        580⤵
        
        PID:3180
        
        \??\c:\jjddp.exe
        
        c:\jjddp.exe
        581⤵
        
        PID:3828
        
        \??\c:\jdvpp.exe
        
        c:\jdvpp.exe
        582⤵
        
        PID:3036
        
        \??\c:\vdjvp.exe
        
        c:\vdjvp.exe
        583⤵
        
        PID:4860
        
        \??\c:\jddvd.exe
        
        c:\jddvd.exe
        584⤵
        
        PID:1056
        
        \??\c:\pdvvd.exe
        
        c:\pdvvd.exe
        585⤵
        
        PID:6064
        
        \??\c:\frlrxfr.exe
        
        c:\frlrxfr.exe
        586⤵
        
        PID:1204
        
        \??\c:\pvjpd.exe
        
        c:\pvjpd.exe
        587⤵
        
        PID:5416
        
        \??\c:\rxllxfr.exe
        
        c:\rxllxfr.exe
        588⤵
        
        PID:4372
        
        \??\c:\1pjpp.exe
        
        c:\1pjpp.exe
        589⤵
        
        PID:1800
        
        \??\c:\vvppv.exe
        
        c:\vvppv.exe
        590⤵
        
        PID:4600
        
        \??\c:\vpvjp.exe
        
        c:\vpvjp.exe
        591⤵
        
        PID:5956
        
        \??\c:\dvjdp.exe
        
        c:\dvjdp.exe
        592⤵
        
        PID:2728
        
        \??\c:\lxlflrr.exe
        
        c:\lxlflrr.exe
        593⤵
        
        PID:3860
        
        \??\c:\5lrrrxx.exe
        
        c:\5lrrrxx.exe
        594⤵
        
        PID:5652
        
        \??\c:\bbnhtn.exe
        
        c:\bbnhtn.exe
        595⤵
        
        PID:4548
        
        \??\c:\nnhbtt.exe
        
        c:\nnhbtt.exe
        596⤵
        
        PID:4104
        
        \??\c:\jjjjj.exe
        
        c:\jjjjj.exe
        597⤵
        
        PID:1144
        
        \??\c:\ppjjj.exe
        
        c:\ppjjj.exe
        598⤵
        
        PID:3436
        
        \??\c:\djvdj.exe
        
        c:\djvdj.exe
        599⤵
        
        PID:1640
        
        \??\c:\ddjjj.exe
        
        c:\ddjjj.exe
        600⤵
        
        PID:3216
        
        \??\c:\dpddd.exe
        
        c:\dpddd.exe
        601⤵
        
        PID:5624
        
        \??\c:\ffrrffx.exe
        
        c:\ffrrffx.exe
        602⤵
        
        PID:4796
        
        \??\c:\lrfflfl.exe
        
        c:\lrfflfl.exe
        603⤵
        
        PID:4952
        
        \??\c:\bntbbh.exe
        
        c:\bntbbh.exe
        604⤵
        System Location Discovery: System Language Discovery
        
        PID:936
        
        \??\c:\nnhnnn.exe
        
        c:\nnhnnn.exe
        605⤵
        
        PID:3984
        
        \??\c:\jpjpp.exe
        
        c:\jpjpp.exe
        606⤵
        
        PID:3120
        
        \??\c:\bnhnht.exe
        
        c:\bnhnht.exe
        607⤵
        
        PID:2984
        
        \??\c:\pjvvd.exe
        
        c:\pjvvd.exe
        608⤵
        
        PID:1224
        
        \??\c:\llrrfll.exe
        
        c:\llrrfll.exe
        609⤵
        
        PID:5528
        
        \??\c:\xlrxfrr.exe
        
        c:\xlrxfrr.exe
        610⤵
        System Location Discovery: System Language Discovery
        
        PID:4520
        
        \??\c:\hthhnn.exe
        
        c:\hthhnn.exe
        611⤵
        
        PID:2216
        
        \??\c:\tthhht.exe
        
        c:\tthhht.exe
        612⤵
        
        PID:5392
        
        \??\c:\9vjjj.exe
        
        c:\9vjjj.exe
        613⤵
        
        PID:5820
        
        \??\c:\pppvv.exe
        
        c:\pppvv.exe
        614⤵
        
        PID:3832
        
        \??\c:\vpjjj.exe
        
        c:\vpjjj.exe
        615⤵
        
        PID:4252
        
        \??\c:\jdpvv.exe
        
        c:\jdpvv.exe
        616⤵
        
        PID:2316
        
        \??\c:\rrlrrxx.exe
        
        c:\rrlrrxx.exe
        617⤵
        
        PID:5480
        
        \??\c:\frxxlrx.exe
        
        c:\frxxlrx.exe
        618⤵
        
        PID:5740
        
        \??\c:\rxlllrr.exe
        
        c:\rxlllrr.exe
        619⤵
        
        PID:2688
        
        \??\c:\bbbhnt.exe
        
        c:\bbbhnt.exe
        620⤵
        
        PID:5548
        
        \??\c:\7rflrrr.exe
        
        c:\7rflrrr.exe
        621⤵
        
        PID:1736
        
        \??\c:\hntnbb.exe
        
        c:\hntnbb.exe
        622⤵
        
        PID:1344
        
        \??\c:\5ffxxxx.exe
        
        c:\5ffxxxx.exe
        623⤵
        
        PID:3420
        
        \??\c:\bhtbnh.exe
        
        c:\bhtbnh.exe
        624⤵
        
        PID:2940
        
        \??\c:\tntbbb.exe
        
        c:\tntbbb.exe
        625⤵
        
        PID:3776
        
        \??\c:\jvddp.exe
        
        c:\jvddp.exe
        626⤵
        
        PID:2080
        
        \??\c:\dvpvd.exe
        
        c:\dvpvd.exe
        627⤵
        
        PID:4624
        
        \??\c:\5djpv.exe
        
        c:\5djpv.exe
        628⤵
        
        PID:4680
        
        \??\c:\dpjjj.exe
        
        c:\dpjjj.exe
        629⤵
        
        PID:1748
        
        \??\c:\djpjd.exe
        
        c:\djpjd.exe
        630⤵
        
        PID:2144
        
        \??\c:\pvjjd.exe
        
        c:\pvjjd.exe
        631⤵
        
        PID:4760
        
        \??\c:\hnthhb.exe
        
        c:\hnthhb.exe
        632⤵
        
        PID:1964
        
        \??\c:\tbbnhb.exe
        
        c:\tbbnhb.exe
        633⤵
        System Location Discovery: System Language Discovery
        
        PID:1612
        
        \??\c:\hbtthb.exe
        
        c:\hbtthb.exe
        634⤵
        
        PID:4076
        
        \??\c:\xrxxffx.exe
        
        c:\xrxxffx.exe
        635⤵
        
        PID:3896
        
        \??\c:\lflxrxx.exe
        
        c:\lflxrxx.exe
        636⤵
        
        PID:3144
        
        \??\c:\lrrrffr.exe
        
        c:\lrrrffr.exe
        637⤵
        
        PID:2064
        
        \??\c:\xfrfflf.exe
        
        c:\xfrfflf.exe
        638⤵
        
        PID:1896
        
        \??\c:\rrrlfxx.exe
        
        c:\rrrlfxx.exe
        639⤵
        
        PID:2332
        
        \??\c:\fllffxr.exe
        
        c:\fllffxr.exe
        640⤵
        
        PID:4824
        
        \??\c:\xxlfrrl.exe
        
        c:\xxlfrrl.exe
        641⤵
        
        PID:2520
        
        \??\c:\flflrrr.exe
        
        c:\flflrrr.exe
        642⤵
        
        PID:1628
        
        \??\c:\rxffxxx.exe
        
        c:\rxffxxx.exe
        643⤵
        
        PID:4728
        
        \??\c:\rfrxffl.exe
        
        c:\rfrxffl.exe
        644⤵
        
        PID:6060
        
        \??\c:\rxrxrxx.exe
        
        c:\rxrxrxx.exe
        645⤵
        
        PID:4552
        
        \??\c:\flxlrrl.exe
        
        c:\flxlrrl.exe
        646⤵
        System Location Discovery: System Language Discovery
        
        PID:5220
        
        \??\c:\7rxffff.exe
        
        c:\7rxffff.exe
        647⤵
        
        PID:5296
        
        \??\c:\rflllfr.exe
        
        c:\rflllfr.exe
        648⤵
        
        PID:1948
        
        \??\c:\pvppp.exe
        
        c:\pvppp.exe
        649⤵
        
        PID:4412
        
        \??\c:\jjvvv.exe
        
        c:\jjvvv.exe
        650⤵
        
        PID:4708
        
        \??\c:\vdpvp.exe
        
        c:\vdpvp.exe
        651⤵
        
        PID:1252
        
        \??\c:\hbhhhn.exe
        
        c:\hbhhhn.exe
        652⤵
        
        PID:5320
        
        \??\c:\tnhhbb.exe
        
        c:\tnhhbb.exe
        653⤵
        
        PID:2176
        
        \??\c:\nbnnhb.exe
        
        c:\nbnnhb.exe
        654⤵
        
        PID:820
        
        \??\c:\nhhnht.exe
        
        c:\nhhnht.exe
        655⤵
        
        PID:3796
        
        \??\c:\rrxlxrf.exe
        
        c:\rrxlxrf.exe
        656⤵
        
        PID:1220
        
        \??\c:\ttbbbt.exe
        
        c:\ttbbbt.exe
        657⤵
        
        PID:4844
        
        \??\c:\tnnbtn.exe
        
        c:\tnnbtn.exe
        658⤵
        
        PID:4120
        
        \??\c:\1xxxrxl.exe
        
        c:\1xxxrxl.exe
        659⤵
        System Location Discovery: System Language Discovery
        
        PID:4668
        
        \??\c:\flrxxxr.exe
        
        c:\flrxxxr.exe
        660⤵
        
        PID:3900
        
        \??\c:\frfflll.exe
        
        c:\frfflll.exe
        661⤵
        
        PID:3020
        
        \??\c:\jvddd.exe
        
        c:\jvddd.exe
        662⤵
        
        PID:3304
        
        \??\c:\jvjvv.exe
        
        c:\jvjvv.exe
        663⤵
        
        PID:532
        
        \??\c:\pvjdp.exe
        
        c:\pvjdp.exe
        664⤵
        System Location Discovery: System Language Discovery
        
        PID:4940
        
        \??\c:\1dvpj.exe
        
        c:\1dvpj.exe
        665⤵
        
        PID:1364
        
        \??\c:\dpdpp.exe
        
        c:\dpdpp.exe
        666⤵
        
        PID:3532
        
        \??\c:\nthhnn.exe
        
        c:\nthhnn.exe
        667⤵
        
        PID:4732
        
        \??\c:\tnbtbt.exe
        
        c:\tnbtbt.exe
        668⤵
        
        PID:1708
        
        \??\c:\bhbhhh.exe
        
        c:\bhbhhh.exe
        669⤵
        System Location Discovery: System Language Discovery
        
        PID:5636
        
        \??\c:\9ntttt.exe
        
        c:\9ntttt.exe
        670⤵
        
        PID:2136
        
        \??\c:\hbttnb.exe
        
        c:\hbttnb.exe
        671⤵
        System Location Discovery: System Language Discovery
        
        PID:3316
        
        \??\c:\tthbnh.exe
        
        c:\tthbnh.exe
        672⤵
        
        PID:4532
        
        \??\c:\nnhhbb.exe
        
        c:\nnhhbb.exe
        673⤵
        System Location Discovery: System Language Discovery
        
        PID:1340
        
        \??\c:\hbbtnn.exe
        
        c:\hbbtnn.exe
        674⤵
        
        PID:4616
        
        \??\c:\bttntb.exe
        
        c:\bttntb.exe
        675⤵
        
        PID:4464
        
        \??\c:\hnhnhn.exe
        
        c:\hnhnhn.exe
        676⤵
        
        PID:1076
        
        \??\c:\ntnttt.exe
        
        c:\ntnttt.exe
        677⤵
        
        PID:3836
        
        \??\c:\9bbbbb.exe
        
        c:\9bbbbb.exe
        678⤵
        
        PID:1456
        
        \??\c:\9tnnnt.exe
        
        c:\9tnnnt.exe
        679⤵
        System Location Discovery: System Language Discovery
        
        PID:4404
        
        \??\c:\tntnhh.exe
        
        c:\tntnhh.exe
        680⤵
        
        PID:4828
        
        \??\c:\ttthhn.exe
        
        c:\ttthhn.exe
        681⤵
        
        PID:4636
        
        \??\c:\nntttn.exe
        
        c:\nntttn.exe
        682⤵
        
        PID:1864
        
        \??\c:\nbhnhh.exe
        
        c:\nbhnhh.exe
        683⤵
        
        PID:408
        
        \??\c:\frrxxrx.exe
        
        c:\frrxxrx.exe
        684⤵
        
        PID:1332
        
        \??\c:\lrfffff.exe
        
        c:\lrfffff.exe
        685⤵
        
        PID:2788
        
        \??\c:\vvjvv.exe
        
        c:\vvjvv.exe
        686⤵
        
        PID:4476
        
        \??\c:\dpdpv.exe
        
        c:\dpdpv.exe
        687⤵
        
        PID:3352
        
        \??\c:\vdppv.exe
        
        c:\vdppv.exe
        688⤵
        
        PID:3468
        
        \??\c:\jjjdv.exe
        
        c:\jjjdv.exe
        689⤵
        
        PID:1292
        
        \??\c:\btbbtt.exe
        
        c:\btbbtt.exe
        690⤵
        
        PID:2836
        
        \??\c:\rlfxfxx.exe
        
        c:\rlfxfxx.exe
        691⤵
        
        PID:3064
        
        \??\c:\1hnhht.exe
        
        c:\1hnhht.exe
        692⤵
        
        PID:5012
        
        \??\c:\5hnnhh.exe
        
        c:\5hnnhh.exe
        693⤵
        System Location Discovery: System Language Discovery
        
        PID:616
        
        \??\c:\frllrrl.exe
        
        c:\frllrrl.exe
        694⤵
        
        PID:1568
        
        \??\c:\llxrxrr.exe
        
        c:\llxrxrr.exe
        695⤵
        
        PID:5388
        
        \??\c:\rxfxrrr.exe
        
        c:\rxfxrrr.exe
        696⤵
        System Location Discovery: System Language Discovery
        
        PID:4696
        
        \??\c:\frllrrl.exe
        
        c:\frllrrl.exe
        697⤵
        
        PID:3196
        
        \??\c:\frrlflx.exe
        
        c:\frrlflx.exe
        698⤵
        
        PID:4292
        
        \??\c:\1xxrllf.exe
        
        c:\1xxrllf.exe
        699⤵
        
        PID:5696
        
        \??\c:\lfllffx.exe
        
        c:\lfllffx.exe
        700⤵
        
        PID:1432
        
        \??\c:\rlrrxxx.exe
        
        c:\rlrrxxx.exe
        701⤵
        
        PID:4312
        
        \??\c:\vvdvv.exe
        
        c:\vvdvv.exe
        702⤵
        
        PID:4968
        
        \??\c:\pvpdd.exe
        
        c:\pvpdd.exe
        703⤵
        
        PID:3944
        
        \??\c:\vdjjv.exe
        
        c:\vdjjv.exe
        704⤵
        
        PID:2256
        
        \??\c:\pvvvv.exe
        
        c:\pvvvv.exe
        705⤵
        
        PID:4804
        
        \??\c:\djppj.exe
        
        c:\djppj.exe
        706⤵
        
        PID:1136
        
        \??\c:\3fxrlrl.exe
        
        c:\3fxrlrl.exe
        707⤵
        
        PID:6000
        
        \??\c:\fxxxxxf.exe
        
        c:\fxxxxxf.exe
        708⤵
        
        PID:3452
        
        \??\c:\9jpjp.exe
        
        c:\9jpjp.exe
        709⤵
        
        PID:3524
        
        \??\c:\pdjjj.exe
        
        c:\pdjjj.exe
        710⤵
        
        PID:5256
        
        \??\c:\3dvjd.exe
        
        c:\3dvjd.exe
        711⤵
        
        PID:764
        
        \??\c:\rlrlrrx.exe
        
        c:\rlrlrrx.exe
        712⤵
        
        PID:6104
        
        \??\c:\vdjjv.exe
        
        c:\vdjjv.exe
        713⤵
        System Location Discovery: System Language Discovery
        
        PID:5076
        
        \??\c:\vvppj.exe
        
        c:\vvppj.exe
        714⤵
        System Location Discovery: System Language Discovery
        
        PID:1500
        
        \??\c:\vppdv.exe
        
        c:\vppdv.exe
        715⤵
        
        PID:2544
        
        \??\c:\btbtbb.exe
        
        c:\btbtbb.exe
        716⤵
        System Location Discovery: System Language Discovery
        
        PID:4944
        
        \??\c:\9hnhhb.exe
        
        c:\9hnhhb.exe
        717⤵
        
        PID:3668
        
        \??\c:\3bhthh.exe
        
        c:\3bhthh.exe
        718⤵
        
        PID:1824
        
        \??\c:\ddvvv.exe
        
        c:\ddvvv.exe
        719⤵
        
        PID:4840
        
        \??\c:\ddddv.exe
        
        c:\ddddv.exe
        720⤵
        System Location Discovery: System Language Discovery
        
        PID:516
        
        \??\c:\tttnnn.exe
        
        c:\tttnnn.exe
        721⤵
        
        PID:1372
        
        \??\c:\nhtnhb.exe
        
        c:\nhtnhb.exe
        722⤵
        
        PID:3812
        
        \??\c:\tnthbh.exe
        
        c:\tnthbh.exe
        723⤵
        
        PID:1636
        
        \??\c:\lrlfrrf.exe
        
        c:\lrlfrrf.exe
        724⤵
        
        PID:5236
        
        \??\c:\9frlrrx.exe
        
        c:\9frlrrx.exe
        725⤵
        
        PID:4752
        
        \??\c:\fflfxrl.exe
        
        c:\fflfxrl.exe
        726⤵
        
        PID:2924
        
        \??\c:\vdppp.exe
        
        c:\vdppp.exe
        727⤵
        
        PID:5648
        
        \??\c:\3jdvj.exe
        
        c:\3jdvj.exe
        728⤵
        
        PID:1052
        
        \??\c:\9jppv.exe
        
        c:\9jppv.exe
        729⤵
        
        PID:652
        
        \??\c:\pvvdd.exe
        
        c:\pvvdd.exe
        730⤵
        
        PID:5924
        
        \??\c:\nthbth.exe
        
        c:\nthbth.exe
        731⤵
        
        PID:5196
        
        \??\c:\hnbbhn.exe
        
        c:\hnbbhn.exe
        732⤵
        
        PID:2600
        
        \??\c:\bbbbtt.exe
        
        c:\bbbbtt.exe
        733⤵
        
        PID:1448
        
        \??\c:\nnnnhh.exe
        
        c:\nnnnhh.exe
        734⤵
        
        PID:4772
        
        \??\c:\nththh.exe
        
        c:\nththh.exe
        735⤵
        
        PID:1732
        
        \??\c:\tnnnnt.exe
        
        c:\tnnnnt.exe
        736⤵
        System Location Discovery: System Language Discovery
        
        PID:4604
        
        \??\c:\rflfxxr.exe
        
        c:\rflfxxr.exe
        737⤵
        
        PID:548
        
        \??\c:\rffxrfl.exe
        
        c:\rffxrfl.exe
        738⤵
        
        PID:4260
        
        \??\c:\frffxxx.exe
        
        c:\frffxxx.exe
        739⤵
        
        PID:4244
        
        \??\c:\rlrxxrr.exe
        
        c:\rlrxxrr.exe
        740⤵
        
        PID:4508
        
        \??\c:\5rrlllf.exe
        
        c:\5rrlllf.exe
        741⤵
        
        PID:4872
        
        \??\c:\dvpvv.exe
        
        c:\dvpvv.exe
        742⤵
        
        PID:4996
        
        \??\c:\pjddv.exe
        
        c:\pjddv.exe
        743⤵
        
        PID:620
        
        \??\c:\jpjjj.exe
        
        c:\jpjjj.exe
        744⤵
        System Location Discovery: System Language Discovery
        
        PID:3028
        
        \??\c:\5pvpp.exe
        
        c:\5pvpp.exe
        745⤵
        
        PID:2888
        
        \??\c:\jvdpj.exe
        
        c:\jvdpj.exe
        746⤵
        
        PID:2864
        
        \??\c:\pjvvj.exe
        
        c:\pjvvj.exe
        747⤵
        
        PID:3168
        
        \??\c:\vvpjj.exe
        
        c:\vvpjj.exe
        748⤵
        
        PID:4340
        
        \??\c:\jpvpj.exe
        
        c:\jpvpj.exe
        749⤵
        
        PID:3624
        
        \??\c:\dvvvp.exe
        
        c:\dvvvp.exe
        750⤵
        
        PID:6120
        
        \??\c:\vjjdv.exe
        
        c:\vjjdv.exe
        751⤵
        
        PID:1188
        
        \??\c:\5bbtnt.exe
        
        c:\5bbtnt.exe
        752⤵
        
        PID:4336
        
        \??\c:\9djdv.exe
        
        c:\9djdv.exe
        753⤵
        
        PID:1140
        
        \??\c:\nhhbbt.exe
        
        c:\nhhbbt.exe
        754⤵
        System Location Discovery: System Language Discovery
        
        PID:5992
        
        \??\c:\bbhtbb.exe
        
        c:\bbhtbb.exe
        755⤵
        
        PID:3268
        
        \??\c:\hnbbhn.exe
        
        c:\hnbbhn.exe
        756⤵
        
        PID:3780
        
        \??\c:\xfrxllr.exe
        
        c:\xfrxllr.exe
        757⤵
        
        PID:4660
        
        \??\c:\btbtnn.exe
        
        c:\btbtnn.exe
        758⤵
        
        PID:3536
        
        \??\c:\bnnhhh.exe
        
        c:\bnnhhh.exe
        759⤵
        
        PID:2576
        
        \??\c:\bhbhhb.exe
        
        c:\bhbhhb.exe
        760⤵
        
        PID:3508
        
        \??\c:\bhbhtt.exe
        
        c:\bhbhtt.exe
        761⤵
        
        PID:3980
        
        \??\c:\bnbbbb.exe
        
        c:\bnbbbb.exe
        762⤵
        
        PID:1600
        
        \??\c:\jdjjp.exe
        
        c:\jdjjp.exe
        763⤵
        
        PID:4936
        
        \??\c:\pvdvv.exe
        
        c:\pvdvv.exe
        764⤵
        System Location Discovery: System Language Discovery
        
        PID:2204
        
        \??\c:\vjpdv.exe
        
        c:\vjpdv.exe
        765⤵
        
        PID:2308
        
        \??\c:\dvppp.exe
        
        c:\dvppp.exe
        766⤵
        System Location Discovery: System Language Discovery
        
        PID:4200
        
        \??\c:\jvppj.exe
        
        c:\jvppj.exe
        767⤵
        System Location Discovery: System Language Discovery
        
        PID:4812
        
        \??\c:\vvppj.exe
        
        c:\vvppj.exe
        768⤵
        
        PID:6136
        
        \??\c:\ntthhb.exe
        
        c:\ntthhb.exe
        769⤵
        
        PID:3868
        
        \??\c:\nhttbb.exe
        
        c:\nhttbb.exe
        770⤵
        
        PID:1036
        
        \??\c:\7tttnb.exe
        
        c:\7tttnb.exe
        771⤵
        System Location Discovery: System Language Discovery
        
        PID:2068
        
        \??\c:\hhnhhb.exe
        
        c:\hhnhhb.exe
        772⤵
        
        PID:1508
        
        \??\c:\ffffxrl.exe
        
        c:\ffffxrl.exe
        773⤵
        
        PID:4820
        
        \??\c:\7rfxfff.exe
        
        c:\7rfxfff.exe
        774⤵
        
        PID:4756
        
        \??\c:\tbtttb.exe
        
        c:\tbtttb.exe
        775⤵
        
        PID:960
        
        \??\c:\lxlfrfr.exe
        
        c:\lxlfrfr.exe
        776⤵
        
        PID:1548
        
        \??\c:\1rxrrrl.exe
        
        c:\1rxrrrl.exe
        777⤵
        
        PID:4880
        
        \??\c:\tttnhn.exe
        
        c:\tttnhn.exe
        778⤵
        
        PID:5048
        
        \??\c:\xxxrlll.exe
        
        c:\xxxrlll.exe
        779⤵
        
        PID:4132
        
        \??\c:\ffllfxx.exe
        
        c:\ffllfxx.exe
        780⤵
        
        PID:4360
        
        \??\c:\frfxlfl.exe
        
        c:\frfxlfl.exe
        781⤵
        
        PID:3292
        
        \??\c:\1lffxxr.exe
        
        c:\1lffxxr.exe
        782⤵
        
        PID:5192
        
        \??\c:\fxlrxxr.exe
        
        c:\fxlrxxr.exe
        783⤵
        
        PID:3208
        
        \??\c:\fxffxff.exe
        
        c:\fxffxff.exe
        784⤵
        
        PID:1248
        
        \??\c:\lflffxf.exe
        
        c:\lflffxf.exe
        785⤵
        
        PID:5728
        
        \??\c:\pvjjp.exe
        
        c:\pvjjp.exe
        786⤵
        
        PID:2496
        
        \??\c:\vpppv.exe
        
        c:\vpppv.exe
        787⤵
        
        PID:4856
        
        \??\c:\vpddd.exe
        
        c:\vpddd.exe
        788⤵
        
        PID:1156
        
        \??\c:\jjjdd.exe
        
        c:\jjjdd.exe
        789⤵
        
        PID:5884
        
        \??\c:\jdvpd.exe
        
        c:\jdvpd.exe
        790⤵
        
        PID:4288
        
        \??\c:\vddvv.exe
        
        c:\vddvv.exe
        791⤵
        
        PID:1288
        
        \??\c:\jjvvv.exe
        
        c:\jjvvv.exe
        792⤵
        System Location Discovery: System Language Discovery
        
        PID:1772
        
        \??\c:\vpjjd.exe
        
        c:\vpjjd.exe
        793⤵
        
        PID:3872
        
        \??\c:\bbhbtn.exe
        
        c:\bbhbtn.exe
        794⤵
        
        PID:4784
        
        \??\c:\btbbbh.exe
        
        c:\btbbbh.exe
        795⤵
        
        PID:5440
        
        \??\c:\bttbtb.exe
        
        c:\bttbtb.exe
        796⤵
        
        PID:6160
        
        \??\c:\bhnhhh.exe
        
        c:\bhnhhh.exe
        797⤵
        
        PID:6188
        
        \??\c:\bbtnnh.exe
        
        c:\bbtnnh.exe
        798⤵
        
        PID:6216
        
        \??\c:\rrrlffl.exe
        
        c:\rrrlffl.exe
        799⤵
        
        PID:6244
        
        \??\c:\bhttnh.exe
        
        c:\bhttnh.exe
        800⤵
        
        PID:6272
        
        \??\c:\ntbbbh.exe
        
        c:\ntbbbh.exe
        801⤵
        
        PID:6300
        
        \??\c:\fxxxrrx.exe
        
        c:\fxxxrrx.exe
        802⤵
        
        PID:6328
        
        \??\c:\hbnnbh.exe
        
        c:\hbnnbh.exe
        803⤵
        
        PID:6356
        
        \??\c:\lfflflf.exe
        
        c:\lfflflf.exe
        804⤵
        
        PID:6384
        
        \??\c:\fllffxx.exe
        
        c:\fllffxx.exe
        805⤵
        
        PID:6412
        
        \??\c:\3lrlffx.exe
        
        c:\3lrlffx.exe
        806⤵
        
        PID:6440
        
        \??\c:\llfxxrr.exe
        
        c:\llfxxrr.exe
        807⤵
        
        PID:6468
        
        \??\c:\9flxlfx.exe
        
        c:\9flxlfx.exe
        808⤵
        
        PID:6496
        
        \??\c:\rrxrlrr.exe
        
        c:\rrxrlrr.exe
        809⤵
        
        PID:6524
        
        \??\c:\rrffllx.exe
        
        c:\rrffllx.exe
        810⤵
        
        PID:6552
        
        \??\c:\flxxrff.exe
        
        c:\flxxrff.exe
        811⤵
        
        PID:6580
        
        \??\c:\xfllrff.exe
        
        c:\xfllrff.exe
        812⤵
        System Location Discovery: System Language Discovery
        
        PID:6608
        
        \??\c:\fxxfrlx.exe
        
        c:\fxxfrlx.exe
        813⤵
        
        PID:6636
        
        \??\c:\rxlxrfr.exe
        
        c:\rxlxrfr.exe
        814⤵
        
        PID:6664
        
        \??\c:\fllffxr.exe
        
        c:\fllffxr.exe
        815⤵
        
        PID:6692
        
        \??\c:\xrrllrr.exe
        
        c:\xrrllrr.exe
        816⤵
        
        PID:6720
        
        \??\c:\pjjpd.exe
        
        c:\pjjpd.exe
        817⤵
        
        PID:6748
        
        \??\c:\pjpjj.exe
        
        c:\pjpjj.exe
        818⤵
        
        PID:6776
        
        \??\c:\rrflxlf.exe
        
        c:\rrflxlf.exe
        819⤵
        
        PID:6804
        
        \??\c:\lxrfxll.exe
        
        c:\lxrfxll.exe
        820⤵
        
        PID:6832
        
        \??\c:\flfffrr.exe
        
        c:\flfffrr.exe
        821⤵
        
        PID:6860
        
        \??\c:\ffrrllx.exe
        
        c:\ffrrllx.exe
        822⤵
        
        PID:6888
        
        \??\c:\pppjj.exe
        
        c:\pppjj.exe
        823⤵
        
        PID:6916
        
        \??\c:\vvdvd.exe
        
        c:\vvdvd.exe
        824⤵
        
        PID:6944
        
        \??\c:\vpdvj.exe
        
        c:\vpdvj.exe
        825⤵
        
        PID:6972
        
        \??\c:\djvvv.exe
        
        c:\djvvv.exe
        826⤵
        
        PID:7000
        
        \??\c:\ddjvp.exe
        
        c:\ddjvp.exe
        827⤵
        
        PID:7028
        
        \??\c:\7djdd.exe
        
        c:\7djdd.exe
        828⤵
        
        PID:7056
        
        \??\c:\7jpjd.exe
        
        c:\7jpjd.exe
        829⤵
        
        PID:7084
        
        \??\c:\vpvvv.exe
        
        c:\vpvvv.exe
        830⤵
        
        PID:7112
        
        \??\c:\hbbbtt.exe
        
        c:\hbbbtt.exe
        831⤵
        
        PID:7140
        
        \??\c:\btbttn.exe
        
        c:\btbttn.exe
        832⤵
        
        PID:4988
        
        \??\c:\hbhhbb.exe
        
        c:\hbhhbb.exe
        833⤵
        
        PID:332
        
        \??\c:\thttbb.exe
        
        c:\thttbb.exe
        834⤵
        
        PID:6196
        
        \??\c:\bnbttt.exe
        
        c:\bnbttt.exe
        835⤵
        
        PID:6232
        
        \??\c:\rxlffxr.exe
        
        c:\rxlffxr.exe
        836⤵
        
        PID:6268
        
        \??\c:\rfllrll.exe
        
        c:\rfllrll.exe
        837⤵
        
        PID:6276
        
        \??\c:\rlrxlrx.exe
        
        c:\rlrxlrx.exe
        838⤵
        
        PID:6320
        
        \??\c:\lrffxrl.exe
        
        c:\lrffxrl.exe
        839⤵
        
        PID:6348
        
        \??\c:\frffffx.exe
        
        c:\frffffx.exe
        840⤵
        
        PID:6368
        
        \??\c:\llxxfxf.exe
        
        c:\llxxfxf.exe
        841⤵
        
        PID:6428
        
        \??\c:\9jdvp.exe
        
        c:\9jdvp.exe
        842⤵
        
        PID:6464
        
        \??\c:\5rfflxx.exe
        
        c:\5rfflxx.exe
        843⤵
        
        PID:6472
        
        \??\c:\xllfxxr.exe
        
        c:\xllfxxr.exe
        844⤵
        
        PID:6516
        
        \??\c:\fflfffl.exe
        
        c:\fflfffl.exe
        845⤵
        
        PID:6544
        
        \??\c:\dvppd.exe
        
        c:\dvppd.exe
        846⤵
        
        PID:6568
        
        \??\c:\nthbbb.exe
        
        c:\nthbbb.exe
        847⤵
        
        PID:6624
        
        \??\c:\hbnhnn.exe
        
        c:\hbnhnn.exe
        848⤵
        
        PID:6660
        
        \??\c:\bhtttt.exe
        
        c:\bhtttt.exe
        849⤵
        
        PID:6668
        
        \??\c:\nhhbbt.exe
        
        c:\nhhbbt.exe
        850⤵
        
        PID:6712
        
        \??\c:\5rlfxxr.exe
        
        c:\5rlfxxr.exe
        851⤵
        
        PID:6764
        
        \??\c:\7rxrfrf.exe
        
        c:\7rxrfrf.exe
        852⤵
        
        PID:6760
        
        \??\c:\lfrxlfr.exe
        
        c:\lfrxlfr.exe
        853⤵
        
        PID:6820
        
        \??\c:\9fxfxrl.exe
        
        c:\9fxfxrl.exe
        854⤵
        
        PID:6856
        
        \??\c:\frrrllf.exe
        
        c:\frrrllf.exe
        855⤵
        
        PID:6864
        
        \??\c:\lxffflf.exe
        
        c:\lxffflf.exe
        856⤵
        
        PID:6908
        
        \??\c:\btnbbh.exe
        
        c:\btnbbh.exe
        857⤵
        
        PID:6936
        
        \??\c:\flxrllx.exe
        
        c:\flxrllx.exe
        858⤵
        
        PID:6980
        
        \??\c:\frxxrxr.exe
        
        c:\frxxrxr.exe
        859⤵
        
        PID:7016
        
        \??\c:\fxfxrrl.exe
        
        c:\fxfxrrl.exe
        860⤵
        
        PID:7052
        
        \??\c:\xxfxlrx.exe
        
        c:\xxfxlrx.exe
        861⤵
        
        PID:7060
        
        \??\c:\lfxxxrl.exe
        
        c:\lfxxxrl.exe
        862⤵
        
        PID:7124
        
        \??\c:\lfxlfxr.exe
        
        c:\lfxlfxr.exe
        863⤵
        
        PID:7132
        
        \??\c:\flrrrrr.exe
        
        c:\flrrrrr.exe
        864⤵
        
        PID:1096
        
        \??\c:\dpvdv.exe
        
        c:\dpvdv.exe
        865⤵
        
        PID:6176
        
        \??\c:\vpdvp.exe
        
        c:\vpdvp.exe
        866⤵
        
        PID:6200
        
        \??\c:\btthbb.exe
        
        c:\btthbb.exe
        867⤵
        
        PID:6240
        
        \??\c:\hhhnbt.exe
        
        c:\hhhnbt.exe
        868⤵
        
        PID:6280
        
        \??\c:\htbbnb.exe
        
        c:\htbbnb.exe
        869⤵
        
        PID:6336
        
        \??\c:\3ttbbb.exe
        
        c:\3ttbbb.exe
        870⤵
        
        PID:6372
        
        \??\c:\1hbttt.exe
        
        c:\1hbttt.exe
        871⤵
        
        PID:6420
        
        \??\c:\thtttb.exe
        
        c:\thtttb.exe
        872⤵
        
        PID:6436
        
        \??\c:\xlrxfff.exe
        
        c:\xlrxfff.exe
        873⤵
        
        PID:6484
        
        \??\c:\lxxlxxl.exe
        
        c:\lxxlxxl.exe
        874⤵
        
        PID:6504
        
        \??\c:\flxfrrx.exe
        
        c:\flxfrrx.exe
        875⤵
        
        PID:6540
        
        \??\c:\1rxrflf.exe
        
        c:\1rxrflf.exe
        876⤵
        
        PID:6604
        
        \??\c:\pdjjj.exe
        
        c:\pdjjj.exe
        877⤵
        
        PID:6648
        
        \??\c:\pjpjv.exe
        
        c:\pjpjv.exe
        878⤵
        
        PID:6640

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

1llllrr.exe

Path C:\1llllrr.exe
Size 4.0MB
SHA256 74756466df3819f1bc329f24806a5952f3531a4daed24c892bae6332abf1dde0
MD5 6272fde1f36fc52e833ff2410b97eaa6
SHA1 4cfae9f84129d8015a45daf940a61dd82b541429
SHA512 ac0d447c7b28e3cd239943bd8dcbc8b75bc5e9e49a3b19ab01dd04058f5979b8a8e704b0c416bc069ec9df735e929a9bd165e5954105fe6a7222ec937cd23590
SSDEEP 6144:Wcm4FmowdHoS+JsJlJeJPJoJEJhJ9JQJpJgJXJJJXJ2JXJWJXJZJXJ2JXJUJFJXg:44wFHoSzZ2gH
TLSH
T1A81685E516D81CD6E59B1B3C25B22B1BCD80BB740476663118C8E8CF5E8EED7066C7B2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5ttnnt.exe

Path C:\5ttnnt.exe
Size 4.0MB
SHA256 e6fac1a645d9aeb63cfc4784031911bd779dcbbf6ac1b180e8a4b18706d5f656
MD5 82ba00e82816978fa82242bb62317e52
SHA1 b712cabfbc080639342999242161872b5231f744
SHA512 14d7a81dbedff0a7f9b521d47510187184e36b17924e3c08d6d2c78d471ecf3fda1ff7e2dab0927f57e03827e073332e695dd6f8dbf4ed585583f692efdfcd96
SSDEEP 6144:Wcm4FmowdHoS+JsJlJeJPJoJEJhJ9JQJpJgJXJJJXJ2JXJWJXJZJXJ2JXJUJFJX6:44wFHoSzZ2gN
TLSH
T16E1685E516D81CD6E59B1B3C25B22B1BCD80BB740476663118C8E8CF5E8EED7066C7B2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5xxxrlf.exe

Path C:\5xxxrlf.exe
Size 4.0MB
SHA256 11a7af55a0cf53025de02abaa9dc430974c6b06e5e68e3150d17398e285748c3
MD5 119c22af1f572bde2ee72babfbf68a8d
SHA1 48fc78ad9204d25ad322b92b7795698f9a234c13
SHA512 70c6a00dba230ef7a4e5668c3986067ae0f7c0ddee7838bbfe2cbf97170a595d1a3c8ad828c606a2cc077cf162fbf3f269781d5dd234b2cf29476e5eaa6932a6
SSDEEP 6144:Wcm4FmowdHoS+JsJlJeJPJoJEJhJ9JQJpJgJXJJJXJ2JXJWJXJZJXJ2JXJUJFJXM:44wFHoSzZ2gv
TLSH
T1E61685E516D81CD6E59B1B3C25B22B1BCD80BB740476663118C8E8CF5E8EED7066C7B2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

djvvv.exe

Path C:\djvvv.exe
Size 4.0MB
SHA256 d3d826e5454d2bede19c555ed1303411a2b7654497f8bab71142e54a39c4eca7
MD5 35a0ad8ed62e817754c623d8d447287b
SHA1 ebfdaba49075afca34d13b4fca80dda752cc5816
SHA512 fa8cf177c2ef3c5c5ad24468961a5dffcdc57bf9c3ab1cca543b8df3f6fde045355ef90f1afc0dc6f549ecd257ef11b0b5985b235512dbf60ad1194e47b7d6c8
SSDEEP 6144:Wcm4FmowdHoS+JsJlJeJPJoJEJhJ9JQJpJgJXJJJXJ2JXJWJXJZJXJ2JXJUJFJXe:44wFHoSzZ2gd
TLSH
T1FB1685E516D81CD6E59B1B3C25B22B1BCD80BB740476663118C8E8CF5E8EED7066C7B2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dpddv.exe

Path C:\dpddv.exe
Size 4.0MB
SHA256 8501d29a08e47d8fba0dfb0584dbad7edb8ea7e96d8a82b9a9f9b6f4e4ae2800
MD5 2999ed19274565839cd709e3e122a528
SHA1 87817fea5fef2c22694c1ad65e30bfb03203d76d
SHA512 5643188c8b39fb61cc780588eab45171fcc95419924a8d7fd0432ccae405f5a1e607d7436d1525196833d78d35641c2909f822b0decdc84d195fdfab5dba04b7
SSDEEP 6144:Wcm4FmowdHoS+JsJlJeJPJoJEJhJ9JQJpJgJXJJJXJ2JXJWJXJZJXJ2JXJUJFJXS:44wFHoSzZ2gb
TLSH
T1141685E516D81CD6E59B1B3C25B22B1BCD80BB740476663118C8E8CF5E8EED7066C7B2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ffrfrxx.exe

Path C:\ffrfrxx.exe
Size 4.0MB
SHA256 9a97f8114b073240436d3609a1c315237b79eb551359635123a80267fcfaca81
MD5 b3862a1d8181d697361133de87beb9e1
SHA1 60e0f9a7744dcf998b2db5db4d8eda64183ee077
SHA512 4deb5bab90da52262535ce294b8c8b5b53a9b1628fb0613a513e68f2f49aaf70dee10f86fcb6e70fb491ffac1ebcce7637868c66f5e353bce5f037e8c4188fc9
SSDEEP 6144:Wcm4FmowdHoS+JsJlJeJPJoJEJhJ9JQJpJgJXJJJXJ2JXJWJXJZJXJ2JXJUJFJXQ:44wFHoSzZ2gT
TLSH
T1F41685E516D81CD6E59B1B3C25B22B1BCD80BB740476663118C8E8CF5E8EED7066C7B2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ffrrlrr.exe

Path C:\ffrrlrr.exe
Size 4.0MB
SHA256 455cc6983309c9d82a89dd7e2bebe326f2e4d6bc0c9c52efc9d455b267c9e43b
MD5 8aeaec1d6ca3e52b1d75429c3f87b356
SHA1 9aa25e384e8e2d8b5d2ed40458d4ba44b88bca8e
SHA512 5e331c5fc77547bc1deddb4a0ac57b7976efb971a64fc59b472551a41ee4073a65808c56169b9a4ffc86eab590b87ec466151929a860b956760318ed7916f641
SSDEEP 6144:Wcm4FmowdHoS+JsJlJeJPJoJEJhJ9JQJpJgJXJJJXJ2JXJWJXJZJXJ2JXJUJFJXK:44wFHoSzZ2gP
TLSH
T1C11685E516D81CD6E59B1B3C25B22B1BCD80BB740476663118C8E8CF5E8EED7066C7B2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

flfxrlf.exe

Path C:\flfxrlf.exe
Size 4.0MB
SHA256 ddbf08b403e87b625140d314594f654306b7e55cf93e262b5b861f8f74338c88
MD5 0f4925e71c8418d0839ab66704dc954f
SHA1 5a891f3625a1b096a08e242154630531ba54bce6
SHA512 564c2d161e98c550c07cf2c45fb668d82dc058eaf3ca3a73f7e364b4945002666ec5b2e33a808d8bd3dcddaa06e22fe943e1a8f1e57c0a24e098cd6887210aad
SSDEEP 6144:Wcm4FmowdHoS+JsJlJeJPJoJEJhJ9JQJpJgJXJJJXJ2JXJWJXJZJXJ2JXJUJFJXU:44wFHoSzZ2gV
TLSH
T1C11685E516D81CD6E59B1B3C25B22B1BCD80BB740476663118C8E8CF5E8EED7066C7B2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

frfflrr.exe

Path C:\frfflrr.exe
Size 4.0MB
SHA256 9808dfbe94ab25fb92caf5aebe6c5971a6e0bffaab80e5d50838f5ecac9b993f
MD5 e91e9a1cb5878443aedb129145a2cb7b
SHA1 b49c23ce0af1d915b323b279ba23e86cb16256c0
SHA512 1b384b2999f60e6ecccb63b9c13ede6c75ffb707307f53275f4c75eca2c68eb2a09ea4ae4208759341f374baac77d5d4940723d07bf600f6b9aae92987e07c41
SSDEEP 6144:Wcm4FmowdHoS+JsJlJeJPJoJEJhJ9JQJpJgJXJJJXJ2JXJWJXJZJXJ2JXJUJFJXA:44wFHoSzZ2gd
TLSH
T1E51685E516D81CD6E59B1B3C25B22B1BCD80BB740476663118C8E8CF5E8EED7066C7B2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

frxxxrl.exe

Path C:\frxxxrl.exe
Size 4.0MB
SHA256 a0b615a44d21b23824bae34ec9eccea8abe47217079a2ecadc54c37dcfccfd40
MD5 7f7103b056e764c84e8fc0193a8bb877
SHA1 ec7a33d9d0495f08ab35005b71f133629b594875
SHA512 19c44ea66756ecf2ca87b70006f7d232ff52f3fec45ce1ef08c248a1cfd323eb8f32290488b09ed61ad6933e24c59f65a7e5bedbfdb8c05bb511ec9685794752
SSDEEP 6144:Wcm4FmowdHoS+JsJlJeJPJoJEJhJ9JQJpJgJXJJJXJ2JXJWJXJZJXJ2JXJUJFJXS:44wFHoSzZ2gJ
TLSH
T13F1685E516D81CD6E59B1B3C25B22B1BCD80BB740476663118C8E8CF5E8EED7066C7B2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hbntnn.exe

Path C:\hbntnn.exe
Size 4.0MB
SHA256 765d77ded21a3f9f85a778eab527b2771582e13cd695ec17e543b3e48ff8b197
MD5 090bea80eaafa67dff3871bba4d0288d
SHA1 935569c0d591c165b1a8c74d5f6f043199803e37
SHA512 2c4ebd13cac0d7ff90b838a36933f4ffa3af7a494e6fcae4ad0a89d5e618cc4b3e568b2716231660af8affdbb6cf96c00fc5bc41996e69eee14e8da337086384
SSDEEP 6144:Wcm4FmowdHoS+JsJlJeJPJoJEJhJ9JQJpJgJXJJJXJ2JXJWJXJZJXJ2JXJUJFJXs:44wFHoSzZ2gF
TLSH
T1A61685E516D81CD6E59B1B3C25B22B1BCD80BB740476663118C8E8CF5E8EED7066C7B2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hhhtnb.exe

Path C:\hhhtnb.exe
Size 4.0MB
SHA256 f6b1752827c80167ad6a02cc9137a704e1f7d0899211a4175282e9d591d00cb7
MD5 6debcaf6b96e1c16b82ee46a1c77bcf0
SHA1 6d0ea3817fb879bba3e7207534230b5a338a1351
SHA512 f994bb35f31f470e8b05a23252f50e340a4369ffd51a4b803643b79b5005dd3b8353863195c3d570621ffd33ece60d237166b3674158571d4aa79c0484dd90c4
SSDEEP 6144:Wcm4FmowdHoS+JsJlJeJPJoJEJhJ9JQJpJgJXJJJXJ2JXJWJXJZJXJ2JXJUJFJXo:44wFHoSzZ2gd
TLSH
T1321685E516D81CD6E59B1B3C25B22B1BCD80BB740476663118C8E8CF5E8EED7066C7B2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

htbbhn.exe

Path C:\htbbhn.exe
Size 4.0MB
SHA256 2df1bddf5f7e1f79efa5c4e03bc4824b231faf6ca58718a1581956b2c9cff385
MD5 2da2a1c8cc08f2623b18ff632c9faec6
SHA1 e9b317027c1a57b9708046fa2259437bfb299a77
SHA512 1ac6a2ee3d196b4a34f58266dd8ae85119c2d0fe99ee4de0b2641c4bf74bbae7f77df0da7569a3e83be66664898d69f36e3cdf8da62193f1b7a8e03bd11715fe
SSDEEP 6144:Wcm4FmowdHoS+JsJlJeJPJoJEJhJ9JQJpJgJXJJJXJ2JXJWJXJZJXJ2JXJUJFJX8:44wFHoSzZ2gd
TLSH
T1BF1685E516D81CD6E59B1B3C25B22B1BCD80BB740476663118C8E8CF5E8EED7066C7B2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jdvpd.exe

Path C:\jdvpd.exe
Size 4.0MB
SHA256 3a2f0a8cc996868a97051d3f15f151cd4b76c0753a7922b0c3825fe5b5493eeb
MD5 85f69ecc1378f0c12b1afb1f70f39bcd
SHA1 aa47ab722e23a39f32fcf4b5aa89a1c3c391edc6
SHA512 6312891d4444a934d886234a90605ababafa78660475b2060eeb4c4799855f15607894298c4fa8cf0bcd1e5875eef2716be5ff704d79a77a5cec51d9069635cc
SSDEEP 6144:Wcm4FmowdHoS+JsJlJeJPJoJEJhJ9JQJpJgJXJJJXJ2JXJWJXJZJXJ2JXJUJFJXU:44wFHoSzZ2gr
TLSH
T15E1685E516D81CD6E59B1B3C25B22B1BCD80BB740476663118C8E8CF5E8EED7066C7B2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jpjpv.exe

Path C:\jpjpv.exe
Size 4.0MB
SHA256 388c1178100d88b32fa2f8a91d782dbdbd7fcbe3b84d7f4435e4acb75172b21e
MD5 d16ef996c1ad8bd00b7cc73a5cdb10c3
SHA1 de41ee31c069fdb0b303a1928ba24bc61b4c1a7e
SHA512 c3a73d874c54e513e67b74b8125bced845aec895649e294a4a198984f4d01af892c9464248d1fce9e7b2ef60c33f19a5b49cf4b29f3d6da5f580ada0f62457e6
SSDEEP 6144:Wcm4FmowdHoS+JsJlJeJPJoJEJhJ9JQJpJgJXJJJXJ2JXJWJXJZJXJ2JXJUJFJXy:44wFHoSzZ2gr
TLSH
T1801685E516D81CD6E59B1B3C25B22B1BCD80BB740476663118C8E8CF5E8EED7066C7B2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ntbbth.exe

Path C:\ntbbth.exe
Size 4.0MB
SHA256 c33b3fae39c1697229bdbd0120ee00ce5d292b76fde98662794b0dc6bb8f31c0
MD5 6a71904f087a7c24645c5e81f61afd2d
SHA1 24741e28b0090c1d2425818c2863e9ac29ae436a
SHA512 391128f749f62ecf68df9d669fd3c96141eb2f5b7acce91f0365b8d7134064aafe2fc21b813bcc44ba5700163ebbc102b1fd577edaba8453ecf0c56fac51dd02
SSDEEP 6144:Wcm4FmowdHoS+JsJlJeJPJoJEJhJ9JQJpJgJXJJJXJ2JXJWJXJZJXJ2JXJUJFJXG:44wFHoSzZ2gx
TLSH
T14C1685E516D81CD6E59B1B3C25B22B1BCD80BB740476663118C8E8CF5E8EED7066C7B2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pvjpv.exe

Path C:\pvjpv.exe
Size 4.0MB
SHA256 11d9f4aba48c774695a85612861ec637af6f8ec698bae59880b43f321da7913a
MD5 a873d449be0358d2942fd7c7ce6f7107
SHA1 1812c71275767d3af618d2efce85a787574f5d66
SHA512 a0e0ef62a73a1caea23e52d6764b26fe2386d0cd299eec76dada938c47c0d6def6f0bbce0c79de00dbd08963b87dd7b50e6a4ed3bda650c85b23e58de6a311f0
SSDEEP 6144:Wcm4FmowdHoS+JsJlJeJPJoJEJhJ9JQJpJgJXJJJXJ2JXJWJXJZJXJ2JXJUJFJXk:44wFHoSzZ2gt
TLSH
T1F31685E516D81CD6E59B1B3C25B22B1BCD80BB740476663118C8E8CF5E8EED7066C7B2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

rxfxrfl.exe

Path C:\rxfxrfl.exe
Size 4.0MB
SHA256 d6e02b1d29fcbfb07e7b73a9f4f54932ab3cff061250fddcaf6c0cfec80a46de
MD5 04f8ab08605cb4f240fbfb162aaef204
SHA1 1c6eaabf63c692a45c042ad2e28ad819a1fb5a66
SHA512 43ed08d09858910f83de6242760f95f0026c4d6c0139b769eb965c370513792d3cca0d37c2601e1f5efd76b23c058afc6a6aefa947a54bc1fdcc7bda505b4359
SSDEEP 6144:Wcm4FmowdHoS+JsJlJeJPJoJEJhJ9JQJpJgJXJJJXJ2JXJWJXJZJXJ2JXJUJFJXs:44wFHoSzZ2gB
TLSH
T1DD1685E516D81CD6E59B1B3C25B22B1BCD80BB740476663118C8E8CF5E8EED7066C7B2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

rxlllfl.exe

Path C:\rxlllfl.exe
Size 4.0MB
SHA256 cd656404c97f3cdbb86345e3b19d12fa1e33b862e10a5d8142b2f2be00ec2f18
MD5 49068a37bdb0a9bb48094687911bc639
SHA1 1f21641575de7b1fd117533a2659a0de9ad41c5b
SHA512 745ce125e17b567964bf356fadc63afabb60abacd45ee00fbf51a373d54c7bd8f2daaf92426fc25fdc405b54ef67b9d29da3fe68f0a39739394a5374a4cfe059
SSDEEP 6144:Wcm4FmowdHoS+JsJlJeJPJoJEJhJ9JQJpJgJXJJJXJ2JXJWJXJZJXJ2JXJUJFJX8:44wFHoSzZ2g5
TLSH
T18C1685E516D81CD6E59B1B3C25B22B1BCD80BB740476663118C8E8CF5E8EED7066C7B2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tbhhtt.exe

Path C:\tbhhtt.exe
Size 4.0MB
SHA256 2e5d8c0c8c541ef3489c67bd04a486a6017b491f25da5b658f3adb4f7a67aece
MD5 37d64ba574cdebd25ac21a6f1b269b73
SHA1 99ff5c21baa3b4bbe48bd44c714866d5ac0e8321
SHA512 cda1579050754069bd55aa80052d9a806425e12c1979f88ea65bd5c4d2d1cc0eb73f5d57771a5c6551f90e72364452c81f562ed938c397260d8efac098f482d7
SSDEEP 6144:Wcm4FmowdHoS+JsJlJeJPJoJEJhJ9JQJpJgJXJJJXJ2JXJWJXJZJXJ2JXJUJFJXA:44wFHoSzZ2gz
TLSH
T1551685E516D81CD6E59B1B3C25B22B1BCD80BB740476663118C8E8CF5E8EED7066C7B2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

thnntb.exe

Path C:\thnntb.exe
Size 4.0MB
SHA256 f493adabba55197d26ee268c3e373d62bcd2415788f43bda8cb1a48cca076cc0
MD5 aed6bec574278fd28b55da025e1f7096
SHA1 cd3c196beb3d49fd3408adbd38e067c9eaaa52a7
SHA512 827116daa7b0defc74dd26db01ef817f705f37fbdff11c46c1a5d75a1445c0b09f636ae2f42136dae3506ddb4b54553f5231b62ff44a4051465195f322d4333d
SSDEEP 6144:Wcm4FmowdHoS+JsJlJeJPJoJEJhJ9JQJpJgJXJJJXJ2JXJWJXJZJXJ2JXJUJFJXw:44wFHoSzZ2gv
TLSH
T1B71685E516D81CD6E59B1B3C25B22B1BCD80BB740476663118C8E8CF5E8EED7066C7B2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tntttn.exe

Path C:\tntttn.exe
Size 4.0MB
SHA256 ca6125724fbff127f3679afa4f5f26e781ae2b8a25a2f4d485b55826d85062ba
MD5 adcf022598e539934c09cc7b68cfee47
SHA1 d7d0c44934b65043aa2abbc502210d425b719843
SHA512 a8193bdcb6d68f7fba2c82e4c24760e51bee87c1971fbfc6bba12cfdf13d5ffdc3d80c4b93e864a32545243d83b64698a4ce55225a892e8a45988d3e01c90eb5
SSDEEP 6144:Wcm4FmowdHoS+JsJlJeJPJoJEJhJ9JQJpJgJXJJJXJ2JXJWJXJZJXJ2JXJUJFJX8:44wFHoSzZ2gr
TLSH
T13A1685E516D81CD6E59B1B3C25B22B1BCD80BB740476663118C8E8CF5E8EED7066C7B2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vjpvp.exe

Path C:\vjpvp.exe
Size 4.0MB
SHA256 002869e114f3ec63f6d48f2897ff84ad0843d549fed32c76dc3217bb05d07b4c
MD5 741ccca6fb252a0cf834a1542ec8cba9
SHA1 e721b9460d477d27962fa49315f5eafba5e0edee
SHA512 917b6334547948de5ee17b5632fb690910010e8be7733c964a04b1593f3a55cd44783db06bc3e4309c68bb4876ceaea5e123190e28227f8ecdd5fa9b9bed0e4b
SSDEEP 6144:Wcm4FmowdHoS+JsJlJeJPJoJEJhJ9JQJpJgJXJJJXJ2JXJWJXJZJXJ2JXJUJFJXo:44wFHoSzZ2gp
TLSH
T1D11685E516D81CD6E59B1B3C25B22B1BCD80BB740476663118C8E8CF5E8EED7066C7B2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5nhnhn.exe

Path \??\c:\5nhnhn.exe
Size 4.0MB
SHA256 56e35eda9994e90b42486b86c3ab5892ae1d2b6214a09091cb5dd584a59608ef
MD5 5245a6709930b038c35e3c6b739f6a06
SHA1 d18927d286d7148064dfc80b6ae3e893dca3b272
SHA512 9e7a54563cdf5741dc19a3a6622e6fc21c84233ecf1da6002deef8e04963659d7686fa0b13b5f785e10ad351b2a453fb324a3f03f69e87bbcdf7102c4843d3bd
SSDEEP 6144:Wcm4FmowdHoS+JsJlJeJPJoJEJhJ9JQJpJgJXJJJXJ2JXJWJXJZJXJ2JXJUJFJXK:44wFHoSzZ2gR
TLSH
T1781685E516D81CD6E59B1B3C25B22B1BCD80BB740476663118C8E8CF5E8EED7066C7B2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bbbtnh.exe

Path \??\c:\bbbtnh.exe
Size 4.0MB
SHA256 cd349c87a4a3e218d4f170ff1488a6c2624c52d70171c48e067630e2ab0cf7a4
MD5 defdb46c3c68d6b603ff1ef680555171
SHA1 16acddedd8480d3c7c4e82e9f789fae2db5d129e
SHA512 5737b8373dc0310a3b3ed00791db06866b4d828c00f5d18b59a37b59895299577dc0c538be3e079103479794809095b47e324f49d0046a3ef25420ee5924d67f
SSDEEP 6144:Wcm4FmowdHoS+JsJlJeJPJoJEJhJ9JQJpJgJXJJJXJ2JXJWJXJZJXJ2JXJUJFJX2:44wFHoSzZ2g3
TLSH
T1791685E516D81CD6E59B1B3C25B22B1BCD80BB740476663118C8E8CF5E8EED7066C7B2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bthbtb.exe

Path \??\c:\bthbtb.exe
Size 4.0MB
SHA256 c54fd6408ec5c3132c40361022580287b979f007e0592ee16f232553a8e5a6eb
MD5 07d24501f6247d6ab9a5d6be40483e30
SHA1 3543e11ec99e1f72c78225aac7ac7ac37bfe7419
SHA512 3c855841cdbb10da6ff6c547c67fc0e0f9908dc41fcb0cf6846116eb7993e2dc514f22d155dcf939b794af99b6a6e0f7e382ec325b637e96233feb0c60b2fc3e
SSDEEP 6144:Wcm4FmowdHoS+JsJlJeJPJoJEJhJ9JQJpJgJXJJJXJ2JXJWJXJZJXJ2JXJUJFJXg:44wFHoSzZ2g9
TLSH
T1E31685E516D81CD6E59B1B3C25B22B1BCD80BB740476663118C8E8CF5E8EED7066C7B2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hbntbb.exe

Path \??\c:\hbntbb.exe
Size 4.0MB
SHA256 dea34bba05d3342f35e52feab906d4105d610fe2ae76f16e3f7da0cf93dfc2eb
MD5 6d5bc50a0547cac71c1097267f99fc3c
SHA1 ccd21357147fff482fdb2c16ec3cb12ff37f3da3
SHA512 45d3cdd1c96e4b5c0ed1091ab0b597bef09a76d6f6701b7d335896c070319b78040200cfc823101582f22f0dfe4b31f405210c97e481b554065ff99b60f2f10d
SSDEEP 6144:Wcm4FmowdHoS+JsJlJeJPJoJEJhJ9JQJpJgJXJJJXJ2JXJWJXJZJXJ2JXJUJFJXy:44wFHoSzZ2gb
TLSH
T1DF1685E516D81CD6E59B1B3C25B22B1BCD80BB740476663118C8E8CF5E8EED7066C7B2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jdpjj.exe

Path \??\c:\jdpjj.exe
Size 4.0MB
SHA256 e937abaf98eb59bccec2a0329a3aac5cc784aa430d4c4850eb2f58dd29e334bc
MD5 768dd6978bb3b9544ce128f020c28f1a
SHA1 bc03da86c83197d147c14c273d953312f67a286e
SHA512 1c35290ca5f663f90fbe8139fae8f822e76a6ffd1ca04039d3e678aad401ed64e48b0ed5b803e31a5cab0b44e0bc9e72166928af6101e30136915ab76d304754
SSDEEP 6144:Wcm4FmowdHoS+JsJlJeJPJoJEJhJ9JQJpJgJXJJJXJ2JXJWJXJZJXJ2JXJUJFJXQ:44wFHoSzZ2gd
TLSH
T11A1685E516D81CD6E59B1B3C25B22B1BCD80BB740476663118C8E8CF5E8EED7066C7B2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lrfxxff.exe

Path \??\c:\lrfxxff.exe
Size 4.0MB
SHA256 14bbd03f484de7af016bd8e3dbf05aaae87889bfe1ff884427c4f8d5ad78a1df
MD5 57a2ccab4ec6903f35765217d1cd7831
SHA1 41f0d872a9ab6742bdb8b0ae31be40e313c6ab5a
SHA512 6daec2b6f20c4fa8a8428fc4e22569edc1931e6aeb120e45398a8cb735b01392f3517fb9f8bbbf40cf308c8bf5338c4cddc27e7e3db50be2b99da1602c2a6075
SSDEEP 6144:Wcm4FmowdHoS+JsJlJeJPJoJEJhJ9JQJpJgJXJJJXJ2JXJWJXJZJXJ2JXJUJFJXS:44wFHoSzZ2gF
TLSH
T10F1685E516D81CD6E59B1B3C25B22B1BCD80BB740476663118C8E8CF5E8EED7066C7B2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nhbtbn.exe

Path \??\c:\nhbtbn.exe
Size 4.0MB
SHA256 a59f8a200623739e20a7c12f533985ff76d318646fab0f482aa0feaa480f5443
MD5 48395073a09e3e98836b1e2f662c32d1
SHA1 cb8c16810337bd97525d1e683420e94549307b89
SHA512 36c4d5da5ef3d23bf77edbf725e3edbf90daed8955b9d4887dd44fee03d4a4f15248b32b3cfcd3d241f9f4012f8dc067ab4c28780cb041bac955b8c16682e18f
SSDEEP 6144:Wcm4FmowdHoS+JsJlJeJPJoJEJhJ9JQJpJgJXJJJXJ2JXJWJXJZJXJ2JXJUJFJXM:44wFHoSzZ2g9
TLSH
T1BB1685E516D81CD6E59B1B3C25B22B1BCD80BB740476663118C8E8CF5E8EED7066C7B2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

thnnbb.exe

Path \??\c:\thnnbb.exe
Size 4.0MB
SHA256 60ffe56bb7bbba8c004d9c09955b037ac3b5750df672f867c1f7fe2a09b6e1bb
MD5 c1400e95c4379555a36cd8d4d373ffd2
SHA1 c621c1b39afbbbc4032010fe11a43defea99f6cb
SHA512 07d65b49a207668034d2be85a559567972b63495a6361d56768935f9ec00b5d12df8c0c6b6c255bce2f5f0c002800cc76d50a013ed14842d96a58c286debe4c4
SSDEEP 6144:Wcm4FmowdHoS+JsJlJeJPJoJEJhJ9JQJpJgJXJJJXJ2JXJWJXJZJXJ2JXJUJFJXK:44wFHoSzZ2gj
TLSH
T1F21685E516D81CD6E59B1B3C25B22B1BCD80BB740476663118C8E8CF5E8EED7066C7B2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vdjjj.exe

Path \??\c:\vdjjj.exe
Size 4.0MB
SHA256 181341d70e9c421d5a2052ec4f6121438bed65ee4455e5a5a0039e39c2a36028
MD5 58fb885806e2044b2b6467913f81d513
SHA1 541c8c3bfd3f044317d90f0c50f91b631ddfd718
SHA512 c75a03cd4c231484924821551d90097a89c211e1e30002630324cf4372c4e5537d26a8e18c83ff0ea306ccf42d3902459282d92feaefeee018c361ba6366813f
SSDEEP 6144:Wcm4FmowdHoS+JsJlJeJPJoJEJhJ9JQJpJgJXJJJXJ2JXJWJXJZJXJ2JXJUJFJXc:44wFHoSzZ2gz
TLSH
T1481685E516D81CD6E59B1B3C25B22B1BCD80BB740476663118C8E8CF5E8EED7066C7B2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/464-279-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/628-264-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/716-327-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/916-1398-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/932-1623-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/944-70-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/1032-810-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/1244-175-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/1312-906-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/1452-26-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/1564-213-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/1572-972-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/1808-64-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/2000-100-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/2036-504-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/2092-1527-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/2100-414-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/2164-94-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/2180-189-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/2236-37-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/2236-46-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/2288-1410-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/2304-534-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/2356-186-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/2364-118-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/2432-435-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/2464-76-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/2508-207-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/2560-1596-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/2612-1290-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/2816-258-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/2852-1308-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/2956-792-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/2988-1521-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/3044-87-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/3052-165-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/3156-576-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/3160-321-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/3332-519-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/3336-270-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/3348-759-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/3432-300-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/3620-130-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/3620-123-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/3628-44-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/3708-216-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/3716-201-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/3744-606-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/3936-1395-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/4124-1635-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/4160-312-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/4388-1407-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/4392-336-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/4424-345-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/4440-88-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/4468-180-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/4544-564-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/4576-1023-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/4644-624-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/4652-1458-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/4688-111-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/4688-117-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/4736-58-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/4744-390-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/4792-160-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/4808-13-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/4888-0-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/4888-1-0x0000000000427000-0x0000000000428000-memory.dmp

Download

memory/4900-648-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/4904-11-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/5032-282-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/5092-1272-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/5100-131-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/5104-32-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/5104-39-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/5124-156-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/5152-18-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/5152-25-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/5224-273-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/5268-1386-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/5384-1164-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/5436-267-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/5640-303-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/5692-585-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/5736-51-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/5748-780-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/5796-378-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/5812-170-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/6008-145-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/6016-228-0x0000000000400000-0x0000000000843000-memory.dmp

Download

memory/6124-723-0x0000000000400000-0x0000000000843000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads