Analysis Overview

score

10^/10

SHA256

045983259a2f9eb469687f105c6a64717b8cac6b61246c411653f2912682cd79

Threat Level: Known bad

The file 8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe was found to be: Known bad.

Malicious Activity Summary

upx miner xmrig

XMRig Miner payload

Xmrig family

xmrig

XMRig Miner payload

UPX packed file

Executes dropped EXE

Loads dropped DLL

Drops file in Windows directory

Unsigned PE

Suspicious use of WriteProcessMemory

MITRE ATT&CK Matrix

N/A

Analysis: static1

Detonation Overview

Reported

2024-06-13 22:42

Signatures

XMRig Miner payload

miner

Description	Indicator	Process	Target
N/A	N/A	N/A	N/A

Xmrig family

xmrig

UPX packed file

upx

Description	Indicator	Process	Target
N/A	N/A	N/A	N/A

Unsigned PE

Description	Indicator	Process	Target
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-13 22:42

Reported

2024-06-13 22:45

Platform

win7-20240220-en

Max time kernel

141s

Max time network

123s

Command Line

"C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe"

Signatures

xmrig

miner xmrig

XMRig Miner payload

miner

Description	Indicator	Process	Target
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A

Executes dropped EXE

Description	Indicator	Process	Target
N/A	N/A	C:\Windows\System\tgzpGZx.exe	N/A
N/A	N/A	C:\Windows\System\IAARtuz.exe	N/A
N/A	N/A	C:\Windows\System\beoPgYt.exe	N/A
N/A	N/A	C:\Windows\System\qShEGbJ.exe	N/A
N/A	N/A	C:\Windows\System\wffMhcw.exe	N/A
N/A	N/A	C:\Windows\System\kLKjAfU.exe	N/A
N/A	N/A	C:\Windows\System\GvArhqp.exe	N/A
N/A	N/A	C:\Windows\System\SNDjChP.exe	N/A
N/A	N/A	C:\Windows\System\KSclqLF.exe	N/A
N/A	N/A	C:\Windows\System\erNeebl.exe	N/A
N/A	N/A	C:\Windows\System\NdOoNvi.exe	N/A
N/A	N/A	C:\Windows\System\vCzqoBV.exe	N/A
N/A	N/A	C:\Windows\System\nvSesqU.exe	N/A
N/A	N/A	C:\Windows\System\tAyEBZP.exe	N/A
N/A	N/A	C:\Windows\System\wOcdesQ.exe	N/A
N/A	N/A	C:\Windows\System\WQEXjlr.exe	N/A
N/A	N/A	C:\Windows\System\qNetVOu.exe	N/A
N/A	N/A	C:\Windows\System\JBorKDl.exe	N/A
N/A	N/A	C:\Windows\System\ObCBawV.exe	N/A
N/A	N/A	C:\Windows\System\rOZmyTN.exe	N/A
N/A	N/A	C:\Windows\System\pyXqkRJ.exe	N/A
N/A	N/A	C:\Windows\System\HfoiFlr.exe	N/A
N/A	N/A	C:\Windows\System\Wrnsvzi.exe	N/A
N/A	N/A	C:\Windows\System\fFDKYHg.exe	N/A
N/A	N/A	C:\Windows\System\UBmLvKU.exe	N/A
N/A	N/A	C:\Windows\System\JJqgoVX.exe	N/A
N/A	N/A	C:\Windows\System\uHKfySd.exe	N/A
N/A	N/A	C:\Windows\System\XxNmPST.exe	N/A
N/A	N/A	C:\Windows\System\RUWNxOn.exe	N/A
N/A	N/A	C:\Windows\System\BQtsBnJ.exe	N/A
N/A	N/A	C:\Windows\System\TrCiwgm.exe	N/A
N/A	N/A	C:\Windows\System\OVmMMWI.exe	N/A
N/A	N/A	C:\Windows\System\IXHsBAn.exe	N/A
N/A	N/A	C:\Windows\System\CmnhXSj.exe	N/A
N/A	N/A	C:\Windows\System\pQyfOaj.exe	N/A
N/A	N/A	C:\Windows\System\jUtXjXE.exe	N/A
N/A	N/A	C:\Windows\System\NFtiRQB.exe	N/A
N/A	N/A	C:\Windows\System\BgnIjdF.exe	N/A
N/A	N/A	C:\Windows\System\mhCQbph.exe	N/A
N/A	N/A	C:\Windows\System\GDbglpZ.exe	N/A
N/A	N/A	C:\Windows\System\ZFKlcOO.exe	N/A
N/A	N/A	C:\Windows\System\bMbbQrl.exe	N/A
N/A	N/A	C:\Windows\System\EwaeJoN.exe	N/A
N/A	N/A	C:\Windows\System\KvVXVHG.exe	N/A
N/A	N/A	C:\Windows\System\SqzrWvy.exe	N/A
N/A	N/A	C:\Windows\System\LJHqohv.exe	N/A
N/A	N/A	C:\Windows\System\LbSaIoY.exe	N/A
N/A	N/A	C:\Windows\System\UqKYhdH.exe	N/A
N/A	N/A	C:\Windows\System\IscDqXS.exe	N/A
N/A	N/A	C:\Windows\System\YIFaAVb.exe	N/A
N/A	N/A	C:\Windows\System\CbSogFy.exe	N/A
N/A	N/A	C:\Windows\System\UUndpRH.exe	N/A
N/A	N/A	C:\Windows\System\pVcakzi.exe	N/A
N/A	N/A	C:\Windows\System\ivvnybx.exe	N/A
N/A	N/A	C:\Windows\System\UNIZwvp.exe	N/A
N/A	N/A	C:\Windows\System\MUAfiVZ.exe	N/A
N/A	N/A	C:\Windows\System\OnTyPIv.exe	N/A
N/A	N/A	C:\Windows\System\rNSXyON.exe	N/A
N/A	N/A	C:\Windows\System\PaYqqLW.exe	N/A
N/A	N/A	C:\Windows\System\dVJFSre.exe	N/A
N/A	N/A	C:\Windows\System\xbdCilX.exe	N/A
N/A	N/A	C:\Windows\System\htTuAki.exe	N/A
N/A	N/A	C:\Windows\System\ovpnENr.exe	N/A
N/A	N/A	C:\Windows\System\qPHvLjL.exe	N/A

Loads dropped DLL

Description	Indicator	Process	Target
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A

UPX packed file

upx

Description	Indicator	Process	Target
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A

Drops file in Windows directory

Description	Indicator	Process	Target
File created	C:\Windows\System\ElAbwsF.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\zVrkXoR.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\ZhQVLsy.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\YcQSRzy.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\zHbtROL.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\KpDZQYw.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\GASjzla.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\JJDpCSp.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\KGnwhQG.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\LDtmdBZ.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\lMRgcmu.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\efQFypM.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\LRHQlcC.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\IkosDnp.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\xIarbYp.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\uXIaDdP.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\FNhqXpE.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\XbwtzfP.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\gAIDXrt.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\AJeAYzC.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\RyexVNx.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\wCjdhtn.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\fqYnVEE.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\lNwsivE.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\sDCOCxO.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\SrQFsPS.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\QBqjjob.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\pClCbpi.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\rHwAMRT.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\kLXmhhB.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\NHfFxSl.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\UJJVdJu.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\ETwGKBO.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\ivvnybx.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\sHRtnEB.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\enpZTeS.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\SCMrkPu.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\xKgLLUt.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\uaUQTEL.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\gSQWsJU.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\FiOgasi.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\XvdeBfN.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\mpNKmhc.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\aaKRbzR.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\frdkcYT.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\hmIwtrp.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\qWnfTyE.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\MEoInBv.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\GvArhqp.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\TOpaRTT.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\DwJWzPw.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\XyppDxD.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\ZLaAgdJ.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\KxWFtnq.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\IUUfGTy.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\CSNUATn.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\unGNjSU.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\pQUSVds.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\RrcHUle.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\cYaIObp.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\neHNQcQ.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\rzQKJav.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\EHBJYhK.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\cnYAfkR.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A

Suspicious use of WriteProcessMemory

Description	Indicator	Process	Target
PID 2072 wrote to memory of 2860	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\tgzpGZx.exe
PID 2072 wrote to memory of 2860	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\tgzpGZx.exe
PID 2072 wrote to memory of 2860	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\tgzpGZx.exe
PID 2072 wrote to memory of 2968	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\IAARtuz.exe
PID 2072 wrote to memory of 2968	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\IAARtuz.exe
PID 2072 wrote to memory of 2968	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\IAARtuz.exe
PID 2072 wrote to memory of 2528	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\beoPgYt.exe
PID 2072 wrote to memory of 2528	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\beoPgYt.exe
PID 2072 wrote to memory of 2528	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\beoPgYt.exe
PID 2072 wrote to memory of 2608	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\qShEGbJ.exe
PID 2072 wrote to memory of 2608	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\qShEGbJ.exe
PID 2072 wrote to memory of 2608	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\qShEGbJ.exe
PID 2072 wrote to memory of 2584	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\wffMhcw.exe
PID 2072 wrote to memory of 2584	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\wffMhcw.exe
PID 2072 wrote to memory of 2584	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\wffMhcw.exe
PID 2072 wrote to memory of 2508	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\kLKjAfU.exe
PID 2072 wrote to memory of 2508	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\kLKjAfU.exe
PID 2072 wrote to memory of 2508	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\kLKjAfU.exe
PID 2072 wrote to memory of 2544	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\GvArhqp.exe
PID 2072 wrote to memory of 2544	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\GvArhqp.exe
PID 2072 wrote to memory of 2544	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\GvArhqp.exe
PID 2072 wrote to memory of 2628	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\SNDjChP.exe
PID 2072 wrote to memory of 2628	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\SNDjChP.exe
PID 2072 wrote to memory of 2628	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\SNDjChP.exe
PID 2072 wrote to memory of 2408	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\KSclqLF.exe
PID 2072 wrote to memory of 2408	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\KSclqLF.exe
PID 2072 wrote to memory of 2408	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\KSclqLF.exe
PID 2072 wrote to memory of 2548	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\erNeebl.exe
PID 2072 wrote to memory of 2548	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\erNeebl.exe
PID 2072 wrote to memory of 2548	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\erNeebl.exe
PID 2072 wrote to memory of 2440	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\NdOoNvi.exe
PID 2072 wrote to memory of 2440	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\NdOoNvi.exe
PID 2072 wrote to memory of 2440	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\NdOoNvi.exe
PID 2072 wrote to memory of 2400	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\vCzqoBV.exe
PID 2072 wrote to memory of 2400	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\vCzqoBV.exe
PID 2072 wrote to memory of 2400	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\vCzqoBV.exe
PID 2072 wrote to memory of 2460	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\nvSesqU.exe
PID 2072 wrote to memory of 2460	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\nvSesqU.exe
PID 2072 wrote to memory of 2460	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\nvSesqU.exe
PID 2072 wrote to memory of 2796	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\tAyEBZP.exe
PID 2072 wrote to memory of 2796	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\tAyEBZP.exe
PID 2072 wrote to memory of 2796	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\tAyEBZP.exe
PID 2072 wrote to memory of 2980	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\wOcdesQ.exe
PID 2072 wrote to memory of 2980	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\wOcdesQ.exe
PID 2072 wrote to memory of 2980	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\wOcdesQ.exe
PID 2072 wrote to memory of 1768	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\WQEXjlr.exe
PID 2072 wrote to memory of 1768	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\WQEXjlr.exe
PID 2072 wrote to memory of 1768	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\WQEXjlr.exe
PID 2072 wrote to memory of 360	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\qNetVOu.exe
PID 2072 wrote to memory of 360	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\qNetVOu.exe
PID 2072 wrote to memory of 360	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\qNetVOu.exe
PID 2072 wrote to memory of 1016	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\JBorKDl.exe
PID 2072 wrote to memory of 1016	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\JBorKDl.exe
PID 2072 wrote to memory of 1016	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\JBorKDl.exe
PID 2072 wrote to memory of 1616	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\ObCBawV.exe
PID 2072 wrote to memory of 1616	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\ObCBawV.exe
PID 2072 wrote to memory of 1616	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\ObCBawV.exe
PID 2072 wrote to memory of 2568	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\rOZmyTN.exe
PID 2072 wrote to memory of 2568	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\rOZmyTN.exe
PID 2072 wrote to memory of 2568	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\rOZmyTN.exe
PID 2072 wrote to memory of 1576	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\pyXqkRJ.exe
PID 2072 wrote to memory of 1576	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\pyXqkRJ.exe
PID 2072 wrote to memory of 1576	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\pyXqkRJ.exe
PID 2072 wrote to memory of 764	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\HfoiFlr.exe

Processes

C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe

"C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe"

C:\Windows\System\tgzpGZx.exe

C:\Windows\System\tgzpGZx.exe

C:\Windows\System\IAARtuz.exe

C:\Windows\System\IAARtuz.exe

C:\Windows\System\beoPgYt.exe

C:\Windows\System\beoPgYt.exe

C:\Windows\System\qShEGbJ.exe

C:\Windows\System\qShEGbJ.exe

C:\Windows\System\wffMhcw.exe

C:\Windows\System\wffMhcw.exe

C:\Windows\System\kLKjAfU.exe

C:\Windows\System\kLKjAfU.exe

C:\Windows\System\GvArhqp.exe

C:\Windows\System\GvArhqp.exe

C:\Windows\System\SNDjChP.exe

C:\Windows\System\SNDjChP.exe

C:\Windows\System\KSclqLF.exe

C:\Windows\System\KSclqLF.exe

C:\Windows\System\erNeebl.exe

C:\Windows\System\erNeebl.exe

C:\Windows\System\NdOoNvi.exe

C:\Windows\System\NdOoNvi.exe

C:\Windows\System\vCzqoBV.exe

C:\Windows\System\vCzqoBV.exe

C:\Windows\System\nvSesqU.exe

C:\Windows\System\nvSesqU.exe

C:\Windows\System\tAyEBZP.exe

C:\Windows\System\tAyEBZP.exe

C:\Windows\System\wOcdesQ.exe

C:\Windows\System\wOcdesQ.exe

C:\Windows\System\WQEXjlr.exe

C:\Windows\System\WQEXjlr.exe

C:\Windows\System\qNetVOu.exe

C:\Windows\System\qNetVOu.exe

C:\Windows\System\JBorKDl.exe

C:\Windows\System\JBorKDl.exe

C:\Windows\System\ObCBawV.exe

C:\Windows\System\ObCBawV.exe

C:\Windows\System\rOZmyTN.exe

C:\Windows\System\rOZmyTN.exe

C:\Windows\System\pyXqkRJ.exe

C:\Windows\System\pyXqkRJ.exe

C:\Windows\System\HfoiFlr.exe

C:\Windows\System\HfoiFlr.exe

C:\Windows\System\Wrnsvzi.exe

C:\Windows\System\Wrnsvzi.exe

C:\Windows\System\fFDKYHg.exe

C:\Windows\System\fFDKYHg.exe

C:\Windows\System\UBmLvKU.exe

C:\Windows\System\UBmLvKU.exe

C:\Windows\System\JJqgoVX.exe

C:\Windows\System\JJqgoVX.exe

C:\Windows\System\uHKfySd.exe

C:\Windows\System\uHKfySd.exe

C:\Windows\System\XxNmPST.exe

C:\Windows\System\XxNmPST.exe

C:\Windows\System\RUWNxOn.exe

C:\Windows\System\RUWNxOn.exe

C:\Windows\System\BQtsBnJ.exe

C:\Windows\System\BQtsBnJ.exe

C:\Windows\System\TrCiwgm.exe

C:\Windows\System\TrCiwgm.exe

C:\Windows\System\OVmMMWI.exe

C:\Windows\System\OVmMMWI.exe

C:\Windows\System\IXHsBAn.exe

C:\Windows\System\IXHsBAn.exe

C:\Windows\System\CmnhXSj.exe

C:\Windows\System\CmnhXSj.exe

C:\Windows\System\pQyfOaj.exe

C:\Windows\System\pQyfOaj.exe

C:\Windows\System\jUtXjXE.exe

C:\Windows\System\jUtXjXE.exe

C:\Windows\System\NFtiRQB.exe

C:\Windows\System\NFtiRQB.exe

C:\Windows\System\BgnIjdF.exe

C:\Windows\System\BgnIjdF.exe

C:\Windows\System\mhCQbph.exe

C:\Windows\System\mhCQbph.exe

C:\Windows\System\GDbglpZ.exe

C:\Windows\System\GDbglpZ.exe

C:\Windows\System\ZFKlcOO.exe

C:\Windows\System\ZFKlcOO.exe

C:\Windows\System\bMbbQrl.exe

C:\Windows\System\bMbbQrl.exe

C:\Windows\System\EwaeJoN.exe

C:\Windows\System\EwaeJoN.exe

C:\Windows\System\KvVXVHG.exe

C:\Windows\System\KvVXVHG.exe

C:\Windows\System\SqzrWvy.exe

C:\Windows\System\SqzrWvy.exe

C:\Windows\System\LJHqohv.exe

C:\Windows\System\LJHqohv.exe

C:\Windows\System\LbSaIoY.exe

C:\Windows\System\LbSaIoY.exe

C:\Windows\System\UqKYhdH.exe

C:\Windows\System\UqKYhdH.exe

C:\Windows\System\IscDqXS.exe

C:\Windows\System\IscDqXS.exe

C:\Windows\System\YIFaAVb.exe

C:\Windows\System\YIFaAVb.exe

C:\Windows\System\CbSogFy.exe

C:\Windows\System\CbSogFy.exe

C:\Windows\System\UUndpRH.exe

C:\Windows\System\UUndpRH.exe

C:\Windows\System\pVcakzi.exe

C:\Windows\System\pVcakzi.exe

C:\Windows\System\ivvnybx.exe

C:\Windows\System\ivvnybx.exe

C:\Windows\System\UNIZwvp.exe

C:\Windows\System\UNIZwvp.exe

C:\Windows\System\MUAfiVZ.exe

C:\Windows\System\MUAfiVZ.exe

C:\Windows\System\OnTyPIv.exe

C:\Windows\System\OnTyPIv.exe

C:\Windows\System\rNSXyON.exe

C:\Windows\System\rNSXyON.exe

C:\Windows\System\PaYqqLW.exe

C:\Windows\System\PaYqqLW.exe

C:\Windows\System\dVJFSre.exe

C:\Windows\System\dVJFSre.exe

C:\Windows\System\xbdCilX.exe

C:\Windows\System\xbdCilX.exe

C:\Windows\System\htTuAki.exe

C:\Windows\System\htTuAki.exe

C:\Windows\System\ovpnENr.exe

C:\Windows\System\ovpnENr.exe

C:\Windows\System\qPHvLjL.exe

C:\Windows\System\qPHvLjL.exe

C:\Windows\System\hNAzgCG.exe

C:\Windows\System\hNAzgCG.exe

C:\Windows\System\ATjwxIn.exe

C:\Windows\System\ATjwxIn.exe

C:\Windows\System\ekZREoS.exe

C:\Windows\System\ekZREoS.exe

C:\Windows\System\veNKflX.exe

C:\Windows\System\veNKflX.exe

C:\Windows\System\hJfBDQb.exe

C:\Windows\System\hJfBDQb.exe

C:\Windows\System\UJFuaRC.exe

C:\Windows\System\UJFuaRC.exe

C:\Windows\System\RaSILRX.exe

C:\Windows\System\RaSILRX.exe

C:\Windows\System\zGonGAq.exe

C:\Windows\System\zGonGAq.exe

C:\Windows\System\OCeOXQM.exe

C:\Windows\System\OCeOXQM.exe

C:\Windows\System\IpmMPJC.exe

C:\Windows\System\IpmMPJC.exe

C:\Windows\System\FmpxYcv.exe

C:\Windows\System\FmpxYcv.exe

C:\Windows\System\qMWoNOe.exe

C:\Windows\System\qMWoNOe.exe

C:\Windows\System\UvQswJa.exe

C:\Windows\System\UvQswJa.exe

C:\Windows\System\BLdyYBV.exe

C:\Windows\System\BLdyYBV.exe

C:\Windows\System\SBmtcka.exe

C:\Windows\System\SBmtcka.exe

C:\Windows\System\lnigArA.exe

C:\Windows\System\lnigArA.exe

C:\Windows\System\yAwwTzN.exe

C:\Windows\System\yAwwTzN.exe

C:\Windows\System\AjEujbb.exe

C:\Windows\System\AjEujbb.exe

C:\Windows\System\jXWZwUy.exe

C:\Windows\System\jXWZwUy.exe

C:\Windows\System\KtsvZjn.exe

C:\Windows\System\KtsvZjn.exe

C:\Windows\System\NHfFxSl.exe

C:\Windows\System\NHfFxSl.exe

C:\Windows\System\DaseUKS.exe

C:\Windows\System\DaseUKS.exe

C:\Windows\System\NInHyCW.exe

C:\Windows\System\NInHyCW.exe

C:\Windows\System\gumCgIG.exe

C:\Windows\System\gumCgIG.exe

C:\Windows\System\RLivtHN.exe

C:\Windows\System\RLivtHN.exe

C:\Windows\System\sHVcner.exe

C:\Windows\System\sHVcner.exe

C:\Windows\System\AQsxSKx.exe

C:\Windows\System\AQsxSKx.exe

C:\Windows\System\DdiiNoL.exe

C:\Windows\System\DdiiNoL.exe

C:\Windows\System\OsqUtfe.exe

C:\Windows\System\OsqUtfe.exe

C:\Windows\System\SFHQSjh.exe

C:\Windows\System\SFHQSjh.exe

C:\Windows\System\cnYAfkR.exe

C:\Windows\System\cnYAfkR.exe

C:\Windows\System\puIUwly.exe

C:\Windows\System\puIUwly.exe

C:\Windows\System\YIcGerG.exe

C:\Windows\System\YIcGerG.exe

C:\Windows\System\sWveHqQ.exe

C:\Windows\System\sWveHqQ.exe

C:\Windows\System\PvUWqIX.exe

C:\Windows\System\PvUWqIX.exe

C:\Windows\System\xEVdxOP.exe

C:\Windows\System\xEVdxOP.exe

C:\Windows\System\GyUOoQx.exe

C:\Windows\System\GyUOoQx.exe

C:\Windows\System\mDaTUTT.exe

C:\Windows\System\mDaTUTT.exe

C:\Windows\System\lVqMhPm.exe

C:\Windows\System\lVqMhPm.exe

C:\Windows\System\pmEfQKD.exe

C:\Windows\System\pmEfQKD.exe

C:\Windows\System\QLSJOqA.exe

C:\Windows\System\QLSJOqA.exe

C:\Windows\System\pNSlbqi.exe

C:\Windows\System\pNSlbqi.exe

C:\Windows\System\wYEfNoF.exe

C:\Windows\System\wYEfNoF.exe

C:\Windows\System\UYWXSLa.exe

C:\Windows\System\UYWXSLa.exe

C:\Windows\System\QvSLpUK.exe

C:\Windows\System\QvSLpUK.exe

C:\Windows\System\fqYnVEE.exe

C:\Windows\System\fqYnVEE.exe

C:\Windows\System\eCHfyZr.exe

C:\Windows\System\eCHfyZr.exe

C:\Windows\System\jfftDrT.exe

C:\Windows\System\jfftDrT.exe

C:\Windows\System\sDCOCxO.exe

C:\Windows\System\sDCOCxO.exe

C:\Windows\System\dfqGMve.exe

C:\Windows\System\dfqGMve.exe

C:\Windows\System\OTjCavJ.exe

C:\Windows\System\OTjCavJ.exe

C:\Windows\System\IsXfSWp.exe

C:\Windows\System\IsXfSWp.exe

C:\Windows\System\JxPIDHr.exe

C:\Windows\System\JxPIDHr.exe

C:\Windows\System\wWTAmxV.exe

C:\Windows\System\wWTAmxV.exe

C:\Windows\System\HcaLIBR.exe

C:\Windows\System\HcaLIBR.exe

C:\Windows\System\raUZiEI.exe

C:\Windows\System\raUZiEI.exe

C:\Windows\System\WThMWRH.exe

C:\Windows\System\WThMWRH.exe

C:\Windows\System\DaTSjXF.exe

C:\Windows\System\DaTSjXF.exe

C:\Windows\System\weZELDS.exe

C:\Windows\System\weZELDS.exe

C:\Windows\System\EjowgAU.exe

C:\Windows\System\EjowgAU.exe

C:\Windows\System\UQZeJcZ.exe

C:\Windows\System\UQZeJcZ.exe

C:\Windows\System\JBhRNAN.exe

C:\Windows\System\JBhRNAN.exe

C:\Windows\System\zHbtROL.exe

C:\Windows\System\zHbtROL.exe

C:\Windows\System\VXorAqh.exe

C:\Windows\System\VXorAqh.exe

C:\Windows\System\bfshjeJ.exe

C:\Windows\System\bfshjeJ.exe

C:\Windows\System\HnkWlmz.exe

C:\Windows\System\HnkWlmz.exe

C:\Windows\System\aErGzhA.exe

C:\Windows\System\aErGzhA.exe

C:\Windows\System\HKxUwSf.exe

C:\Windows\System\HKxUwSf.exe

C:\Windows\System\mFtQDPb.exe

C:\Windows\System\mFtQDPb.exe

C:\Windows\System\bgvVNkM.exe

C:\Windows\System\bgvVNkM.exe

C:\Windows\System\vwIjJSr.exe

C:\Windows\System\vwIjJSr.exe

C:\Windows\System\kqzbNfq.exe

C:\Windows\System\kqzbNfq.exe

C:\Windows\System\FyUhRgh.exe

C:\Windows\System\FyUhRgh.exe

C:\Windows\System\zMIawgk.exe

C:\Windows\System\zMIawgk.exe

C:\Windows\System\hJHKhhX.exe

C:\Windows\System\hJHKhhX.exe

C:\Windows\System\AileWah.exe

C:\Windows\System\AileWah.exe

C:\Windows\System\oKMeuMz.exe

C:\Windows\System\oKMeuMz.exe

C:\Windows\System\UbQpFbA.exe

C:\Windows\System\UbQpFbA.exe

C:\Windows\System\qIbeUvi.exe

C:\Windows\System\qIbeUvi.exe

C:\Windows\System\tPptfpR.exe

C:\Windows\System\tPptfpR.exe

C:\Windows\System\jPOLani.exe

C:\Windows\System\jPOLani.exe

C:\Windows\System\IXuDfjI.exe

C:\Windows\System\IXuDfjI.exe

C:\Windows\System\iQMUKBn.exe

C:\Windows\System\iQMUKBn.exe

C:\Windows\System\Xwrtwaq.exe

C:\Windows\System\Xwrtwaq.exe

C:\Windows\System\iuBPJbG.exe

C:\Windows\System\iuBPJbG.exe

C:\Windows\System\lRAfixi.exe

C:\Windows\System\lRAfixi.exe

C:\Windows\System\QdTQaLp.exe

C:\Windows\System\QdTQaLp.exe

C:\Windows\System\upmyoVj.exe

C:\Windows\System\upmyoVj.exe

C:\Windows\System\IGWBAXQ.exe

C:\Windows\System\IGWBAXQ.exe

C:\Windows\System\QfhaRIL.exe

C:\Windows\System\QfhaRIL.exe

C:\Windows\System\pErnBiA.exe

C:\Windows\System\pErnBiA.exe

C:\Windows\System\tpTbzEQ.exe

C:\Windows\System\tpTbzEQ.exe

C:\Windows\System\vxHRXki.exe

C:\Windows\System\vxHRXki.exe

C:\Windows\System\trvBzyX.exe

C:\Windows\System\trvBzyX.exe

C:\Windows\System\grGyaCO.exe

C:\Windows\System\grGyaCO.exe

C:\Windows\System\vyEQPQP.exe

C:\Windows\System\vyEQPQP.exe

C:\Windows\System\UudhPUC.exe

C:\Windows\System\UudhPUC.exe

C:\Windows\System\qrMOymK.exe

C:\Windows\System\qrMOymK.exe

C:\Windows\System\pcDhALC.exe

C:\Windows\System\pcDhALC.exe

C:\Windows\System\OVtsxof.exe

C:\Windows\System\OVtsxof.exe

C:\Windows\System\MOJhdbA.exe

C:\Windows\System\MOJhdbA.exe

C:\Windows\System\jlNwhAb.exe

C:\Windows\System\jlNwhAb.exe

C:\Windows\System\ySFxQXc.exe

C:\Windows\System\ySFxQXc.exe

C:\Windows\System\giYgSEY.exe

C:\Windows\System\giYgSEY.exe

C:\Windows\System\aKGDEYf.exe

C:\Windows\System\aKGDEYf.exe

C:\Windows\System\UkjDxsL.exe

C:\Windows\System\UkjDxsL.exe

C:\Windows\System\VGcSwNB.exe

C:\Windows\System\VGcSwNB.exe

C:\Windows\System\hcHtweD.exe

C:\Windows\System\hcHtweD.exe

C:\Windows\System\nuSTaVB.exe

C:\Windows\System\nuSTaVB.exe

C:\Windows\System\RodYxea.exe

C:\Windows\System\RodYxea.exe

C:\Windows\System\wZIInhj.exe

C:\Windows\System\wZIInhj.exe

C:\Windows\System\DDJRQsc.exe

C:\Windows\System\DDJRQsc.exe

C:\Windows\System\vqvXwRw.exe

C:\Windows\System\vqvXwRw.exe

C:\Windows\System\EQxuLNO.exe

C:\Windows\System\EQxuLNO.exe

C:\Windows\System\euumDKY.exe

C:\Windows\System\euumDKY.exe

C:\Windows\System\zDmyDNZ.exe

C:\Windows\System\zDmyDNZ.exe

C:\Windows\System\KHkGIsr.exe

C:\Windows\System\KHkGIsr.exe

C:\Windows\System\AeCpwVy.exe

C:\Windows\System\AeCpwVy.exe

C:\Windows\System\RrcHUle.exe

C:\Windows\System\RrcHUle.exe

C:\Windows\System\HHIWNEL.exe

C:\Windows\System\HHIWNEL.exe

C:\Windows\System\NfmUNIB.exe

C:\Windows\System\NfmUNIB.exe

C:\Windows\System\HmysmdN.exe

C:\Windows\System\HmysmdN.exe

C:\Windows\System\mhfZMuB.exe

C:\Windows\System\mhfZMuB.exe

C:\Windows\System\eRqXGgw.exe

C:\Windows\System\eRqXGgw.exe

C:\Windows\System\XHzRLrm.exe

C:\Windows\System\XHzRLrm.exe

C:\Windows\System\TgElzNF.exe

C:\Windows\System\TgElzNF.exe

C:\Windows\System\gzRrncJ.exe

C:\Windows\System\gzRrncJ.exe

C:\Windows\System\kBnacxG.exe

C:\Windows\System\kBnacxG.exe

C:\Windows\System\ASNVWkK.exe

C:\Windows\System\ASNVWkK.exe

C:\Windows\System\EaaEKMK.exe

C:\Windows\System\EaaEKMK.exe

C:\Windows\System\jSznwZB.exe

C:\Windows\System\jSznwZB.exe

C:\Windows\System\tftgBpQ.exe

C:\Windows\System\tftgBpQ.exe

C:\Windows\System\IUUfGTy.exe

C:\Windows\System\IUUfGTy.exe

C:\Windows\System\tKOqQmF.exe

C:\Windows\System\tKOqQmF.exe

C:\Windows\System\PraTAdh.exe

C:\Windows\System\PraTAdh.exe

C:\Windows\System\KrXleDR.exe

C:\Windows\System\KrXleDR.exe

C:\Windows\System\XyppDxD.exe

C:\Windows\System\XyppDxD.exe

C:\Windows\System\ueHnObt.exe

C:\Windows\System\ueHnObt.exe

C:\Windows\System\LKuxVJz.exe

C:\Windows\System\LKuxVJz.exe

C:\Windows\System\JpfWsEp.exe

C:\Windows\System\JpfWsEp.exe

C:\Windows\System\yStOqXc.exe

C:\Windows\System\yStOqXc.exe

C:\Windows\System\pOOFaPd.exe

C:\Windows\System\pOOFaPd.exe

C:\Windows\System\hAQtETL.exe

C:\Windows\System\hAQtETL.exe

C:\Windows\System\ZyahNmx.exe

C:\Windows\System\ZyahNmx.exe

C:\Windows\System\kWHImgM.exe

C:\Windows\System\kWHImgM.exe

C:\Windows\System\oJCYFDy.exe

C:\Windows\System\oJCYFDy.exe

C:\Windows\System\lcDSuNc.exe

C:\Windows\System\lcDSuNc.exe

C:\Windows\System\jUaMoOP.exe

C:\Windows\System\jUaMoOP.exe

C:\Windows\System\rnVFgoq.exe

C:\Windows\System\rnVFgoq.exe

C:\Windows\System\fkbxWew.exe

C:\Windows\System\fkbxWew.exe

C:\Windows\System\tSqiyXx.exe

C:\Windows\System\tSqiyXx.exe

C:\Windows\System\UGoIezk.exe

C:\Windows\System\UGoIezk.exe

C:\Windows\System\eMyrUxp.exe

C:\Windows\System\eMyrUxp.exe

C:\Windows\System\sGrIdSn.exe

C:\Windows\System\sGrIdSn.exe

C:\Windows\System\nlpTrdj.exe

C:\Windows\System\nlpTrdj.exe

C:\Windows\System\aOTRSiq.exe

C:\Windows\System\aOTRSiq.exe

C:\Windows\System\MpOdYhF.exe

C:\Windows\System\MpOdYhF.exe

C:\Windows\System\PVozWSn.exe

C:\Windows\System\PVozWSn.exe

C:\Windows\System\nAgVWKg.exe

C:\Windows\System\nAgVWKg.exe

C:\Windows\System\DHKqdOw.exe

C:\Windows\System\DHKqdOw.exe

C:\Windows\System\ORhBZXj.exe

C:\Windows\System\ORhBZXj.exe

C:\Windows\System\FXfInzP.exe

C:\Windows\System\FXfInzP.exe

C:\Windows\System\UrkHMRc.exe

C:\Windows\System\UrkHMRc.exe

C:\Windows\System\qlZFdIq.exe

C:\Windows\System\qlZFdIq.exe

C:\Windows\System\mrLvJvT.exe

C:\Windows\System\mrLvJvT.exe

C:\Windows\System\uvXxuPk.exe

C:\Windows\System\uvXxuPk.exe

C:\Windows\System\CLdPXth.exe

C:\Windows\System\CLdPXth.exe

C:\Windows\System\kJBoXlw.exe

C:\Windows\System\kJBoXlw.exe

C:\Windows\System\PoJtGVQ.exe

C:\Windows\System\PoJtGVQ.exe

C:\Windows\System\UZBrFrc.exe

C:\Windows\System\UZBrFrc.exe

C:\Windows\System\CfyqZKd.exe

C:\Windows\System\CfyqZKd.exe

C:\Windows\System\FQjXunW.exe

C:\Windows\System\FQjXunW.exe

C:\Windows\System\LAtxGWY.exe

C:\Windows\System\LAtxGWY.exe

C:\Windows\System\JWBLjVa.exe

C:\Windows\System\JWBLjVa.exe

C:\Windows\System\YopjiGV.exe

C:\Windows\System\YopjiGV.exe

C:\Windows\System\oBpcjOA.exe

C:\Windows\System\oBpcjOA.exe

C:\Windows\System\ZlIgawH.exe

C:\Windows\System\ZlIgawH.exe

C:\Windows\System\yPlstTB.exe

C:\Windows\System\yPlstTB.exe

C:\Windows\System\sXqmSov.exe

C:\Windows\System\sXqmSov.exe

C:\Windows\System\IPIpdHv.exe

C:\Windows\System\IPIpdHv.exe

C:\Windows\System\gbPfgRu.exe

C:\Windows\System\gbPfgRu.exe

C:\Windows\System\iVNsRbd.exe

C:\Windows\System\iVNsRbd.exe

C:\Windows\System\xyxDcUh.exe

C:\Windows\System\xyxDcUh.exe

C:\Windows\System\rZHOuzK.exe

C:\Windows\System\rZHOuzK.exe

C:\Windows\System\eUghxhU.exe

C:\Windows\System\eUghxhU.exe

C:\Windows\System\rzTBgHN.exe

C:\Windows\System\rzTBgHN.exe

C:\Windows\System\FZQlyew.exe

C:\Windows\System\FZQlyew.exe

C:\Windows\System\irlwyRO.exe

C:\Windows\System\irlwyRO.exe

C:\Windows\System\PQHfPjz.exe

C:\Windows\System\PQHfPjz.exe

C:\Windows\System\hYyGGtL.exe

C:\Windows\System\hYyGGtL.exe

C:\Windows\System\YAyrpKI.exe

C:\Windows\System\YAyrpKI.exe

C:\Windows\System\kWoInEO.exe

C:\Windows\System\kWoInEO.exe

C:\Windows\System\TYdmTst.exe

C:\Windows\System\TYdmTst.exe

C:\Windows\System\NiRATuB.exe

C:\Windows\System\NiRATuB.exe

C:\Windows\System\kOJycGx.exe

C:\Windows\System\kOJycGx.exe

C:\Windows\System\Cotxzib.exe

C:\Windows\System\Cotxzib.exe

C:\Windows\System\HAREbvM.exe

C:\Windows\System\HAREbvM.exe

C:\Windows\System\pJMEsWb.exe

C:\Windows\System\pJMEsWb.exe

C:\Windows\System\eqfYMac.exe

C:\Windows\System\eqfYMac.exe

C:\Windows\System\MHpDCTX.exe

C:\Windows\System\MHpDCTX.exe

C:\Windows\System\TvCTeEv.exe

C:\Windows\System\TvCTeEv.exe

C:\Windows\System\CPcvQCx.exe

C:\Windows\System\CPcvQCx.exe

C:\Windows\System\UtOwcaX.exe

C:\Windows\System\UtOwcaX.exe

C:\Windows\System\griPSQP.exe

C:\Windows\System\griPSQP.exe

C:\Windows\System\AcgWJmJ.exe

C:\Windows\System\AcgWJmJ.exe

C:\Windows\System\dmsScGU.exe

C:\Windows\System\dmsScGU.exe

C:\Windows\System\bvQYwuh.exe

C:\Windows\System\bvQYwuh.exe

C:\Windows\System\mfxQFMQ.exe

C:\Windows\System\mfxQFMQ.exe

C:\Windows\System\bKwaOoU.exe

C:\Windows\System\bKwaOoU.exe

C:\Windows\System\mpjtuPW.exe

C:\Windows\System\mpjtuPW.exe

C:\Windows\System\MaILQus.exe

C:\Windows\System\MaILQus.exe

C:\Windows\System\FEYZwkV.exe

C:\Windows\System\FEYZwkV.exe

C:\Windows\System\RyexVNx.exe

C:\Windows\System\RyexVNx.exe

C:\Windows\System\DgmIuNs.exe

C:\Windows\System\DgmIuNs.exe

C:\Windows\System\hTJWfJy.exe

C:\Windows\System\hTJWfJy.exe

C:\Windows\System\SCjGORY.exe

C:\Windows\System\SCjGORY.exe

C:\Windows\System\XCtiwpP.exe

C:\Windows\System\XCtiwpP.exe

C:\Windows\System\RzbsMIT.exe

C:\Windows\System\RzbsMIT.exe

C:\Windows\System\KZgWnpG.exe

C:\Windows\System\KZgWnpG.exe

C:\Windows\System\WinUCTf.exe

C:\Windows\System\WinUCTf.exe

C:\Windows\System\GDiRcrA.exe

C:\Windows\System\GDiRcrA.exe

C:\Windows\System\Uywblto.exe

C:\Windows\System\Uywblto.exe

C:\Windows\System\QsdKDEM.exe

C:\Windows\System\QsdKDEM.exe

C:\Windows\System\HqJMtNt.exe

C:\Windows\System\HqJMtNt.exe

C:\Windows\System\jLhfvcC.exe

C:\Windows\System\jLhfvcC.exe

C:\Windows\System\QogOTjc.exe

C:\Windows\System\QogOTjc.exe

C:\Windows\System\AACMwMX.exe

C:\Windows\System\AACMwMX.exe

C:\Windows\System\AiMaZyh.exe

C:\Windows\System\AiMaZyh.exe

C:\Windows\System\ljzcYnp.exe

C:\Windows\System\ljzcYnp.exe

C:\Windows\System\basPkoX.exe

C:\Windows\System\basPkoX.exe

C:\Windows\System\kBkHLtb.exe

C:\Windows\System\kBkHLtb.exe

C:\Windows\System\pGoDOXJ.exe

C:\Windows\System\pGoDOXJ.exe

C:\Windows\System\KjYtesX.exe

C:\Windows\System\KjYtesX.exe

C:\Windows\System\ssdXEKA.exe

C:\Windows\System\ssdXEKA.exe

C:\Windows\System\EtScVLB.exe

C:\Windows\System\EtScVLB.exe

C:\Windows\System\wNvPRir.exe

C:\Windows\System\wNvPRir.exe

C:\Windows\System\PgQKATr.exe

C:\Windows\System\PgQKATr.exe

C:\Windows\System\JMtLVmT.exe

C:\Windows\System\JMtLVmT.exe

C:\Windows\System\DEFfYyc.exe

C:\Windows\System\DEFfYyc.exe

C:\Windows\System\dhDPBIX.exe

C:\Windows\System\dhDPBIX.exe

C:\Windows\System\hIhfQkr.exe

C:\Windows\System\hIhfQkr.exe

C:\Windows\System\GQrayir.exe

C:\Windows\System\GQrayir.exe

C:\Windows\System\OdUtwTZ.exe

C:\Windows\System\OdUtwTZ.exe

C:\Windows\System\IHOWwGi.exe

C:\Windows\System\IHOWwGi.exe

C:\Windows\System\uhDXeOm.exe

C:\Windows\System\uhDXeOm.exe

C:\Windows\System\ElAbwsF.exe

C:\Windows\System\ElAbwsF.exe

C:\Windows\System\ERCBSNV.exe

C:\Windows\System\ERCBSNV.exe

C:\Windows\System\sZTpWfU.exe

C:\Windows\System\sZTpWfU.exe

C:\Windows\System\OsUTxcp.exe

C:\Windows\System\OsUTxcp.exe

C:\Windows\System\NTOaUJU.exe

C:\Windows\System\NTOaUJU.exe

C:\Windows\System\cIVQYOu.exe

C:\Windows\System\cIVQYOu.exe

C:\Windows\System\NyjOCgd.exe

C:\Windows\System\NyjOCgd.exe

C:\Windows\System\zzYcaGz.exe

C:\Windows\System\zzYcaGz.exe

C:\Windows\System\gEQwBnz.exe

C:\Windows\System\gEQwBnz.exe

C:\Windows\System\vUotchh.exe

C:\Windows\System\vUotchh.exe

C:\Windows\System\EIaaZvn.exe

C:\Windows\System\EIaaZvn.exe

C:\Windows\System\lSMwzal.exe

C:\Windows\System\lSMwzal.exe

C:\Windows\System\qhLDGMz.exe

C:\Windows\System\qhLDGMz.exe

C:\Windows\System\rNMZzXl.exe

C:\Windows\System\rNMZzXl.exe

C:\Windows\System\ZokISBM.exe

C:\Windows\System\ZokISBM.exe

C:\Windows\System\SrQFsPS.exe

C:\Windows\System\SrQFsPS.exe

C:\Windows\System\EzxbokX.exe

C:\Windows\System\EzxbokX.exe

C:\Windows\System\wWMCZFF.exe

C:\Windows\System\wWMCZFF.exe

C:\Windows\System\fZVsciJ.exe

C:\Windows\System\fZVsciJ.exe

C:\Windows\System\lHnJmel.exe

C:\Windows\System\lHnJmel.exe

C:\Windows\System\GZzWUZB.exe

C:\Windows\System\GZzWUZB.exe

C:\Windows\System\TOpaRTT.exe

C:\Windows\System\TOpaRTT.exe

C:\Windows\System\pObJOmG.exe

C:\Windows\System\pObJOmG.exe

C:\Windows\System\iFlVzdi.exe

C:\Windows\System\iFlVzdi.exe

C:\Windows\System\omWlauY.exe

C:\Windows\System\omWlauY.exe

C:\Windows\System\gHQsKOV.exe

C:\Windows\System\gHQsKOV.exe

C:\Windows\System\sKmCVGc.exe

C:\Windows\System\sKmCVGc.exe

C:\Windows\System\BdoCrVB.exe

C:\Windows\System\BdoCrVB.exe

C:\Windows\System\bvKUqrf.exe

C:\Windows\System\bvKUqrf.exe

C:\Windows\System\gKrMxzJ.exe

C:\Windows\System\gKrMxzJ.exe

C:\Windows\System\nfWeZVp.exe

C:\Windows\System\nfWeZVp.exe

C:\Windows\System\LvVFleg.exe

C:\Windows\System\LvVFleg.exe

C:\Windows\System\NIQNbTN.exe

C:\Windows\System\NIQNbTN.exe

C:\Windows\System\nUMaMoh.exe

C:\Windows\System\nUMaMoh.exe

C:\Windows\System\WDovRCA.exe

C:\Windows\System\WDovRCA.exe

C:\Windows\System\uxHjJcr.exe

C:\Windows\System\uxHjJcr.exe

C:\Windows\System\fhsAyOK.exe

C:\Windows\System\fhsAyOK.exe

C:\Windows\System\efQFypM.exe

C:\Windows\System\efQFypM.exe

C:\Windows\System\IPXViVl.exe

C:\Windows\System\IPXViVl.exe

C:\Windows\System\RcogKAG.exe

C:\Windows\System\RcogKAG.exe

C:\Windows\System\bUXwIua.exe

C:\Windows\System\bUXwIua.exe

C:\Windows\System\IEeoAAC.exe

C:\Windows\System\IEeoAAC.exe

C:\Windows\System\HUKFEsx.exe

C:\Windows\System\HUKFEsx.exe

C:\Windows\System\CNohzjv.exe

C:\Windows\System\CNohzjv.exe

C:\Windows\System\YwqPhnw.exe

C:\Windows\System\YwqPhnw.exe

C:\Windows\System\cYaIObp.exe

C:\Windows\System\cYaIObp.exe

C:\Windows\System\hnHVGGz.exe

C:\Windows\System\hnHVGGz.exe

C:\Windows\System\NgMMqLL.exe

C:\Windows\System\NgMMqLL.exe

C:\Windows\System\cdynbKn.exe

C:\Windows\System\cdynbKn.exe

C:\Windows\System\iyiDUze.exe

C:\Windows\System\iyiDUze.exe

C:\Windows\System\vZIWcNl.exe

C:\Windows\System\vZIWcNl.exe

C:\Windows\System\oZPGCoH.exe

C:\Windows\System\oZPGCoH.exe

C:\Windows\System\NZDpNNg.exe

C:\Windows\System\NZDpNNg.exe

C:\Windows\System\neHNQcQ.exe

C:\Windows\System\neHNQcQ.exe

C:\Windows\System\AJvPoHR.exe

C:\Windows\System\AJvPoHR.exe

C:\Windows\System\ghSrZVl.exe

C:\Windows\System\ghSrZVl.exe

C:\Windows\System\uKcADqy.exe

C:\Windows\System\uKcADqy.exe

C:\Windows\System\RDBIIsJ.exe

C:\Windows\System\RDBIIsJ.exe

C:\Windows\System\XXWVNrm.exe

C:\Windows\System\XXWVNrm.exe

C:\Windows\System\YQVzwza.exe

C:\Windows\System\YQVzwza.exe

C:\Windows\System\ufLbVoJ.exe

C:\Windows\System\ufLbVoJ.exe

C:\Windows\System\MeQDtez.exe

C:\Windows\System\MeQDtez.exe

C:\Windows\System\uaUQTEL.exe

C:\Windows\System\uaUQTEL.exe

C:\Windows\System\NVhWnnZ.exe

C:\Windows\System\NVhWnnZ.exe

C:\Windows\System\kZOQDeD.exe

C:\Windows\System\kZOQDeD.exe

C:\Windows\System\OcbYDQz.exe

C:\Windows\System\OcbYDQz.exe

C:\Windows\System\qENjETO.exe

C:\Windows\System\qENjETO.exe

C:\Windows\System\pZpaulk.exe

C:\Windows\System\pZpaulk.exe

C:\Windows\System\zBOpTrD.exe

C:\Windows\System\zBOpTrD.exe

C:\Windows\System\AVFCcWw.exe

C:\Windows\System\AVFCcWw.exe

C:\Windows\System\nlAFCuq.exe

C:\Windows\System\nlAFCuq.exe

C:\Windows\System\YQqQAFA.exe

C:\Windows\System\YQqQAFA.exe

C:\Windows\System\fIVzhDN.exe

C:\Windows\System\fIVzhDN.exe

C:\Windows\System\kZQbsCv.exe

C:\Windows\System\kZQbsCv.exe

C:\Windows\System\hBleVqn.exe

C:\Windows\System\hBleVqn.exe

C:\Windows\System\WsPHNii.exe

C:\Windows\System\WsPHNii.exe

C:\Windows\System\oqKaEHN.exe

C:\Windows\System\oqKaEHN.exe

C:\Windows\System\hFVbUAt.exe

C:\Windows\System\hFVbUAt.exe

C:\Windows\System\URHrOuO.exe

C:\Windows\System\URHrOuO.exe

C:\Windows\System\STUdyoQ.exe

C:\Windows\System\STUdyoQ.exe

C:\Windows\System\ySKvFAQ.exe

C:\Windows\System\ySKvFAQ.exe

C:\Windows\System\NtIhijT.exe

C:\Windows\System\NtIhijT.exe

C:\Windows\System\bxaYqGb.exe

C:\Windows\System\bxaYqGb.exe

C:\Windows\System\bcwkKuw.exe

C:\Windows\System\bcwkKuw.exe

C:\Windows\System\zVrkXoR.exe

C:\Windows\System\zVrkXoR.exe

C:\Windows\System\OGYyFBS.exe

C:\Windows\System\OGYyFBS.exe

C:\Windows\System\xIBpRCz.exe

C:\Windows\System\xIBpRCz.exe

C:\Windows\System\psPbHFe.exe

C:\Windows\System\psPbHFe.exe

C:\Windows\System\dOnUhhq.exe

C:\Windows\System\dOnUhhq.exe

C:\Windows\System\PyceQhb.exe

C:\Windows\System\PyceQhb.exe

C:\Windows\System\mPwnCFb.exe

C:\Windows\System\mPwnCFb.exe

C:\Windows\System\pQUSVds.exe

C:\Windows\System\pQUSVds.exe

C:\Windows\System\CwuWdgT.exe

C:\Windows\System\CwuWdgT.exe

C:\Windows\System\NwPrpMc.exe

C:\Windows\System\NwPrpMc.exe

C:\Windows\System\XbwtzfP.exe

C:\Windows\System\XbwtzfP.exe

C:\Windows\System\qiyzfvT.exe

C:\Windows\System\qiyzfvT.exe

C:\Windows\System\PEWSMas.exe

C:\Windows\System\PEWSMas.exe

C:\Windows\System\YCmvPiu.exe

C:\Windows\System\YCmvPiu.exe

C:\Windows\System\uTijXgM.exe

C:\Windows\System\uTijXgM.exe

C:\Windows\System\UEJtOQx.exe

C:\Windows\System\UEJtOQx.exe

C:\Windows\System\JSLDLQl.exe

C:\Windows\System\JSLDLQl.exe

C:\Windows\System\enjfzSm.exe

C:\Windows\System\enjfzSm.exe

C:\Windows\System\FceCrSo.exe

C:\Windows\System\FceCrSo.exe

C:\Windows\System\IObaTOI.exe

C:\Windows\System\IObaTOI.exe

C:\Windows\System\tXOVAZL.exe

C:\Windows\System\tXOVAZL.exe

C:\Windows\System\TxyKrbV.exe

C:\Windows\System\TxyKrbV.exe

C:\Windows\System\FwsddsZ.exe

C:\Windows\System\FwsddsZ.exe

C:\Windows\System\kgjRSEC.exe

C:\Windows\System\kgjRSEC.exe

C:\Windows\System\kCisGQM.exe

C:\Windows\System\kCisGQM.exe

C:\Windows\System\ZRUQaiW.exe

C:\Windows\System\ZRUQaiW.exe

C:\Windows\System\xIWtwAC.exe

C:\Windows\System\xIWtwAC.exe

C:\Windows\System\JELgaoJ.exe

C:\Windows\System\JELgaoJ.exe

C:\Windows\System\nsDEfgC.exe

C:\Windows\System\nsDEfgC.exe

C:\Windows\System\JzJlhAM.exe

C:\Windows\System\JzJlhAM.exe

C:\Windows\System\VyqclrI.exe

C:\Windows\System\VyqclrI.exe

C:\Windows\System\ZYRceHh.exe

C:\Windows\System\ZYRceHh.exe

C:\Windows\System\iVaTVVY.exe

C:\Windows\System\iVaTVVY.exe

C:\Windows\System\GQBSJNf.exe

C:\Windows\System\GQBSJNf.exe

C:\Windows\System\geGFpiN.exe

C:\Windows\System\geGFpiN.exe

C:\Windows\System\uRRelqT.exe

C:\Windows\System\uRRelqT.exe

C:\Windows\System\vkfubLP.exe

C:\Windows\System\vkfubLP.exe

C:\Windows\System\xrQmMkc.exe

C:\Windows\System\xrQmMkc.exe

C:\Windows\System\xzXBIBZ.exe

C:\Windows\System\xzXBIBZ.exe

C:\Windows\System\ijFbnQp.exe

C:\Windows\System\ijFbnQp.exe

C:\Windows\System\zdUziLn.exe

C:\Windows\System\zdUziLn.exe

C:\Windows\System\zyBYMBE.exe

C:\Windows\System\zyBYMBE.exe

C:\Windows\System\veiYfnN.exe

C:\Windows\System\veiYfnN.exe

C:\Windows\System\EDYMvJf.exe

C:\Windows\System\EDYMvJf.exe

C:\Windows\System\uxwSaLL.exe

C:\Windows\System\uxwSaLL.exe

C:\Windows\System\OgDYWlr.exe

C:\Windows\System\OgDYWlr.exe

C:\Windows\System\UtgNSff.exe

C:\Windows\System\UtgNSff.exe

C:\Windows\System\uOlyswV.exe

C:\Windows\System\uOlyswV.exe

C:\Windows\System\phDQJee.exe

C:\Windows\System\phDQJee.exe

C:\Windows\System\csuvnHO.exe

C:\Windows\System\csuvnHO.exe

C:\Windows\System\rjVRsWM.exe

C:\Windows\System\rjVRsWM.exe

C:\Windows\System\WILgoVj.exe

C:\Windows\System\WILgoVj.exe

C:\Windows\System\EIGXRRM.exe

C:\Windows\System\EIGXRRM.exe

C:\Windows\System\EVxKoaz.exe

C:\Windows\System\EVxKoaz.exe

C:\Windows\System\rcvGIhr.exe

C:\Windows\System\rcvGIhr.exe

C:\Windows\System\JvybHpm.exe

C:\Windows\System\JvybHpm.exe

C:\Windows\System\PhyYAuL.exe

C:\Windows\System\PhyYAuL.exe

C:\Windows\System\okDAohc.exe

C:\Windows\System\okDAohc.exe

C:\Windows\System\sKtouhW.exe

C:\Windows\System\sKtouhW.exe

C:\Windows\System\vSyQEcu.exe

C:\Windows\System\vSyQEcu.exe

C:\Windows\System\mhzQPKf.exe

C:\Windows\System\mhzQPKf.exe

C:\Windows\System\cRQNLmn.exe

C:\Windows\System\cRQNLmn.exe

C:\Windows\System\cIUEZOw.exe

C:\Windows\System\cIUEZOw.exe

C:\Windows\System\uBoZzUU.exe

C:\Windows\System\uBoZzUU.exe

C:\Windows\System\JsVqkHZ.exe

C:\Windows\System\JsVqkHZ.exe

C:\Windows\System\FUajryw.exe

C:\Windows\System\FUajryw.exe

C:\Windows\System\ILypSgG.exe

C:\Windows\System\ILypSgG.exe

C:\Windows\System\xhjAOwR.exe

C:\Windows\System\xhjAOwR.exe

C:\Windows\System\BGwRVdV.exe

C:\Windows\System\BGwRVdV.exe

C:\Windows\System\UyfJSuH.exe

C:\Windows\System\UyfJSuH.exe

C:\Windows\System\VfnYTTF.exe

C:\Windows\System\VfnYTTF.exe

C:\Windows\System\gAIDXrt.exe

C:\Windows\System\gAIDXrt.exe

C:\Windows\System\RasohJu.exe

C:\Windows\System\RasohJu.exe

C:\Windows\System\DQVKsZP.exe

C:\Windows\System\DQVKsZP.exe

C:\Windows\System\pXdZVgG.exe

C:\Windows\System\pXdZVgG.exe

C:\Windows\System\aIslsMd.exe

C:\Windows\System\aIslsMd.exe

C:\Windows\System\GkoduQs.exe

C:\Windows\System\GkoduQs.exe

C:\Windows\System\orYaNGZ.exe

C:\Windows\System\orYaNGZ.exe

C:\Windows\System\yZWKATv.exe

C:\Windows\System\yZWKATv.exe

C:\Windows\System\BjXEMuU.exe

C:\Windows\System\BjXEMuU.exe

C:\Windows\System\wJfuWvf.exe

C:\Windows\System\wJfuWvf.exe

C:\Windows\System\jFbrTST.exe

C:\Windows\System\jFbrTST.exe

C:\Windows\System\NcVJhFZ.exe

C:\Windows\System\NcVJhFZ.exe

C:\Windows\System\ZSZzjDy.exe

C:\Windows\System\ZSZzjDy.exe

C:\Windows\System\xlhMxqU.exe

C:\Windows\System\xlhMxqU.exe

C:\Windows\System\gCDehTO.exe

C:\Windows\System\gCDehTO.exe

C:\Windows\System\nRNAZjM.exe

C:\Windows\System\nRNAZjM.exe

C:\Windows\System\lyRhnEG.exe

C:\Windows\System\lyRhnEG.exe

C:\Windows\System\tOTDikz.exe

C:\Windows\System\tOTDikz.exe

C:\Windows\System\fhvqVlX.exe

C:\Windows\System\fhvqVlX.exe

C:\Windows\System\fFMuLEe.exe

C:\Windows\System\fFMuLEe.exe

C:\Windows\System\KeYmsMS.exe

C:\Windows\System\KeYmsMS.exe

C:\Windows\System\gLPhLjp.exe

C:\Windows\System\gLPhLjp.exe

C:\Windows\System\cNnIXSa.exe

C:\Windows\System\cNnIXSa.exe

C:\Windows\System\MOFIwRz.exe

C:\Windows\System\MOFIwRz.exe

C:\Windows\System\gLbDfgV.exe

C:\Windows\System\gLbDfgV.exe

C:\Windows\System\MKrAYkT.exe

C:\Windows\System\MKrAYkT.exe

C:\Windows\System\GZSdILh.exe

C:\Windows\System\GZSdILh.exe

C:\Windows\System\OrFYpXP.exe

C:\Windows\System\OrFYpXP.exe

C:\Windows\System\sHRtnEB.exe

C:\Windows\System\sHRtnEB.exe

C:\Windows\System\aaKRbzR.exe

C:\Windows\System\aaKRbzR.exe

C:\Windows\System\crvJZyc.exe

C:\Windows\System\crvJZyc.exe

C:\Windows\System\AxRtWDf.exe

C:\Windows\System\AxRtWDf.exe

C:\Windows\System\KzNlQzH.exe

C:\Windows\System\KzNlQzH.exe

C:\Windows\System\gAraSVd.exe

C:\Windows\System\gAraSVd.exe

C:\Windows\System\XXwwNEd.exe

C:\Windows\System\XXwwNEd.exe

C:\Windows\System\nzPkwBd.exe

C:\Windows\System\nzPkwBd.exe

C:\Windows\System\UcxaaOJ.exe

C:\Windows\System\UcxaaOJ.exe

C:\Windows\System\PJitTds.exe

C:\Windows\System\PJitTds.exe

C:\Windows\System\ZLTFdUs.exe

C:\Windows\System\ZLTFdUs.exe

C:\Windows\System\bPpBBfo.exe

C:\Windows\System\bPpBBfo.exe

C:\Windows\System\ibpkaWX.exe

C:\Windows\System\ibpkaWX.exe

C:\Windows\System\AHORFgs.exe

C:\Windows\System\AHORFgs.exe

C:\Windows\System\FuhPgnL.exe

C:\Windows\System\FuhPgnL.exe

C:\Windows\System\qmGWmXQ.exe

C:\Windows\System\qmGWmXQ.exe

C:\Windows\System\cJVevhL.exe

C:\Windows\System\cJVevhL.exe

C:\Windows\System\sMPxXRI.exe

C:\Windows\System\sMPxXRI.exe

C:\Windows\System\LWpzJvl.exe

C:\Windows\System\LWpzJvl.exe

C:\Windows\System\JROlBhq.exe

C:\Windows\System\JROlBhq.exe

C:\Windows\System\rStEyVP.exe

C:\Windows\System\rStEyVP.exe

C:\Windows\System\LGYFDEl.exe

C:\Windows\System\LGYFDEl.exe

C:\Windows\System\shIgOiX.exe

C:\Windows\System\shIgOiX.exe

C:\Windows\System\AwHFqqz.exe

C:\Windows\System\AwHFqqz.exe

C:\Windows\System\QzdGIcz.exe

C:\Windows\System\QzdGIcz.exe

C:\Windows\System\ZYfHKaw.exe

C:\Windows\System\ZYfHKaw.exe

C:\Windows\System\NwASyER.exe

C:\Windows\System\NwASyER.exe

C:\Windows\System\xcFmUzJ.exe

C:\Windows\System\xcFmUzJ.exe

C:\Windows\System\xWLjAUj.exe

C:\Windows\System\xWLjAUj.exe

C:\Windows\System\DoxKgHc.exe

C:\Windows\System\DoxKgHc.exe

C:\Windows\System\lUZikDG.exe

C:\Windows\System\lUZikDG.exe

C:\Windows\System\OaKmjIj.exe

C:\Windows\System\OaKmjIj.exe

C:\Windows\System\eYQlkoh.exe

C:\Windows\System\eYQlkoh.exe

C:\Windows\System\zvdadYy.exe

C:\Windows\System\zvdadYy.exe

C:\Windows\System\IiGoRtM.exe

C:\Windows\System\IiGoRtM.exe

C:\Windows\System\UQxLmZH.exe

C:\Windows\System\UQxLmZH.exe

C:\Windows\System\mwbaWLb.exe

C:\Windows\System\mwbaWLb.exe

C:\Windows\System\wbokhti.exe

C:\Windows\System\wbokhti.exe

C:\Windows\System\FWFkFKa.exe

C:\Windows\System\FWFkFKa.exe

C:\Windows\System\ugSFETL.exe

C:\Windows\System\ugSFETL.exe

C:\Windows\System\iXYGYmT.exe

C:\Windows\System\iXYGYmT.exe

C:\Windows\System\lMtYUsq.exe

C:\Windows\System\lMtYUsq.exe

C:\Windows\System\mJumxsl.exe

C:\Windows\System\mJumxsl.exe

C:\Windows\System\fxQYXVm.exe

C:\Windows\System\fxQYXVm.exe

C:\Windows\System\QeVHHnR.exe

C:\Windows\System\QeVHHnR.exe

C:\Windows\System\DqhjvNZ.exe

C:\Windows\System\DqhjvNZ.exe

C:\Windows\System\UGYzyaV.exe

C:\Windows\System\UGYzyaV.exe

C:\Windows\System\nVsJfKE.exe

C:\Windows\System\nVsJfKE.exe

C:\Windows\System\JNXbxBb.exe

C:\Windows\System\JNXbxBb.exe

C:\Windows\System\gnsEmWQ.exe

C:\Windows\System\gnsEmWQ.exe

C:\Windows\System\kTyfsSl.exe

C:\Windows\System\kTyfsSl.exe

C:\Windows\System\VdWHATP.exe

C:\Windows\System\VdWHATP.exe

C:\Windows\System\IZQXoNM.exe

C:\Windows\System\IZQXoNM.exe

C:\Windows\System\jMOZIpj.exe

C:\Windows\System\jMOZIpj.exe

C:\Windows\System\ZzMUDMU.exe

C:\Windows\System\ZzMUDMU.exe

C:\Windows\System\gmmMCvh.exe

C:\Windows\System\gmmMCvh.exe

C:\Windows\System\MaqEypv.exe

C:\Windows\System\MaqEypv.exe

C:\Windows\System\AmzAPIX.exe

C:\Windows\System\AmzAPIX.exe

C:\Windows\System\AGwESnT.exe

C:\Windows\System\AGwESnT.exe

C:\Windows\System\TnHsezO.exe

C:\Windows\System\TnHsezO.exe

C:\Windows\System\WiQPxHe.exe

C:\Windows\System\WiQPxHe.exe

C:\Windows\System\faVYJAG.exe

C:\Windows\System\faVYJAG.exe

C:\Windows\System\bQgoPUP.exe

C:\Windows\System\bQgoPUP.exe

C:\Windows\System\jULkPHa.exe

C:\Windows\System\jULkPHa.exe

C:\Windows\System\HHbXUua.exe

C:\Windows\System\HHbXUua.exe

C:\Windows\System\MYtxPph.exe

C:\Windows\System\MYtxPph.exe

C:\Windows\System\hnWaGKO.exe

C:\Windows\System\hnWaGKO.exe

C:\Windows\System\geOEWOJ.exe

C:\Windows\System\geOEWOJ.exe

C:\Windows\System\VPUtZwG.exe

C:\Windows\System\VPUtZwG.exe

C:\Windows\System\KGnwhQG.exe

C:\Windows\System\KGnwhQG.exe

C:\Windows\System\bGgUWrq.exe

C:\Windows\System\bGgUWrq.exe

C:\Windows\System\ejLBpJf.exe

C:\Windows\System\ejLBpJf.exe

C:\Windows\System\JeYeLQH.exe

C:\Windows\System\JeYeLQH.exe

C:\Windows\System\PBzxLuP.exe

C:\Windows\System\PBzxLuP.exe

C:\Windows\System\TPqvdxT.exe

C:\Windows\System\TPqvdxT.exe

C:\Windows\System\zIUBcbZ.exe

C:\Windows\System\zIUBcbZ.exe

C:\Windows\System\ogcOdpW.exe

C:\Windows\System\ogcOdpW.exe

C:\Windows\System\EPHKYDu.exe

C:\Windows\System\EPHKYDu.exe

C:\Windows\System\fRtPkkU.exe

C:\Windows\System\fRtPkkU.exe

C:\Windows\System\AJeAYzC.exe

C:\Windows\System\AJeAYzC.exe

C:\Windows\System\XVQQlMu.exe

C:\Windows\System\XVQQlMu.exe

C:\Windows\System\WpfDIUP.exe

C:\Windows\System\WpfDIUP.exe

C:\Windows\System\QHAsbzE.exe

C:\Windows\System\QHAsbzE.exe

C:\Windows\System\wXaelsB.exe

C:\Windows\System\wXaelsB.exe

C:\Windows\System\IpHTBAd.exe

C:\Windows\System\IpHTBAd.exe

C:\Windows\System\LZERkrq.exe

C:\Windows\System\LZERkrq.exe

C:\Windows\System\BcJDfje.exe

C:\Windows\System\BcJDfje.exe

C:\Windows\System\mNUIYSy.exe

C:\Windows\System\mNUIYSy.exe

C:\Windows\System\Grasyls.exe

C:\Windows\System\Grasyls.exe

C:\Windows\System\SjLSNdW.exe

C:\Windows\System\SjLSNdW.exe

C:\Windows\System\VgrNtQA.exe

C:\Windows\System\VgrNtQA.exe

C:\Windows\System\enTfRvi.exe

C:\Windows\System\enTfRvi.exe

C:\Windows\System\WLGhuqT.exe

C:\Windows\System\WLGhuqT.exe

C:\Windows\System\CvemHfy.exe

C:\Windows\System\CvemHfy.exe

C:\Windows\System\yBOckhY.exe

C:\Windows\System\yBOckhY.exe

C:\Windows\System\OlLBJXh.exe

C:\Windows\System\OlLBJXh.exe

C:\Windows\System\HBPcQwQ.exe

C:\Windows\System\HBPcQwQ.exe

C:\Windows\System\EPVhWZJ.exe

C:\Windows\System\EPVhWZJ.exe

C:\Windows\System\PCsVBzb.exe

C:\Windows\System\PCsVBzb.exe

C:\Windows\System\oroWDcN.exe

C:\Windows\System\oroWDcN.exe

C:\Windows\System\aoKGtBP.exe

C:\Windows\System\aoKGtBP.exe

C:\Windows\System\FelonSh.exe

C:\Windows\System\FelonSh.exe

C:\Windows\System\PbKwNzB.exe

C:\Windows\System\PbKwNzB.exe

C:\Windows\System\qIbnfAV.exe

C:\Windows\System\qIbnfAV.exe

C:\Windows\System\fRhGqDF.exe

C:\Windows\System\fRhGqDF.exe

C:\Windows\System\mgWpYKG.exe

C:\Windows\System\mgWpYKG.exe

C:\Windows\System\LiXaBNS.exe

C:\Windows\System\LiXaBNS.exe

C:\Windows\System\FHQxxvM.exe

C:\Windows\System\FHQxxvM.exe

C:\Windows\System\itGpmKH.exe

C:\Windows\System\itGpmKH.exe

C:\Windows\System\zOhvkEn.exe

C:\Windows\System\zOhvkEn.exe

C:\Windows\System\WcvWrjd.exe

C:\Windows\System\WcvWrjd.exe

C:\Windows\System\cyKVWFQ.exe

C:\Windows\System\cyKVWFQ.exe

C:\Windows\System\umQqGno.exe

C:\Windows\System\umQqGno.exe

C:\Windows\System\yqqOULl.exe

C:\Windows\System\yqqOULl.exe

C:\Windows\System\HImyYzR.exe

C:\Windows\System\HImyYzR.exe

C:\Windows\System\ETGIRKK.exe

C:\Windows\System\ETGIRKK.exe

C:\Windows\System\ewBeBpP.exe

C:\Windows\System\ewBeBpP.exe

C:\Windows\System\ysHLRmp.exe

C:\Windows\System\ysHLRmp.exe

C:\Windows\System\IfPELnB.exe

C:\Windows\System\IfPELnB.exe

C:\Windows\System\PszEZXU.exe

C:\Windows\System\PszEZXU.exe

C:\Windows\System\OEmdmFQ.exe

C:\Windows\System\OEmdmFQ.exe

C:\Windows\System\LRHQlcC.exe

C:\Windows\System\LRHQlcC.exe

C:\Windows\System\ccFJhyt.exe

C:\Windows\System\ccFJhyt.exe

C:\Windows\System\TrJneiU.exe

C:\Windows\System\TrJneiU.exe

C:\Windows\System\yFdJowV.exe

C:\Windows\System\yFdJowV.exe

C:\Windows\System\uUtbRXF.exe

C:\Windows\System\uUtbRXF.exe

C:\Windows\System\EFzSMOB.exe

C:\Windows\System\EFzSMOB.exe

C:\Windows\System\PJFFJgb.exe

C:\Windows\System\PJFFJgb.exe

C:\Windows\System\epDUYUO.exe

C:\Windows\System\epDUYUO.exe

C:\Windows\System\wPPzYNn.exe

C:\Windows\System\wPPzYNn.exe

C:\Windows\System\OzIfZgS.exe

C:\Windows\System\OzIfZgS.exe

C:\Windows\System\YETfhgn.exe

C:\Windows\System\YETfhgn.exe

C:\Windows\System\DXzNjPP.exe

C:\Windows\System\DXzNjPP.exe

C:\Windows\System\wSpZzzO.exe

C:\Windows\System\wSpZzzO.exe

C:\Windows\System\IACOhfH.exe

C:\Windows\System\IACOhfH.exe

C:\Windows\System\jHQAznC.exe

C:\Windows\System\jHQAznC.exe

C:\Windows\System\SzIqGlJ.exe

C:\Windows\System\SzIqGlJ.exe

C:\Windows\System\mJPHtpj.exe

C:\Windows\System\mJPHtpj.exe

C:\Windows\System\HjhDdEr.exe

C:\Windows\System\HjhDdEr.exe

C:\Windows\System\foIghUV.exe

C:\Windows\System\foIghUV.exe

C:\Windows\System\NBLaRHj.exe

C:\Windows\System\NBLaRHj.exe

C:\Windows\System\QKyqGtf.exe

C:\Windows\System\QKyqGtf.exe

C:\Windows\System\ZvzuTMx.exe

C:\Windows\System\ZvzuTMx.exe

C:\Windows\System\QVqEryZ.exe

C:\Windows\System\QVqEryZ.exe

C:\Windows\System\PDCFJkg.exe

C:\Windows\System\PDCFJkg.exe

C:\Windows\System\HlfbrQj.exe

C:\Windows\System\HlfbrQj.exe

C:\Windows\System\UcXrZdx.exe

C:\Windows\System\UcXrZdx.exe

C:\Windows\System\TdITIcL.exe

C:\Windows\System\TdITIcL.exe

C:\Windows\System\ngISVpd.exe

C:\Windows\System\ngISVpd.exe

C:\Windows\System\AaWENaK.exe

C:\Windows\System\AaWENaK.exe

C:\Windows\System\uxZxPhs.exe

C:\Windows\System\uxZxPhs.exe

C:\Windows\System\nOqUCvH.exe

C:\Windows\System\nOqUCvH.exe

C:\Windows\System\MoNosqI.exe

C:\Windows\System\MoNosqI.exe

C:\Windows\System\GrbHcJO.exe

C:\Windows\System\GrbHcJO.exe

C:\Windows\System\AAyZkxl.exe

C:\Windows\System\AAyZkxl.exe

C:\Windows\System\dnXQBXm.exe

C:\Windows\System\dnXQBXm.exe

C:\Windows\System\CEJFRqZ.exe

C:\Windows\System\CEJFRqZ.exe

C:\Windows\System\asFYkyd.exe

C:\Windows\System\asFYkyd.exe

C:\Windows\System\MNghaWq.exe

C:\Windows\System\MNghaWq.exe

C:\Windows\System\xQXBHIo.exe

C:\Windows\System\xQXBHIo.exe

C:\Windows\System\BcITvEq.exe

C:\Windows\System\BcITvEq.exe

C:\Windows\System\IcFRXIW.exe

C:\Windows\System\IcFRXIW.exe

C:\Windows\System\VOyHFyr.exe

C:\Windows\System\VOyHFyr.exe

C:\Windows\System\kVcjsfD.exe

C:\Windows\System\kVcjsfD.exe

C:\Windows\System\FkluByl.exe

C:\Windows\System\FkluByl.exe

C:\Windows\System\lOMnEfH.exe

C:\Windows\System\lOMnEfH.exe

C:\Windows\System\PlJNrxf.exe

C:\Windows\System\PlJNrxf.exe

C:\Windows\System\MQHrvPV.exe

C:\Windows\System\MQHrvPV.exe

C:\Windows\System\tNUdjFq.exe

C:\Windows\System\tNUdjFq.exe

C:\Windows\System\qArLbqb.exe

C:\Windows\System\qArLbqb.exe

C:\Windows\System\jsQwGnW.exe

C:\Windows\System\jsQwGnW.exe

C:\Windows\System\sHdRlmv.exe

C:\Windows\System\sHdRlmv.exe

C:\Windows\System\KwbTeKD.exe

C:\Windows\System\KwbTeKD.exe

C:\Windows\System\oPmnDDc.exe

C:\Windows\System\oPmnDDc.exe

C:\Windows\System\ZhQVLsy.exe

C:\Windows\System\ZhQVLsy.exe

C:\Windows\System\jIsPdCD.exe

C:\Windows\System\jIsPdCD.exe

C:\Windows\System\YUqYpVY.exe

C:\Windows\System\YUqYpVY.exe

C:\Windows\System\iQsEDbA.exe

C:\Windows\System\iQsEDbA.exe

C:\Windows\System\UJJVdJu.exe

C:\Windows\System\UJJVdJu.exe

C:\Windows\System\cbfoFSo.exe

C:\Windows\System\cbfoFSo.exe

C:\Windows\System\WfrefzA.exe

C:\Windows\System\WfrefzA.exe

C:\Windows\System\NbxMwPc.exe

C:\Windows\System\NbxMwPc.exe

C:\Windows\System\vtnUKfB.exe

C:\Windows\System\vtnUKfB.exe

C:\Windows\System\VFoUVqy.exe

C:\Windows\System\VFoUVqy.exe

C:\Windows\System\IdjJIuY.exe

C:\Windows\System\IdjJIuY.exe

C:\Windows\System\gsXtTBr.exe

C:\Windows\System\gsXtTBr.exe

C:\Windows\System\yiavdfh.exe

C:\Windows\System\yiavdfh.exe

C:\Windows\System\YkONxkK.exe

C:\Windows\System\YkONxkK.exe

C:\Windows\System\xIarbYp.exe

C:\Windows\System\xIarbYp.exe

C:\Windows\System\WcfmMjD.exe

C:\Windows\System\WcfmMjD.exe

C:\Windows\System\OAcDznS.exe

C:\Windows\System\OAcDznS.exe

C:\Windows\System\lKXIrMB.exe

C:\Windows\System\lKXIrMB.exe

C:\Windows\System\GWVAaWb.exe

C:\Windows\System\GWVAaWb.exe

C:\Windows\System\zlANGbK.exe

C:\Windows\System\zlANGbK.exe

C:\Windows\System\greGndb.exe

C:\Windows\System\greGndb.exe

C:\Windows\System\hdPkDXQ.exe

C:\Windows\System\hdPkDXQ.exe

C:\Windows\System\LDtmdBZ.exe

C:\Windows\System\LDtmdBZ.exe

C:\Windows\System\gwlqTWH.exe

C:\Windows\System\gwlqTWH.exe

C:\Windows\System\yfSYTSf.exe

C:\Windows\System\yfSYTSf.exe

C:\Windows\System\GwEQlEP.exe

C:\Windows\System\GwEQlEP.exe

C:\Windows\System\USuVcfW.exe

C:\Windows\System\USuVcfW.exe

C:\Windows\System\rVIdfGJ.exe

C:\Windows\System\rVIdfGJ.exe

C:\Windows\System\GTMraKO.exe

C:\Windows\System\GTMraKO.exe

C:\Windows\System\YFaiJsJ.exe

C:\Windows\System\YFaiJsJ.exe

C:\Windows\System\xqNbVnC.exe

C:\Windows\System\xqNbVnC.exe

C:\Windows\System\laixSwk.exe

C:\Windows\System\laixSwk.exe

C:\Windows\System\UKLvklZ.exe

C:\Windows\System\UKLvklZ.exe

C:\Windows\System\GcCEbue.exe

C:\Windows\System\GcCEbue.exe

C:\Windows\System\frdkcYT.exe

C:\Windows\System\frdkcYT.exe

C:\Windows\System\TCjkSvM.exe

C:\Windows\System\TCjkSvM.exe

C:\Windows\System\SuyTUFk.exe

C:\Windows\System\SuyTUFk.exe

C:\Windows\System\TMkHZoZ.exe

C:\Windows\System\TMkHZoZ.exe

C:\Windows\System\tXuXRfH.exe

C:\Windows\System\tXuXRfH.exe

C:\Windows\System\pClCbpi.exe

C:\Windows\System\pClCbpi.exe

C:\Windows\System\YEOWBue.exe

C:\Windows\System\YEOWBue.exe

C:\Windows\System\CQPhUrN.exe

C:\Windows\System\CQPhUrN.exe

C:\Windows\System\zDdfwfM.exe

C:\Windows\System\zDdfwfM.exe

C:\Windows\System\ZaawloY.exe

C:\Windows\System\ZaawloY.exe

C:\Windows\System\uElNANE.exe

C:\Windows\System\uElNANE.exe

C:\Windows\System\oKUcTAW.exe

C:\Windows\System\oKUcTAW.exe

C:\Windows\System\gSQWsJU.exe

C:\Windows\System\gSQWsJU.exe

C:\Windows\System\SDSuouP.exe

C:\Windows\System\SDSuouP.exe

C:\Windows\System\KgESjMD.exe

C:\Windows\System\KgESjMD.exe

C:\Windows\System\mseqmeB.exe

C:\Windows\System\mseqmeB.exe

C:\Windows\System\zmeooEw.exe

C:\Windows\System\zmeooEw.exe

C:\Windows\System\SwwKhNE.exe

C:\Windows\System\SwwKhNE.exe

C:\Windows\System\RewCSAd.exe

C:\Windows\System\RewCSAd.exe

C:\Windows\System\uxLUflo.exe

C:\Windows\System\uxLUflo.exe

C:\Windows\System\agjACIs.exe

C:\Windows\System\agjACIs.exe

C:\Windows\System\DtwFksd.exe

C:\Windows\System\DtwFksd.exe

C:\Windows\System\rulAkWF.exe

C:\Windows\System\rulAkWF.exe

C:\Windows\System\JpKzkEj.exe

C:\Windows\System\JpKzkEj.exe

C:\Windows\System\zjJECbX.exe

C:\Windows\System\zjJECbX.exe

C:\Windows\System\IxPuQMO.exe

C:\Windows\System\IxPuQMO.exe

C:\Windows\System\xOgbHUL.exe

C:\Windows\System\xOgbHUL.exe

C:\Windows\System\nZTFkkI.exe

C:\Windows\System\nZTFkkI.exe

C:\Windows\System\ljDWbNN.exe

C:\Windows\System\ljDWbNN.exe

C:\Windows\System\ZTpdkaF.exe

C:\Windows\System\ZTpdkaF.exe

C:\Windows\System\EDuuaFe.exe

C:\Windows\System\EDuuaFe.exe

C:\Windows\System\VZBnRZi.exe

C:\Windows\System\VZBnRZi.exe

C:\Windows\System\zNeeIPs.exe

C:\Windows\System\zNeeIPs.exe

C:\Windows\System\ZHdXWRo.exe

C:\Windows\System\ZHdXWRo.exe

C:\Windows\System\jWANqmu.exe

C:\Windows\System\jWANqmu.exe

C:\Windows\System\caJgPaK.exe

C:\Windows\System\caJgPaK.exe

C:\Windows\System\eGMrCjv.exe

C:\Windows\System\eGMrCjv.exe

C:\Windows\System\oDZLKMq.exe

C:\Windows\System\oDZLKMq.exe

C:\Windows\System\vRlPoTU.exe

C:\Windows\System\vRlPoTU.exe

C:\Windows\System\CXFSizR.exe

C:\Windows\System\CXFSizR.exe

C:\Windows\System\sjukqro.exe

C:\Windows\System\sjukqro.exe

C:\Windows\System\UAuYpBl.exe

C:\Windows\System\UAuYpBl.exe

C:\Windows\System\TQSvGSW.exe

C:\Windows\System\TQSvGSW.exe

C:\Windows\System\ZoAjbTk.exe

C:\Windows\System\ZoAjbTk.exe

C:\Windows\System\bIWvyNw.exe

C:\Windows\System\bIWvyNw.exe

C:\Windows\System\CyuXJPN.exe

C:\Windows\System\CyuXJPN.exe

C:\Windows\System\khHDpxn.exe

C:\Windows\System\khHDpxn.exe

C:\Windows\System\BcgrqmF.exe

C:\Windows\System\BcgrqmF.exe

C:\Windows\System\jgoTOkX.exe

C:\Windows\System\jgoTOkX.exe

C:\Windows\System\NwNRlPL.exe

C:\Windows\System\NwNRlPL.exe

C:\Windows\System\uXsVHrG.exe

C:\Windows\System\uXsVHrG.exe

C:\Windows\System\PMMIDOJ.exe

C:\Windows\System\PMMIDOJ.exe

C:\Windows\System\WjfhQoB.exe

C:\Windows\System\WjfhQoB.exe

C:\Windows\System\PEqBqZb.exe

C:\Windows\System\PEqBqZb.exe

C:\Windows\System\clXILCi.exe

C:\Windows\System\clXILCi.exe

C:\Windows\System\BgfYcKh.exe

C:\Windows\System\BgfYcKh.exe

C:\Windows\System\OzeTZFL.exe

C:\Windows\System\OzeTZFL.exe

C:\Windows\System\eKodCeh.exe

C:\Windows\System\eKodCeh.exe

C:\Windows\System\EziBMtF.exe

C:\Windows\System\EziBMtF.exe

C:\Windows\System\RQVDbFV.exe

C:\Windows\System\RQVDbFV.exe

C:\Windows\System\vAkFudH.exe

C:\Windows\System\vAkFudH.exe

C:\Windows\System\XVcnlrZ.exe

C:\Windows\System\XVcnlrZ.exe

C:\Windows\System\gswIoCV.exe

C:\Windows\System\gswIoCV.exe

C:\Windows\System\AztCDkI.exe

C:\Windows\System\AztCDkI.exe

C:\Windows\System\IxtsVVp.exe

C:\Windows\System\IxtsVVp.exe

C:\Windows\System\FXSuVgf.exe

C:\Windows\System\FXSuVgf.exe

C:\Windows\System\nLVkXvs.exe

C:\Windows\System\nLVkXvs.exe

C:\Windows\System\IpuLlQD.exe

C:\Windows\System\IpuLlQD.exe

C:\Windows\System\JaWIasD.exe

C:\Windows\System\JaWIasD.exe

C:\Windows\System\HvOnlAm.exe

C:\Windows\System\HvOnlAm.exe

C:\Windows\System\mFsLKAM.exe

C:\Windows\System\mFsLKAM.exe

C:\Windows\System\gevvspt.exe

C:\Windows\System\gevvspt.exe

C:\Windows\System\DZrKyTU.exe

C:\Windows\System\DZrKyTU.exe

C:\Windows\System\KttrZxr.exe

C:\Windows\System\KttrZxr.exe

C:\Windows\System\uMvPVbk.exe

C:\Windows\System\uMvPVbk.exe

C:\Windows\System\vnTDkoJ.exe

C:\Windows\System\vnTDkoJ.exe

C:\Windows\System\ZLaAgdJ.exe

C:\Windows\System\ZLaAgdJ.exe

C:\Windows\System\boMrbWE.exe

C:\Windows\System\boMrbWE.exe

C:\Windows\System\NEqWvev.exe

C:\Windows\System\NEqWvev.exe

C:\Windows\System\CnVgtPE.exe

C:\Windows\System\CnVgtPE.exe

C:\Windows\System\KhuRQgm.exe

C:\Windows\System\KhuRQgm.exe

C:\Windows\System\bhLZYFb.exe

C:\Windows\System\bhLZYFb.exe

C:\Windows\System\LXubQfV.exe

C:\Windows\System\LXubQfV.exe

C:\Windows\System\UTyIUco.exe

C:\Windows\System\UTyIUco.exe

C:\Windows\System\isFPvBB.exe

C:\Windows\System\isFPvBB.exe

C:\Windows\System\dnSiiKT.exe

C:\Windows\System\dnSiiKT.exe

C:\Windows\System\LhHyoYi.exe

C:\Windows\System\LhHyoYi.exe

C:\Windows\System\FiOgasi.exe

C:\Windows\System\FiOgasi.exe

C:\Windows\System\OTwJZdk.exe

C:\Windows\System\OTwJZdk.exe

C:\Windows\System\dZuepUH.exe

C:\Windows\System\dZuepUH.exe

C:\Windows\System\ScdHlSl.exe

C:\Windows\System\ScdHlSl.exe

C:\Windows\System\OGsQdjy.exe

C:\Windows\System\OGsQdjy.exe

C:\Windows\System\jTzDcuM.exe

C:\Windows\System\jTzDcuM.exe

C:\Windows\System\TsOHYRV.exe

C:\Windows\System\TsOHYRV.exe

C:\Windows\System\YkimXBp.exe

C:\Windows\System\YkimXBp.exe

C:\Windows\System\enmryLv.exe

C:\Windows\System\enmryLv.exe

C:\Windows\System\KwHmMlw.exe

C:\Windows\System\KwHmMlw.exe

C:\Windows\System\HaGgiUq.exe

C:\Windows\System\HaGgiUq.exe

C:\Windows\System\KYCvAan.exe

C:\Windows\System\KYCvAan.exe

C:\Windows\System\xepLZqE.exe

C:\Windows\System\xepLZqE.exe

C:\Windows\System\LRBCKBX.exe

C:\Windows\System\LRBCKBX.exe

C:\Windows\System\FaXeDxE.exe

C:\Windows\System\FaXeDxE.exe

C:\Windows\System\IIclEqc.exe

C:\Windows\System\IIclEqc.exe

C:\Windows\System\lMRgcmu.exe

C:\Windows\System\lMRgcmu.exe

C:\Windows\System\oUnGVQn.exe

C:\Windows\System\oUnGVQn.exe

C:\Windows\System\fLkPprR.exe

C:\Windows\System\fLkPprR.exe

C:\Windows\System\GOWDTXl.exe

C:\Windows\System\GOWDTXl.exe

C:\Windows\System\XiYvDlh.exe

C:\Windows\System\XiYvDlh.exe

C:\Windows\System\zLabjJH.exe

C:\Windows\System\zLabjJH.exe

C:\Windows\System\nizQprq.exe

C:\Windows\System\nizQprq.exe

C:\Windows\System\bEkuabQ.exe

C:\Windows\System\bEkuabQ.exe

C:\Windows\System\ZtVzWyj.exe

C:\Windows\System\ZtVzWyj.exe

C:\Windows\System\wVMSyeW.exe

C:\Windows\System\wVMSyeW.exe

C:\Windows\System\ZfOqAZJ.exe

C:\Windows\System\ZfOqAZJ.exe

C:\Windows\System\iwFSake.exe

C:\Windows\System\iwFSake.exe

C:\Windows\System\NdWkeFF.exe

C:\Windows\System\NdWkeFF.exe

C:\Windows\System\TnpgMSv.exe

C:\Windows\System\TnpgMSv.exe

C:\Windows\System\oalUzpK.exe

C:\Windows\System\oalUzpK.exe

C:\Windows\System\LpKsSOx.exe

C:\Windows\System\LpKsSOx.exe

C:\Windows\System\uRmegGx.exe

C:\Windows\System\uRmegGx.exe

C:\Windows\System\NSPoBrH.exe

C:\Windows\System\NSPoBrH.exe

C:\Windows\System\ZuvtJXv.exe

C:\Windows\System\ZuvtJXv.exe

C:\Windows\System\AHsbKHL.exe

C:\Windows\System\AHsbKHL.exe

C:\Windows\System\DeeboSI.exe

C:\Windows\System\DeeboSI.exe

C:\Windows\System\EZmEzNd.exe

C:\Windows\System\EZmEzNd.exe

C:\Windows\System\JJDpCSp.exe

C:\Windows\System\JJDpCSp.exe

C:\Windows\System\gMvEaHQ.exe

C:\Windows\System\gMvEaHQ.exe

C:\Windows\System\wfIpgpw.exe

C:\Windows\System\wfIpgpw.exe

C:\Windows\System\dZPWhpm.exe

C:\Windows\System\dZPWhpm.exe

C:\Windows\System\WsdNxXk.exe

C:\Windows\System\WsdNxXk.exe

C:\Windows\System\bUHurbq.exe

C:\Windows\System\bUHurbq.exe

C:\Windows\System\JlZRfwo.exe

C:\Windows\System\JlZRfwo.exe

C:\Windows\System\cpLnEEE.exe

C:\Windows\System\cpLnEEE.exe

C:\Windows\System\VPIAhYu.exe

C:\Windows\System\VPIAhYu.exe

C:\Windows\System\dRRvCWp.exe

C:\Windows\System\dRRvCWp.exe

C:\Windows\System\cnburhb.exe

C:\Windows\System\cnburhb.exe

C:\Windows\System\bwfEnhT.exe

C:\Windows\System\bwfEnhT.exe

C:\Windows\System\iZADDzM.exe

C:\Windows\System\iZADDzM.exe

C:\Windows\System\VEtCHoC.exe

C:\Windows\System\VEtCHoC.exe

C:\Windows\System\bebFTlo.exe

C:\Windows\System\bebFTlo.exe

C:\Windows\System\NtYwxgr.exe

C:\Windows\System\NtYwxgr.exe

C:\Windows\System\wbIjUyZ.exe

C:\Windows\System\wbIjUyZ.exe

C:\Windows\System\giRAdIQ.exe

C:\Windows\System\giRAdIQ.exe

C:\Windows\System\dzUDFWJ.exe

C:\Windows\System\dzUDFWJ.exe

C:\Windows\System\abTRPxw.exe

C:\Windows\System\abTRPxw.exe

C:\Windows\System\SmykXSs.exe

C:\Windows\System\SmykXSs.exe

C:\Windows\System\pzrcOlW.exe

C:\Windows\System\pzrcOlW.exe

C:\Windows\System\SnUvkzF.exe

C:\Windows\System\SnUvkzF.exe

C:\Windows\System\RASgNTD.exe

C:\Windows\System\RASgNTD.exe

C:\Windows\System\QuaKePY.exe

C:\Windows\System\QuaKePY.exe

C:\Windows\System\wCjXmKz.exe

C:\Windows\System\wCjXmKz.exe

C:\Windows\System\fXNzoFv.exe

C:\Windows\System\fXNzoFv.exe

C:\Windows\System\dJjCtnc.exe

C:\Windows\System\dJjCtnc.exe

C:\Windows\System\xymDTvB.exe

C:\Windows\System\xymDTvB.exe

C:\Windows\System\NrwNwXy.exe

C:\Windows\System\NrwNwXy.exe

C:\Windows\System\HgKNKub.exe

C:\Windows\System\HgKNKub.exe

C:\Windows\System\XWTgVWN.exe

C:\Windows\System\XWTgVWN.exe

C:\Windows\System\mQMQDIV.exe

C:\Windows\System\mQMQDIV.exe

C:\Windows\System\srsuzDJ.exe

C:\Windows\System\srsuzDJ.exe

C:\Windows\System\ZIrgbay.exe

C:\Windows\System\ZIrgbay.exe

C:\Windows\System\qWumAMj.exe

C:\Windows\System\qWumAMj.exe

C:\Windows\System\vJjNHSm.exe

C:\Windows\System\vJjNHSm.exe

C:\Windows\System\HJkmqby.exe

C:\Windows\System\HJkmqby.exe

C:\Windows\System\zFbBEaZ.exe

C:\Windows\System\zFbBEaZ.exe

C:\Windows\System\ItZFSdx.exe

C:\Windows\System\ItZFSdx.exe

C:\Windows\System\FXWQGHp.exe

C:\Windows\System\FXWQGHp.exe

C:\Windows\System\KElXfSn.exe

C:\Windows\System\KElXfSn.exe

C:\Windows\System\PyFEGvs.exe

C:\Windows\System\PyFEGvs.exe

C:\Windows\System\gWGnIlW.exe

C:\Windows\System\gWGnIlW.exe

C:\Windows\System\MznoUHn.exe

C:\Windows\System\MznoUHn.exe

C:\Windows\System\tJqpBay.exe

C:\Windows\System\tJqpBay.exe

C:\Windows\System\FeBjusi.exe

C:\Windows\System\FeBjusi.exe

C:\Windows\System\OTylPfV.exe

C:\Windows\System\OTylPfV.exe

C:\Windows\System\VceHnjz.exe

C:\Windows\System\VceHnjz.exe

C:\Windows\System\vuuYSZI.exe

C:\Windows\System\vuuYSZI.exe

C:\Windows\System\DzqprcO.exe

C:\Windows\System\DzqprcO.exe

C:\Windows\System\Owjrwgu.exe

C:\Windows\System\Owjrwgu.exe

C:\Windows\System\MiPYrWt.exe

C:\Windows\System\MiPYrWt.exe

C:\Windows\System\EASofvM.exe

C:\Windows\System\EASofvM.exe

C:\Windows\System\ggnvXgK.exe

C:\Windows\System\ggnvXgK.exe

C:\Windows\System\bjWNMFy.exe

C:\Windows\System\bjWNMFy.exe

C:\Windows\System\hSOavwd.exe

C:\Windows\System\hSOavwd.exe

C:\Windows\System\PvKTDdg.exe

C:\Windows\System\PvKTDdg.exe

C:\Windows\System\lCRJUFX.exe

C:\Windows\System\lCRJUFX.exe

C:\Windows\System\hfOInFf.exe

C:\Windows\System\hfOInFf.exe

C:\Windows\System\hfqfZLi.exe

C:\Windows\System\hfqfZLi.exe

C:\Windows\System\ibeDNLW.exe

C:\Windows\System\ibeDNLW.exe

C:\Windows\System\SdhanPH.exe

C:\Windows\System\SdhanPH.exe

C:\Windows\System\kHzgevB.exe

C:\Windows\System\kHzgevB.exe

C:\Windows\System\ogMZulh.exe

C:\Windows\System\ogMZulh.exe

C:\Windows\System\dmTTrsf.exe

C:\Windows\System\dmTTrsf.exe

C:\Windows\System\KGfRyfS.exe

C:\Windows\System\KGfRyfS.exe

C:\Windows\System\DjnjwRj.exe

C:\Windows\System\DjnjwRj.exe

C:\Windows\System\RVblaQz.exe

C:\Windows\System\RVblaQz.exe

C:\Windows\System\tOlZotq.exe

C:\Windows\System\tOlZotq.exe

C:\Windows\System\XGtKwEp.exe

C:\Windows\System\XGtKwEp.exe

C:\Windows\System\OVXXLJm.exe

C:\Windows\System\OVXXLJm.exe

C:\Windows\System\VFMfsLZ.exe

C:\Windows\System\VFMfsLZ.exe

C:\Windows\System\pSTxoQe.exe

C:\Windows\System\pSTxoQe.exe

C:\Windows\System\gxjWYva.exe

C:\Windows\System\gxjWYva.exe

C:\Windows\System\kCkFPie.exe

C:\Windows\System\kCkFPie.exe

C:\Windows\System\RxWgJJS.exe

C:\Windows\System\RxWgJJS.exe

C:\Windows\System\GYyyhKd.exe

C:\Windows\System\GYyyhKd.exe

C:\Windows\System\MbJGaCz.exe

C:\Windows\System\MbJGaCz.exe

C:\Windows\System\rSNMutD.exe

C:\Windows\System\rSNMutD.exe

C:\Windows\System\SBdLTSG.exe

C:\Windows\System\SBdLTSG.exe

C:\Windows\System\cPaqBOo.exe

C:\Windows\System\cPaqBOo.exe

C:\Windows\System\yyTDqDD.exe

C:\Windows\System\yyTDqDD.exe

C:\Windows\System\qXzAslB.exe

C:\Windows\System\qXzAslB.exe

C:\Windows\System\UHgdnyH.exe

C:\Windows\System\UHgdnyH.exe

C:\Windows\System\BYfXRhB.exe

C:\Windows\System\BYfXRhB.exe

C:\Windows\System\pVfiTbs.exe

C:\Windows\System\pVfiTbs.exe

C:\Windows\System\KpDZQYw.exe

C:\Windows\System\KpDZQYw.exe

C:\Windows\System\ffvSGAB.exe

C:\Windows\System\ffvSGAB.exe

C:\Windows\System\GJQQbEM.exe

C:\Windows\System\GJQQbEM.exe

C:\Windows\System\EoXOqRK.exe

C:\Windows\System\EoXOqRK.exe

C:\Windows\System\VdBBlRA.exe

C:\Windows\System\VdBBlRA.exe

C:\Windows\System\XvdeBfN.exe

C:\Windows\System\XvdeBfN.exe

C:\Windows\System\rRgXfin.exe

C:\Windows\System\rRgXfin.exe

C:\Windows\System\MNFCQBb.exe

C:\Windows\System\MNFCQBb.exe

C:\Windows\System\eGiDEvo.exe

C:\Windows\System\eGiDEvo.exe

C:\Windows\System\hmIwtrp.exe

C:\Windows\System\hmIwtrp.exe

C:\Windows\System\SMzxtIf.exe

C:\Windows\System\SMzxtIf.exe

C:\Windows\System\nCbfBAL.exe

C:\Windows\System\nCbfBAL.exe

C:\Windows\System\SlGtGye.exe

C:\Windows\System\SlGtGye.exe

C:\Windows\System\SADEkuH.exe

C:\Windows\System\SADEkuH.exe

C:\Windows\System\SXRddWS.exe

C:\Windows\System\SXRddWS.exe

C:\Windows\System\FJvOfei.exe

C:\Windows\System\FJvOfei.exe

C:\Windows\System\DwJWzPw.exe

C:\Windows\System\DwJWzPw.exe

C:\Windows\System\DiqVAwq.exe

C:\Windows\System\DiqVAwq.exe

C:\Windows\System\IngfJap.exe

C:\Windows\System\IngfJap.exe

C:\Windows\System\vsdVRqM.exe

C:\Windows\System\vsdVRqM.exe

C:\Windows\System\iXyIlGF.exe

C:\Windows\System\iXyIlGF.exe

C:\Windows\System\EjFBFBO.exe

C:\Windows\System\EjFBFBO.exe

C:\Windows\System\FbFvrEY.exe

C:\Windows\System\FbFvrEY.exe

C:\Windows\System\EAUBrjP.exe

C:\Windows\System\EAUBrjP.exe

C:\Windows\System\gnVgdCA.exe

C:\Windows\System\gnVgdCA.exe

C:\Windows\System\bVuaMAg.exe

C:\Windows\System\bVuaMAg.exe

C:\Windows\System\HlJyUIU.exe

C:\Windows\System\HlJyUIU.exe

C:\Windows\System\vFSgEAf.exe

C:\Windows\System\vFSgEAf.exe

C:\Windows\System\RILkNDF.exe

C:\Windows\System\RILkNDF.exe

C:\Windows\System\NdLDIhb.exe

C:\Windows\System\NdLDIhb.exe

C:\Windows\System\ilXPAIM.exe

C:\Windows\System\ilXPAIM.exe

C:\Windows\System\rtZQTDh.exe

C:\Windows\System\rtZQTDh.exe

C:\Windows\System\SYLbdbj.exe

C:\Windows\System\SYLbdbj.exe

C:\Windows\System\LxErGIU.exe

C:\Windows\System\LxErGIU.exe

C:\Windows\System\vnANUxH.exe

C:\Windows\System\vnANUxH.exe

C:\Windows\System\rzQKJav.exe

C:\Windows\System\rzQKJav.exe

C:\Windows\System\lnKfcwi.exe

C:\Windows\System\lnKfcwi.exe

C:\Windows\System\FoNOiMW.exe

C:\Windows\System\FoNOiMW.exe

C:\Windows\System\gEnYdJW.exe

C:\Windows\System\gEnYdJW.exe

C:\Windows\System\pHZtJIB.exe

C:\Windows\System\pHZtJIB.exe

C:\Windows\System\mlQloEe.exe

C:\Windows\System\mlQloEe.exe

C:\Windows\System\wpjRphV.exe

C:\Windows\System\wpjRphV.exe

C:\Windows\System\OKpGTBW.exe

C:\Windows\System\OKpGTBW.exe

C:\Windows\System\oWpKAUt.exe

C:\Windows\System\oWpKAUt.exe

C:\Windows\System\CPQTlCw.exe

C:\Windows\System\CPQTlCw.exe

C:\Windows\System\XGBTcrn.exe

C:\Windows\System\XGBTcrn.exe

C:\Windows\System\OQaqyGv.exe

C:\Windows\System\OQaqyGv.exe

C:\Windows\System\SKEvUUu.exe

C:\Windows\System\SKEvUUu.exe

C:\Windows\System\GYHRqkP.exe

C:\Windows\System\GYHRqkP.exe

C:\Windows\System\QNdOtTc.exe

C:\Windows\System\QNdOtTc.exe

C:\Windows\System\xOuDheG.exe

C:\Windows\System\xOuDheG.exe

C:\Windows\System\RrGExPH.exe

C:\Windows\System\RrGExPH.exe

C:\Windows\System\lWnRhfU.exe

C:\Windows\System\lWnRhfU.exe

C:\Windows\System\WtTTcMm.exe

C:\Windows\System\WtTTcMm.exe

C:\Windows\System\GNLIrPO.exe

C:\Windows\System\GNLIrPO.exe

C:\Windows\System\JyVSiTZ.exe

C:\Windows\System\JyVSiTZ.exe

C:\Windows\System\YUKuUgp.exe

C:\Windows\System\YUKuUgp.exe

C:\Windows\System\VcsFSvb.exe

C:\Windows\System\VcsFSvb.exe

C:\Windows\System\pmkfNVX.exe

C:\Windows\System\pmkfNVX.exe

C:\Windows\System\CSNUATn.exe

C:\Windows\System\CSNUATn.exe

C:\Windows\System\XRLikCh.exe

C:\Windows\System\XRLikCh.exe

C:\Windows\System\ZcmioTA.exe

C:\Windows\System\ZcmioTA.exe

C:\Windows\System\zgEapvF.exe

C:\Windows\System\zgEapvF.exe

C:\Windows\System\pFgfgms.exe

C:\Windows\System\pFgfgms.exe

C:\Windows\System\GFkfXrJ.exe

C:\Windows\System\GFkfXrJ.exe

C:\Windows\System\vbOwAqG.exe

C:\Windows\System\vbOwAqG.exe

C:\Windows\System\xuPIKCg.exe

C:\Windows\System\xuPIKCg.exe

C:\Windows\System\vBWPdfy.exe

C:\Windows\System\vBWPdfy.exe

C:\Windows\System\OMEQLUz.exe

C:\Windows\System\OMEQLUz.exe

C:\Windows\System\IcYFsWe.exe

C:\Windows\System\IcYFsWe.exe

C:\Windows\System\Iszrbbr.exe

C:\Windows\System\Iszrbbr.exe

C:\Windows\System\JQWiGYI.exe

C:\Windows\System\JQWiGYI.exe

C:\Windows\System\MWNHfaQ.exe

C:\Windows\System\MWNHfaQ.exe

C:\Windows\System\dOpfduQ.exe

C:\Windows\System\dOpfduQ.exe

C:\Windows\System\zHIWuJq.exe

C:\Windows\System\zHIWuJq.exe

C:\Windows\System\AozaYUd.exe

C:\Windows\System\AozaYUd.exe

C:\Windows\System\XitfOhd.exe

C:\Windows\System\XitfOhd.exe

C:\Windows\System\XTPsOdC.exe

C:\Windows\System\XTPsOdC.exe

C:\Windows\System\ZNDeZUE.exe

C:\Windows\System\ZNDeZUE.exe

C:\Windows\System\YAEycGW.exe

C:\Windows\System\YAEycGW.exe

C:\Windows\System\wIJwIYu.exe

C:\Windows\System\wIJwIYu.exe

C:\Windows\System\tThGZqu.exe

C:\Windows\System\tThGZqu.exe

C:\Windows\System\ObVGFeb.exe

C:\Windows\System\ObVGFeb.exe

C:\Windows\System\SCMrkPu.exe

C:\Windows\System\SCMrkPu.exe

C:\Windows\System\HCDgJor.exe

C:\Windows\System\HCDgJor.exe

C:\Windows\System\jLOEGFb.exe

C:\Windows\System\jLOEGFb.exe

C:\Windows\System\BewfSrM.exe

C:\Windows\System\BewfSrM.exe

C:\Windows\System\MtdTryv.exe

C:\Windows\System\MtdTryv.exe

C:\Windows\System\cvAwDYg.exe

C:\Windows\System\cvAwDYg.exe

C:\Windows\System\ivYkMEo.exe

C:\Windows\System\ivYkMEo.exe

C:\Windows\System\wnPClOj.exe

C:\Windows\System\wnPClOj.exe

C:\Windows\System\azaQGyG.exe

C:\Windows\System\azaQGyG.exe

C:\Windows\System\EzQDEOT.exe

C:\Windows\System\EzQDEOT.exe

C:\Windows\System\pkjPhRm.exe

C:\Windows\System\pkjPhRm.exe

C:\Windows\System\mmDkWrd.exe

C:\Windows\System\mmDkWrd.exe

C:\Windows\System\fpwVGHZ.exe

C:\Windows\System\fpwVGHZ.exe

C:\Windows\System\vJnaezS.exe

C:\Windows\System\vJnaezS.exe

C:\Windows\System\FJjnzzn.exe

C:\Windows\System\FJjnzzn.exe

C:\Windows\System\LBMHOOJ.exe

C:\Windows\System\LBMHOOJ.exe

C:\Windows\System\AAybbMQ.exe

C:\Windows\System\AAybbMQ.exe

C:\Windows\System\mocRvea.exe

C:\Windows\System\mocRvea.exe

C:\Windows\System\jNAmrQg.exe

C:\Windows\System\jNAmrQg.exe

C:\Windows\System\YUkuRtx.exe

C:\Windows\System\YUkuRtx.exe

C:\Windows\System\VjTeyZP.exe

C:\Windows\System\VjTeyZP.exe

C:\Windows\System\LXVLwCl.exe

C:\Windows\System\LXVLwCl.exe

C:\Windows\System\AMnkHEM.exe

C:\Windows\System\AMnkHEM.exe

C:\Windows\System\owNvmzs.exe

C:\Windows\System\owNvmzs.exe

C:\Windows\System\cOvMjPu.exe

C:\Windows\System\cOvMjPu.exe

C:\Windows\System\hOrfJPt.exe

C:\Windows\System\hOrfJPt.exe

C:\Windows\System\YnHBWsJ.exe

C:\Windows\System\YnHBWsJ.exe

C:\Windows\System\yNXzHMJ.exe

C:\Windows\System\yNXzHMJ.exe

Network

N/A

Files

memory/2072-0-0x000000013F2B0000-0x000000013F601000-memory.dmp

memory/2072-1-0x00000000002F0000-0x0000000000300000-memory.dmp

\Windows\system\tgzpGZx.exe

MD5	78e110fb36508a360a9065f40b039555
SHA1	a87e42121415a4cd78dee47ee5f3e14181d68939
SHA256	ac5d585ef729aaed3acd372b1f46be2acb170c3f982bd2a7308cce514c3a87c7
SHA512	d5705ce54d16c3aa213e29592a74119938eb13ac8d4c609d05ab3418393ee80757a0e4c953230dcc5c70fc60649e6c8a5b5ce8f1b207b71445e495dd6c064312

memory/2860-8-0x000000013F830000-0x000000013FB81000-memory.dmp

C:\Windows\system\IAARtuz.exe

MD5	7c99c5338f4856bcd7643d04ed033fe8
SHA1	1ca3b7ae105925b2d278f0ecaa0f7a2c088620d0
SHA256	fc69e71487c594c33b6d087b0996df21bf866b74d3924122017bb3b80e13380d
SHA512	09b1ba6b465b4358db0ddad1488fe2578cbbb71a37df91f44b2604060f8c9e11fc3a125243391098e78f24e6ebde4456aff3c99b5655ddefe6228affd9be637f

C:\Windows\system\beoPgYt.exe

MD5	d48d6c19c922c765fb2b4969ab4d59fd
SHA1	9edc560304ae64dd497774b9e5920c49f423cbe3
SHA256	5c1dbb65607382abf33ca8c40e4095b6b8ed7e17ff038fff8648d0120a521534
SHA512	868dc963d78b75fb2b4d0d8cc29a7de4ec2551cf3f5126076fb4e9fc8831e64aba9a1a288ff5840eda48957ab87d28056f3f7af739aca7e3a470c946e5273723

\Windows\system\qShEGbJ.exe

MD5	017fc9611143c0fd67f43294165122bb
SHA1	9f55dbd95834b7379faac5565dd2556ee118f3b8
SHA256	04d39022859e1d1c6b85650ffcc53aeeccfecd83aca2367680bdeffab836716f
SHA512	6e7fc94b58d21928c106f8d863661dc8d2f737ada4ec40a9fc5a4d0f142e96a01d5d35162965f374d646b465887cdec744e74720f96cfe7ed398d5c9c177b2a2

C:\Windows\system\wffMhcw.exe

MD5	1271d858f172f3c812ac60f6ef98f913
SHA1	e0893163fe897697ee71b6cf7115eeb7756688ea
SHA256	ae1c0fab8a77828029ae529fe52064ee8e768e860176d984a6f0074ab7fbe50b
SHA512	b143605c31f98f06a58d71cbfcf80b3dcbbe8b434670c657219540939e7a41a84aed7c79631ff1d8e0deb467fad1c02a57e29b210032725e90caef9a520f94d1

C:\Windows\system\kLKjAfU.exe

MD5	0ce941c9edab57f98b3d771604c87676
SHA1	f7b7874d2f4283365057af379ee358f77560a336
SHA256	3e692066d270fcc71ceb22f77870da71e2d64e73be74616cf6df2470d272fe29
SHA512	d293dd5a42429d47a9f09e60fb4b0a764fbec2aad4b4eaab6a6ec11747168aafb88d4fae73771c07d482b1b775d6d64b0b078ee3fa0f5b1e5b21e36c25334fb1

\Windows\system\SNDjChP.exe

MD5	c4ecab0abe5a4112b424b6bd1784d8d4
SHA1	3c2eb8ff022522f9c2ff0168299214f9f74f1ecd
SHA256	2bb732a87ceb146d999a984b492f7db76dc0c87e2f6876bb28b822b6bf3f46f3
SHA512	206048898b8a3134156a7eec1e25138adac01e40f279051a56d0588d578d94c6d57eae9d3ae749c256a9a995964d9233afdd2514a7f617d63fd9134858b3bf46

C:\Windows\system\KSclqLF.exe

MD5	ce6af12faf2375f02cb224b0f5a56997
SHA1	b07677864475bcfc0e3911c6b153c2f768116cd3
SHA256	4b90dc9cce5e0d45f5b639f9b98c26394a6236892f89a0a2c18f6cc458607538
SHA512	e45dea465c8d3951a31168ac40187ecae17390bedf7276b992f64c4a3f4f2ec2691536622bfbb4a66566c69a490bb3c2113109244fa4efa942e1225ccdbe86f4

C:\Windows\system\nvSesqU.exe

MD5	b9c3992c843ed391a5b714e618bf83e4
SHA1	3c8012784cb43784ccaf8d17a68b8e33728a12e2
SHA256	0bed2496f3d41dceeb468dd2b310116bb1079ee44876fb723dbf89c3a0163847
SHA512	6bb0572670c1c2a92b82505e382ed1b756d0e13fe887438b4938cecee446ab4cbc9eadf82695ebada22f4009aee1056f93dda525369da62b2a118dd362d18bf1

C:\Windows\system\wOcdesQ.exe

MD5	8582e9ace70b0232385611df8e06c1a8
SHA1	52c73f703349b662645cae1b640a278e755240b3
SHA256	870aaa80373a53c4acb6790d6c8c11177f95034e0dfa8bfbd0fef73d9653997d
SHA512	5e49e259d3be31bccbbc90ca772cf1dca545b72f04e867ac9be95539297ebe723931f4aa7eec75b66458c67195ecc7f2ffd812c0b36937b7b8930717b1cb33bd

C:\Windows\system\WQEXjlr.exe

MD5	91968fd34acefa40044c224a93e1a9e6
SHA1	0ac0f985e47f7b571e405fdae8784028ab2e5ac4
SHA256	560b51d6ded90a7a673279cfc6982f7c50b542fe763849918a40a4fd251e3a99
SHA512	8c885e8abd3972734fc157122dd63cb080b1859e66f81289e1e6d494bb12958a28ff2b63b685f1a73842514cc9923097e3ccf4ab6621497d1ccd2436dd0ef4f8

C:\Windows\system\UBmLvKU.exe

MD5	1a33dfdf2a0f11fef56282e13bfb5b95
SHA1	0cd940b1c71d2800072cab0426b0394edffe5388
SHA256	cabdb42a42d8e9a12a9f6ece0977501dda286e93d343ad4a092f7a4c2d82989d
SHA512	9d72331889c4014a7056f5b85dc53e99e8c7ff6c3c7528deeb66f3910d0baf4d6091dd2ddd8a5db1b912e20b467d5ecb553d6800acd72b22ce3ee21378b7045c

C:\Windows\system\uHKfySd.exe

MD5	f2186d76c4f662b6d84ce4e7612243da
SHA1	131d9030804af7342603e950881dca8b8346fd50
SHA256	7a07149a5045cffd7159e776e15fa9b115bc8849fbc83ae6fcb98aa181499bcc
SHA512	0159bfe256069aa5d7e60c8335725b6c99ce9fb3f28819dbb0d17d9abad3c296c91905cab0c76f4fe999877c0a197c084df9cafa1d17d6155d0295ca1c681d2f

C:\Windows\system\OVmMMWI.exe

MD5	dfc8f533ff3a8d954787449430f9e866
SHA1	3cf1f1e715f3518a2adf36f8675b518402110668
SHA256	d36e997afe5d44ac7b37e5eaa24d8fe9527ce912865db956d3f4e33b88434c50
SHA512	23acfb5a18afb0a903648750720467892a268dc1711a91e19a08f858215040824fd4a8ba868a1921ce64046e98bce8ab5f1b7c4d95f4eb3275c5bb080bf4efb0

C:\Windows\system\TrCiwgm.exe

MD5	ef62f1aa09907d9453b23b30c90f23a2
SHA1	c8ebae3600f4313491a3e82990b1038f434d90f9
SHA256	9c325b184fbdda6f9cbae0e8b98c6ac2281922f19b75e50a44707681f00f8ccd
SHA512	e5c808dd7554a30f23c78f5d3cdab9992d25d72f59595180df1e14805d8067a8e661c37ec3cf76c2db298c17c9a5d31469ee1843be397776ae889f86f3425fea

C:\Windows\system\BQtsBnJ.exe

MD5	6ee14f4b2de22fe8237fb137c250e97b
SHA1	a98e6b809146c7e30733af279a77f74814ae87cc
SHA256	e7756e9546903f5880d09d3df46812365a679585e9b60434428d0331c08671b9
SHA512	0a3f7f704959e5dbd1aace110f4e582a5e1f428c71e974ffe58c079fc718d9e2ffadac100adf9f7b226fa030eb58ea1789b7f3b839c385a6eaa22a3bf31e3c65

C:\Windows\system\RUWNxOn.exe

MD5	eb1ef11c232c20b4d1bfc3ceaa348bee
SHA1	bdebdca569ab6dfb1d7cd32e544652a5f74f2f03
SHA256	e057c596a0818b76fbf119dd85c777f7515b2a32911165f241248bb37f90f7b6
SHA512	6bd9842492bc2f1413035ac753f8af3eedac0d45406955710838f7776db60664534e87d066d75f40de312921b1de811c168e0eb6c0640107cc00761f20e420f6

C:\Windows\system\XxNmPST.exe

MD5	ff0959e35ef6b92b36ed848e2d1f8080
SHA1	9481f37cbbee676c6fa04bda7c9bef99247b4191
SHA256	e5f1ad1a6985d209346ceb79f30b110dcd145c749f7473474a04a66b2fe2c035
SHA512	a97c7e82d06fd49e5ff6dbe016b2ea8d27f4a9d74c81e5d29674242e08992d94c0326760a11c95ab6b3b1648c5c7354bf5fb480baf1a687cf62b96879fd3f744

C:\Windows\system\JJqgoVX.exe

MD5	5c04583b004d2344a1f70a3ca7941dec
SHA1	440f22cc1a0613cffd46899585359e04a67c0353
SHA256	c3b372140cfd7f33cde701467bee5370e1f4f8b11301ec763c62943ebb436959
SHA512	b4211d5b61bef18d320b4bb80356ad619d533cf235e766d523975275742efc5328192234fe50e96b59b6e2eb823b41a80aa838fe0854bd43b2f8f6ea6410a4a8

C:\Windows\system\fFDKYHg.exe

MD5	969cc50ee73777fa1b88a4c7fc901e8b
SHA1	9fa633ab3214cb8f10746565f4477ae13db15041
SHA256	8b52f071e99560418ab4882d6d938845ffa538eb44cfcae812556a14201dd99e
SHA512	85503a9cb6c0a956e32295cd329b5c42dd70535cfdb5af065c29864df65f8173c3fccc2e4cec8bde52cba2fdcda7c86cd8d79a4e46f6159529ecd01844d1dbe7

C:\Windows\system\Wrnsvzi.exe

MD5	02cc27d6b732ff585ccb172ac7b8a374
SHA1	8bba42791f29fb3ab50fb6dd981b058588cfa9a1
SHA256	ea2d54885ea07d45f204dfdb3cc1e104bdfe99b0f5e94467bf0c17e8df3a4194
SHA512	630bdf5e454fb9c5d781c27ea1e538dabaef8326943e406e7d1b7c5d874a5cf028673c4f29e7e68a94eda82aa48fc96a52f4d775771acdfacf97cdf419a9edcc

C:\Windows\system\HfoiFlr.exe

MD5	5a3df8ec453c80bb043f0d1be15b7021
SHA1	fc00a9cdfed12239d16eb5c13fca543eaf465204
SHA256	7177dd106cd773bd751d4c329c0171e8ad705d07186023c0be7737dff9ef3997
SHA512	f7418908e2c357048d27aef2498d3b490b6801e593e51bc67e540346cb1720fa6ef704ed0889890e577a8f655b67dc0c3f14790843cd3416906f003b970b3cee

C:\Windows\system\pyXqkRJ.exe

MD5	53ce61b4eb34eb8f3f4abb4c686894dc
SHA1	eb73d6442faf70058136bbee5389538e5c0cf2d1
SHA256	ad2b7bd045520b2a9a817ea0f35963d0bbd4d95e52e422bcb7d15ff16a41211b
SHA512	10f52832cdb3db2f3a5e1d82ff8c7cda39c0eca03a7f53c5e1bdd307aba5e40c4455b64aee3c0fff9f8e41cc0c5bc2122baf981d7bcec3918fd7293efd25aa73

C:\Windows\system\rOZmyTN.exe

MD5	fd9b1735003d2ea8cba87abe668e7d74
SHA1	9350ecd678d97444c0bbff811eaf83ccd20ebef2
SHA256	99de9d6e52525457901f6a51828c73b9c4f0221801de0c759e551ef3bb31bc9c
SHA512	1e1e54f0bc940c89a98814593b4b59bd14d55e4668b1c98fae7538d05a783dfda85f50bc523d1a7dfe6b026a2a5968043f7f0ed5b1e598c8ba31cd480471cec2

C:\Windows\system\ObCBawV.exe

MD5	ce369a87a9aa708c3f11b15913e6f732
SHA1	a5fd379df4aacde2e7a06c0903aa04887b27a4bc
SHA256	b458fb5118478be5931e5846a428b5ffbfbad8587a6f3c8aeb647507423d2dfc
SHA512	d78e85cb356381d69af026d4d43edf155f1cd5141cd0ed2ff5553dfb11f28f5c309653e20bd83ca31917c4256e5d55d358f070ac8ffba59542ae73216eb6c10b

C:\Windows\system\JBorKDl.exe

MD5	7d3ae9fdf8019e11598b693abfdae433
SHA1	be2d999845ba10dbfa840b91a4f9184655f440d3
SHA256	d82452044e82db3d5fb62e82a4fa462fdf820f5a90e59c4be7694f691a711a5e
SHA512	13d34e47acaf0cbaa56d9816fab2cd63d7f9155cb923f2c26f23e5f765f7cc4fa86f36b667007ee3dc6407f5228d0fe7ca880568a92bab24801a98b9565c876a

C:\Windows\system\qNetVOu.exe

MD5	a176f3e0d05f9dcae703f4b47ba72212
SHA1	58d80ce615e8e4bce405781d2c5fd8e9a6f889c5
SHA256	29843ebbf377bb8a96260b26a44f7e8fc03d401862ef16e25adcf5307891fb05
SHA512	d4b1920e91883acd9bd667c1fe1e46c7fdec697ab5582f62ab52d9ea7c9a4319bb1e4f700efe98b815fc5d60fbb47bbc990097e06c877adcf8c2dba50471257d

C:\Windows\system\tAyEBZP.exe

MD5	0dda397ca53e900ae3c15180379d15c6
SHA1	14639bc97828f49d4f0746995c5c1a3fb74716d7
SHA256	e5b5ed2779b73df73ea61b02be9baba0cb6b1c0cc43649f72906d0cde2ec7bac
SHA512	2d964b0b41cdf33d8d7a19d691858af3e5607b6cd313ed05baba7b04643214ea7f9a291f2fd55963029198df9f29d9bb30d78be50a253875c7b70d246cdf32ff

C:\Windows\system\vCzqoBV.exe

MD5	40db1c3b7a23812ed251579d20212a51
SHA1	33c9057ef31c0876301d8f630a42061770c32af1
SHA256	7a2d20526bf63cef80d5782f0453c03b2c87f9743c070cee9866b6bb371d4781
SHA512	421c759a677ef50869fc2a7ee50adeac72b200b1f86c3553cdb2c668f486cefaa791c446bb1518b3b3f69a89397fa9c0837aa79135b57dbc27ce36429329ca1a

C:\Windows\system\NdOoNvi.exe

MD5	150e28925b093a3c3dbaec5978cc13b1
SHA1	8cf3fb885a98c62fcfcd7004b118f807cd580a1f
SHA256	978d044a8b46119a104709167ba78b82403a1343765dd0bc7d50dd335dcad333
SHA512	fab289e966df0b00469b93a70cc0295a23328266ba4b8d93e0fc13cc8b449ca1493209d90fbb8e3321274877e8e4df57e4e50cadddc40da01ab5666d7f1a1bf0

C:\Windows\system\erNeebl.exe

MD5	0cdf9686e8675c31d685d59b3409b57b
SHA1	a3b1edba944a3c0807de404755c988e0c2138c46
SHA256	9561bcb67e61fc092799b5d7467e1cd2a8c04a8536bacb719ea7f29613893596
SHA512	f53f61500ca54e46d605412e3b7047755375e9bd5f8c08fd39c403d3535236a8f377b5f97e7b63b3f3110fda2944c86af8ff3b0a326c304f42557416deb3ef47

C:\Windows\system\GvArhqp.exe

MD5	2e684eee86440eb3791312aa29d4e564
SHA1	e6b928b201ec5fa333019ff56b61e9c2125b1f00
SHA256	b17f981466976cba8a0d15dda4a3ebcc9fca28f9f6886cb276e1704373df9a1e
SHA512	ebf92adbe8524d1285333e1c0e8f0fa18b122c772ab064ed36d20a87d0bb476db1488004d91950d9e48cef55b1352fbebf2502f2b675c8f4d8094ef83b3846bd

memory/2072-13-0x0000000001FC0000-0x0000000002311000-memory.dmp

memory/2440-332-0x000000013F5C0000-0x000000013F911000-memory.dmp

memory/2072-331-0x0000000001FC0000-0x0000000002311000-memory.dmp

memory/2072-340-0x0000000001FC0000-0x0000000002311000-memory.dmp

memory/2072-339-0x000000013F820000-0x000000013FB71000-memory.dmp

memory/2796-338-0x000000013F130000-0x000000013F481000-memory.dmp

memory/2072-337-0x0000000001FC0000-0x0000000002311000-memory.dmp

memory/2460-336-0x000000013F1B0000-0x000000013F501000-memory.dmp

memory/2072-335-0x0000000001FC0000-0x0000000002311000-memory.dmp

memory/2400-334-0x000000013FBD0000-0x000000013FF21000-memory.dmp

memory/2072-333-0x000000013FBD0000-0x000000013FF21000-memory.dmp

memory/2548-330-0x000000013F410000-0x000000013F761000-memory.dmp

memory/2072-329-0x0000000001FC0000-0x0000000002311000-memory.dmp

memory/2408-328-0x000000013F620000-0x000000013F971000-memory.dmp

memory/2072-327-0x000000013F620000-0x000000013F971000-memory.dmp

memory/2628-326-0x000000013F570000-0x000000013F8C1000-memory.dmp

memory/2072-325-0x0000000001FC0000-0x0000000002311000-memory.dmp

memory/2544-324-0x000000013F410000-0x000000013F761000-memory.dmp

memory/2072-323-0x0000000001FC0000-0x0000000002311000-memory.dmp

memory/2508-313-0x000000013FA40000-0x000000013FD91000-memory.dmp

memory/2072-311-0x000000013FA40000-0x000000013FD91000-memory.dmp

memory/2584-309-0x000000013FF50000-0x00000001402A1000-memory.dmp

memory/2072-298-0x000000013FF50000-0x00000001402A1000-memory.dmp

memory/2608-296-0x000000013F720000-0x000000013FA71000-memory.dmp

memory/2072-294-0x000000013F720000-0x000000013FA71000-memory.dmp

memory/2528-292-0x000000013F440000-0x000000013F791000-memory.dmp

memory/2968-276-0x000000013F3F0000-0x000000013F741000-memory.dmp

memory/2860-3753-0x000000013F830000-0x000000013FB81000-memory.dmp

memory/2400-4065-0x000000013FBD0000-0x000000013FF21000-memory.dmp

memory/2544-4063-0x000000013F410000-0x000000013F761000-memory.dmp

memory/2460-4062-0x000000013F1B0000-0x000000013F501000-memory.dmp

memory/2584-4061-0x000000013FF50000-0x00000001402A1000-memory.dmp

memory/2508-4082-0x000000013FA40000-0x000000013FD91000-memory.dmp

memory/2440-4084-0x000000013F5C0000-0x000000013F911000-memory.dmp

memory/2968-4085-0x000000013F3F0000-0x000000013F741000-memory.dmp

memory/2548-4075-0x000000013F410000-0x000000013F761000-memory.dmp

memory/2628-4072-0x000000013F570000-0x000000013F8C1000-memory.dmp

memory/2408-4066-0x000000013F620000-0x000000013F971000-memory.dmp

memory/2796-4512-0x000000013F130000-0x000000013F481000-memory.dmp

memory/2608-4514-0x000000013F720000-0x000000013FA71000-memory.dmp

memory/2528-4513-0x000000013F440000-0x000000013F791000-memory.dmp

memory/2072-6525-0x000000013F2B0000-0x000000013F601000-memory.dmp

memory/2072-6555-0x0000000001FC0000-0x0000000002311000-memory.dmp

memory/2072-6559-0x0000000001FC0000-0x0000000002311000-memory.dmp

memory/2072-6560-0x000000013FBD0000-0x000000013FF21000-memory.dmp

memory/2072-6561-0x0000000001FC0000-0x0000000002311000-memory.dmp

memory/2072-6562-0x000000013F820000-0x000000013FB71000-memory.dmp

memory/2072-6567-0x0000000001FC0000-0x0000000002311000-memory.dmp

Analysis: behavioral2

Detonation Overview

Submitted

2024-06-13 22:42

Reported

2024-06-13 22:45

Platform

win10v2004-20240611-en

Max time kernel

149s

Max time network

153s

Command Line

"C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe"

Signatures

xmrig

miner xmrig

XMRig Miner payload

miner

Description	Indicator	Process	Target
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A

Executes dropped EXE

Description	Indicator	Process	Target
N/A	N/A	C:\Windows\System\DdPnBta.exe	N/A
N/A	N/A	C:\Windows\System\KJhZHoa.exe	N/A
N/A	N/A	C:\Windows\System\TxZEXEK.exe	N/A
N/A	N/A	C:\Windows\System\gZarJGa.exe	N/A
N/A	N/A	C:\Windows\System\AQWxtRo.exe	N/A
N/A	N/A	C:\Windows\System\burnJwJ.exe	N/A
N/A	N/A	C:\Windows\System\eqTeBvr.exe	N/A
N/A	N/A	C:\Windows\System\rwxzycF.exe	N/A
N/A	N/A	C:\Windows\System\IPLeqVD.exe	N/A
N/A	N/A	C:\Windows\System\WbFDFnT.exe	N/A
N/A	N/A	C:\Windows\System\kUGCiYT.exe	N/A
N/A	N/A	C:\Windows\System\nceFosd.exe	N/A
N/A	N/A	C:\Windows\System\aYOsTHW.exe	N/A
N/A	N/A	C:\Windows\System\HUXNJOl.exe	N/A
N/A	N/A	C:\Windows\System\lzbOXcE.exe	N/A
N/A	N/A	C:\Windows\System\GzNrNfs.exe	N/A
N/A	N/A	C:\Windows\System\oXECras.exe	N/A
N/A	N/A	C:\Windows\System\IrUyiRK.exe	N/A
N/A	N/A	C:\Windows\System\dQufFAc.exe	N/A
N/A	N/A	C:\Windows\System\cbWXoJc.exe	N/A
N/A	N/A	C:\Windows\System\XfurzyP.exe	N/A
N/A	N/A	C:\Windows\System\dwizsfM.exe	N/A
N/A	N/A	C:\Windows\System\UyVeIlp.exe	N/A
N/A	N/A	C:\Windows\System\BtZclgg.exe	N/A
N/A	N/A	C:\Windows\System\wiDmkYd.exe	N/A
N/A	N/A	C:\Windows\System\ZpVHUca.exe	N/A
N/A	N/A	C:\Windows\System\wPVEgtY.exe	N/A
N/A	N/A	C:\Windows\System\VrGgRHW.exe	N/A
N/A	N/A	C:\Windows\System\dCmULrZ.exe	N/A
N/A	N/A	C:\Windows\System\eqnyBlH.exe	N/A
N/A	N/A	C:\Windows\System\fvYIOiG.exe	N/A
N/A	N/A	C:\Windows\System\nGiHJpU.exe	N/A
N/A	N/A	C:\Windows\System\dsKVqxU.exe	N/A
N/A	N/A	C:\Windows\System\NiCdAXC.exe	N/A
N/A	N/A	C:\Windows\System\AYsegwI.exe	N/A
N/A	N/A	C:\Windows\System\rZgnowP.exe	N/A
N/A	N/A	C:\Windows\System\PgtsKQz.exe	N/A
N/A	N/A	C:\Windows\System\ddfsfWx.exe	N/A
N/A	N/A	C:\Windows\System\BkAHwXY.exe	N/A
N/A	N/A	C:\Windows\System\jpCbdRf.exe	N/A
N/A	N/A	C:\Windows\System\VaUkCEt.exe	N/A
N/A	N/A	C:\Windows\System\MyCbzJn.exe	N/A
N/A	N/A	C:\Windows\System\aNluIPG.exe	N/A
N/A	N/A	C:\Windows\System\fIbzdwr.exe	N/A
N/A	N/A	C:\Windows\System\yUFOFUs.exe	N/A
N/A	N/A	C:\Windows\System\LvmriJm.exe	N/A
N/A	N/A	C:\Windows\System\bjcYrkB.exe	N/A
N/A	N/A	C:\Windows\System\iuKSLAN.exe	N/A
N/A	N/A	C:\Windows\System\qRIwjZa.exe	N/A
N/A	N/A	C:\Windows\System\QtygdjO.exe	N/A
N/A	N/A	C:\Windows\System\fKKYdQr.exe	N/A
N/A	N/A	C:\Windows\System\TFGQkeD.exe	N/A
N/A	N/A	C:\Windows\System\ucVCVxP.exe	N/A
N/A	N/A	C:\Windows\System\DvpwhbZ.exe	N/A
N/A	N/A	C:\Windows\System\ZhXckOF.exe	N/A
N/A	N/A	C:\Windows\System\uGAXPYY.exe	N/A
N/A	N/A	C:\Windows\System\DEUpXGH.exe	N/A
N/A	N/A	C:\Windows\System\eDhRnJn.exe	N/A
N/A	N/A	C:\Windows\System\troayzt.exe	N/A
N/A	N/A	C:\Windows\System\ztbehyP.exe	N/A
N/A	N/A	C:\Windows\System\VYljcfv.exe	N/A
N/A	N/A	C:\Windows\System\mGFPyQY.exe	N/A
N/A	N/A	C:\Windows\System\YqHhKlQ.exe	N/A
N/A	N/A	C:\Windows\System\jNLRIeF.exe	N/A

UPX packed file

upx

Description	Indicator	Process	Target
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A

Drops file in Windows directory

Description	Indicator	Process	Target
File created	C:\Windows\System\SlscZVu.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\wgBwLwr.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\OkDcWZB.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\YaHkzxE.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\UYUQlal.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\mHWQMcc.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\xHTUSly.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\bURPZbr.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\ybMcaRH.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\dYpDfwu.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\TgKepUk.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\gPIBusl.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\gJGAIad.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\DEMKzSL.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\uOtxNCo.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\ndgTTue.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\dpdDxAX.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\SKEROLh.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\VajYSMT.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\dvfcUei.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\hGerRsX.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\EEahzaF.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\dtqYdAU.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\biYocFS.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\CkRDhtL.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\HFZODPp.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\SzAUQuV.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\YrTpoZj.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\DrxRrAR.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\mRQstaC.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\tAamXnY.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\ihLMXPi.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\KmUSSGo.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\KzwgnXn.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\yICIkoK.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\JAhrvHC.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\BHdGbKJ.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\eCVwVed.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\zopnttY.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\rCwOuCs.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\dLdMuoX.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\wUFikSt.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\XSFqltz.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\elttmgh.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\ClIdfuW.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\kvjMsKe.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\aJUZqtY.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\GdQntQQ.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\UyVeIlp.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\sSoZlsZ.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\BpKjhIV.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\hBQcMlO.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\gYdpGXp.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\yLqErvS.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\DUuyYTL.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\UXfndoI.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\oNODZoQ.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\MbOpTef.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\aqRNnwK.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\bRIqOXK.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\lPrMDvQ.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\UgGVZSQ.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\OpJibYr.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\CrXZRJE.exe	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	N/A

Suspicious use of WriteProcessMemory

Description	Indicator	Process	Target
PID 2272 wrote to memory of 3008	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\DdPnBta.exe
PID 2272 wrote to memory of 3008	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\DdPnBta.exe
PID 2272 wrote to memory of 2592	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\KJhZHoa.exe
PID 2272 wrote to memory of 2592	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\KJhZHoa.exe
PID 2272 wrote to memory of 3948	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\TxZEXEK.exe
PID 2272 wrote to memory of 3948	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\TxZEXEK.exe
PID 2272 wrote to memory of 464	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\gZarJGa.exe
PID 2272 wrote to memory of 464	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\gZarJGa.exe
PID 2272 wrote to memory of 3636	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\AQWxtRo.exe
PID 2272 wrote to memory of 3636	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\AQWxtRo.exe
PID 2272 wrote to memory of 2696	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\rwxzycF.exe
PID 2272 wrote to memory of 2696	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\rwxzycF.exe
PID 2272 wrote to memory of 2060	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\burnJwJ.exe
PID 2272 wrote to memory of 2060	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\burnJwJ.exe
PID 2272 wrote to memory of 2652	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\eqTeBvr.exe
PID 2272 wrote to memory of 2652	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\eqTeBvr.exe
PID 2272 wrote to memory of 4824	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\IPLeqVD.exe
PID 2272 wrote to memory of 4824	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\IPLeqVD.exe
PID 2272 wrote to memory of 4864	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\WbFDFnT.exe
PID 2272 wrote to memory of 4864	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\WbFDFnT.exe
PID 2272 wrote to memory of 4232	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\kUGCiYT.exe
PID 2272 wrote to memory of 4232	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\kUGCiYT.exe
PID 2272 wrote to memory of 2880	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\nceFosd.exe
PID 2272 wrote to memory of 2880	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\nceFosd.exe
PID 2272 wrote to memory of 816	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\HUXNJOl.exe
PID 2272 wrote to memory of 816	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\HUXNJOl.exe
PID 2272 wrote to memory of 1464	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\aYOsTHW.exe
PID 2272 wrote to memory of 1464	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\aYOsTHW.exe
PID 2272 wrote to memory of 2648	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\lzbOXcE.exe
PID 2272 wrote to memory of 2648	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\lzbOXcE.exe
PID 2272 wrote to memory of 4156	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\GzNrNfs.exe
PID 2272 wrote to memory of 4156	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\GzNrNfs.exe
PID 2272 wrote to memory of 2456	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\oXECras.exe
PID 2272 wrote to memory of 2456	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\oXECras.exe
PID 2272 wrote to memory of 4208	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\IrUyiRK.exe
PID 2272 wrote to memory of 4208	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\IrUyiRK.exe
PID 2272 wrote to memory of 3364	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\dQufFAc.exe
PID 2272 wrote to memory of 3364	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\dQufFAc.exe
PID 2272 wrote to memory of 2432	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\cbWXoJc.exe
PID 2272 wrote to memory of 2432	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\cbWXoJc.exe
PID 2272 wrote to memory of 4492	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\XfurzyP.exe
PID 2272 wrote to memory of 4492	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\XfurzyP.exe
PID 2272 wrote to memory of 1708	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\dwizsfM.exe
PID 2272 wrote to memory of 1708	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\dwizsfM.exe
PID 2272 wrote to memory of 756	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\UyVeIlp.exe
PID 2272 wrote to memory of 756	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\UyVeIlp.exe
PID 2272 wrote to memory of 4584	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\BtZclgg.exe
PID 2272 wrote to memory of 4584	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\BtZclgg.exe
PID 2272 wrote to memory of 4696	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\wiDmkYd.exe
PID 2272 wrote to memory of 4696	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\wiDmkYd.exe
PID 2272 wrote to memory of 1048	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\ZpVHUca.exe
PID 2272 wrote to memory of 1048	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\ZpVHUca.exe
PID 2272 wrote to memory of 3192	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\wPVEgtY.exe
PID 2272 wrote to memory of 3192	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\wPVEgtY.exe
PID 2272 wrote to memory of 1492	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\VrGgRHW.exe
PID 2272 wrote to memory of 1492	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\VrGgRHW.exe
PID 2272 wrote to memory of 4420	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\dCmULrZ.exe
PID 2272 wrote to memory of 4420	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\dCmULrZ.exe
PID 2272 wrote to memory of 2412	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\eqnyBlH.exe
PID 2272 wrote to memory of 2412	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\eqnyBlH.exe
PID 2272 wrote to memory of 3716	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\fvYIOiG.exe
PID 2272 wrote to memory of 3716	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\fvYIOiG.exe
PID 2272 wrote to memory of 4996	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\nGiHJpU.exe
PID 2272 wrote to memory of 4996	N/A	C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe	C:\Windows\System\nGiHJpU.exe

Processes

C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe

"C:\Users\Admin\AppData\Local\Temp\8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe"

C:\Windows\System\DdPnBta.exe

C:\Windows\System\DdPnBta.exe

C:\Windows\System\KJhZHoa.exe

C:\Windows\System\KJhZHoa.exe

C:\Windows\System\TxZEXEK.exe

C:\Windows\System\TxZEXEK.exe

C:\Windows\System\gZarJGa.exe

C:\Windows\System\gZarJGa.exe

C:\Windows\System\AQWxtRo.exe

C:\Windows\System\AQWxtRo.exe

C:\Windows\System\rwxzycF.exe

C:\Windows\System\rwxzycF.exe

C:\Windows\System\burnJwJ.exe

C:\Windows\System\burnJwJ.exe

C:\Windows\System\eqTeBvr.exe

C:\Windows\System\eqTeBvr.exe

C:\Windows\System\IPLeqVD.exe

C:\Windows\System\IPLeqVD.exe

C:\Windows\System\WbFDFnT.exe

C:\Windows\System\WbFDFnT.exe

C:\Windows\System\kUGCiYT.exe

C:\Windows\System\kUGCiYT.exe

C:\Windows\System\nceFosd.exe

C:\Windows\System\nceFosd.exe

C:\Windows\System\HUXNJOl.exe

C:\Windows\System\HUXNJOl.exe

C:\Windows\System\aYOsTHW.exe

C:\Windows\System\aYOsTHW.exe

C:\Windows\System\lzbOXcE.exe

C:\Windows\System\lzbOXcE.exe

C:\Windows\System\GzNrNfs.exe

C:\Windows\System\GzNrNfs.exe

C:\Windows\System\oXECras.exe

C:\Windows\System\oXECras.exe

C:\Windows\System\IrUyiRK.exe

C:\Windows\System\IrUyiRK.exe

C:\Windows\System\dQufFAc.exe

C:\Windows\System\dQufFAc.exe

C:\Windows\System\cbWXoJc.exe

C:\Windows\System\cbWXoJc.exe

C:\Windows\System\XfurzyP.exe

C:\Windows\System\XfurzyP.exe

C:\Windows\System\dwizsfM.exe

C:\Windows\System\dwizsfM.exe

C:\Windows\System\UyVeIlp.exe

C:\Windows\System\UyVeIlp.exe

C:\Windows\System\BtZclgg.exe

C:\Windows\System\BtZclgg.exe

C:\Windows\System\wiDmkYd.exe

C:\Windows\System\wiDmkYd.exe

C:\Windows\System\ZpVHUca.exe

C:\Windows\System\ZpVHUca.exe

C:\Windows\System\wPVEgtY.exe

C:\Windows\System\wPVEgtY.exe

C:\Windows\System\VrGgRHW.exe

C:\Windows\System\VrGgRHW.exe

C:\Windows\System\dCmULrZ.exe

C:\Windows\System\dCmULrZ.exe

C:\Windows\System\eqnyBlH.exe

C:\Windows\System\eqnyBlH.exe

C:\Windows\System\fvYIOiG.exe

C:\Windows\System\fvYIOiG.exe

C:\Windows\System\nGiHJpU.exe

C:\Windows\System\nGiHJpU.exe

C:\Windows\System\dsKVqxU.exe

C:\Windows\System\dsKVqxU.exe

C:\Windows\System\NiCdAXC.exe

C:\Windows\System\NiCdAXC.exe

C:\Windows\System\AYsegwI.exe

C:\Windows\System\AYsegwI.exe

C:\Windows\System\rZgnowP.exe

C:\Windows\System\rZgnowP.exe

C:\Windows\System\PgtsKQz.exe

C:\Windows\System\PgtsKQz.exe

C:\Windows\System\ddfsfWx.exe

C:\Windows\System\ddfsfWx.exe

C:\Windows\System\BkAHwXY.exe

C:\Windows\System\BkAHwXY.exe

C:\Windows\System\jpCbdRf.exe

C:\Windows\System\jpCbdRf.exe

C:\Windows\System\VaUkCEt.exe

C:\Windows\System\VaUkCEt.exe

C:\Windows\System\MyCbzJn.exe

C:\Windows\System\MyCbzJn.exe

C:\Windows\System\aNluIPG.exe

C:\Windows\System\aNluIPG.exe

C:\Windows\System\fIbzdwr.exe

C:\Windows\System\fIbzdwr.exe

C:\Windows\System\yUFOFUs.exe

C:\Windows\System\yUFOFUs.exe

C:\Windows\System\LvmriJm.exe

C:\Windows\System\LvmriJm.exe

C:\Windows\System\bjcYrkB.exe

C:\Windows\System\bjcYrkB.exe

C:\Windows\System\iuKSLAN.exe

C:\Windows\System\iuKSLAN.exe

C:\Windows\System\qRIwjZa.exe

C:\Windows\System\qRIwjZa.exe

C:\Windows\System\QtygdjO.exe

C:\Windows\System\QtygdjO.exe

C:\Windows\System\fKKYdQr.exe

C:\Windows\System\fKKYdQr.exe

C:\Windows\System\TFGQkeD.exe

C:\Windows\System\TFGQkeD.exe

C:\Windows\System\ucVCVxP.exe

C:\Windows\System\ucVCVxP.exe

C:\Windows\System\DvpwhbZ.exe

C:\Windows\System\DvpwhbZ.exe

C:\Windows\System\ZhXckOF.exe

C:\Windows\System\ZhXckOF.exe

C:\Windows\System\uGAXPYY.exe

C:\Windows\System\uGAXPYY.exe

C:\Windows\System\DEUpXGH.exe

C:\Windows\System\DEUpXGH.exe

C:\Windows\System\eDhRnJn.exe

C:\Windows\System\eDhRnJn.exe

C:\Windows\System\troayzt.exe

C:\Windows\System\troayzt.exe

C:\Windows\System\ztbehyP.exe

C:\Windows\System\ztbehyP.exe

C:\Windows\System\VYljcfv.exe

C:\Windows\System\VYljcfv.exe

C:\Windows\System\mGFPyQY.exe

C:\Windows\System\mGFPyQY.exe

C:\Windows\System\YqHhKlQ.exe

C:\Windows\System\YqHhKlQ.exe

C:\Windows\System\jNLRIeF.exe

C:\Windows\System\jNLRIeF.exe

C:\Windows\System\fYxgMoM.exe

C:\Windows\System\fYxgMoM.exe

C:\Windows\System\qQlmBJi.exe

C:\Windows\System\qQlmBJi.exe

C:\Windows\System\mYUmSGX.exe

C:\Windows\System\mYUmSGX.exe

C:\Windows\System\dpdDxAX.exe

C:\Windows\System\dpdDxAX.exe

C:\Windows\System\DKdASYz.exe

C:\Windows\System\DKdASYz.exe

C:\Windows\System\nbJpamH.exe

C:\Windows\System\nbJpamH.exe

C:\Windows\System\NaIlLIQ.exe

C:\Windows\System\NaIlLIQ.exe

C:\Windows\System\wUFikSt.exe

C:\Windows\System\wUFikSt.exe

C:\Windows\System\WgLcwXT.exe

C:\Windows\System\WgLcwXT.exe

C:\Windows\System\lPrMDvQ.exe

C:\Windows\System\lPrMDvQ.exe

C:\Windows\System\RbVlZvk.exe

C:\Windows\System\RbVlZvk.exe

C:\Windows\System\tYXUzyv.exe

C:\Windows\System\tYXUzyv.exe

C:\Windows\System\zhlQtgw.exe

C:\Windows\System\zhlQtgw.exe

C:\Windows\System\stXrRqN.exe

C:\Windows\System\stXrRqN.exe

C:\Windows\System\zHjEjcv.exe

C:\Windows\System\zHjEjcv.exe

C:\Windows\System\pPWCCgE.exe

C:\Windows\System\pPWCCgE.exe

C:\Windows\System\UVCwcgx.exe

C:\Windows\System\UVCwcgx.exe

C:\Windows\System\bEQZpSE.exe

C:\Windows\System\bEQZpSE.exe

C:\Windows\System\csWVfcp.exe

C:\Windows\System\csWVfcp.exe

C:\Windows\System\PjgPtwy.exe

C:\Windows\System\PjgPtwy.exe

C:\Windows\System\UXfndoI.exe

C:\Windows\System\UXfndoI.exe

C:\Windows\System\amOHTIe.exe

C:\Windows\System\amOHTIe.exe

C:\Windows\System\TyjLSJJ.exe

C:\Windows\System\TyjLSJJ.exe

C:\Windows\System\GuSemDg.exe

C:\Windows\System\GuSemDg.exe

C:\Windows\System\EiMbKRN.exe

C:\Windows\System\EiMbKRN.exe

C:\Windows\System\oGnPRwR.exe

C:\Windows\System\oGnPRwR.exe

C:\Windows\System\xKVitAU.exe

C:\Windows\System\xKVitAU.exe

C:\Windows\System\teZCEIk.exe

C:\Windows\System\teZCEIk.exe

C:\Windows\System\sSoZlsZ.exe

C:\Windows\System\sSoZlsZ.exe

C:\Windows\System\prCwTAS.exe

C:\Windows\System\prCwTAS.exe

C:\Windows\System\RuJHpus.exe

C:\Windows\System\RuJHpus.exe

C:\Windows\System\AMtAXwV.exe

C:\Windows\System\AMtAXwV.exe

C:\Windows\System\sakDQdn.exe

C:\Windows\System\sakDQdn.exe

C:\Windows\System\xIfkKJv.exe

C:\Windows\System\xIfkKJv.exe

C:\Windows\System\aXDbwzP.exe

C:\Windows\System\aXDbwzP.exe

C:\Windows\System\eAGAkSB.exe

C:\Windows\System\eAGAkSB.exe

C:\Windows\System\MsmryRr.exe

C:\Windows\System\MsmryRr.exe

C:\Windows\System\hUvDvkb.exe

C:\Windows\System\hUvDvkb.exe

C:\Windows\System\gJGAIad.exe

C:\Windows\System\gJGAIad.exe

C:\Windows\System\aHgNOoP.exe

C:\Windows\System\aHgNOoP.exe

C:\Windows\System\QRmSpAv.exe

C:\Windows\System\QRmSpAv.exe

C:\Windows\System\NYrDowz.exe

C:\Windows\System\NYrDowz.exe

C:\Windows\System\dqjBSgD.exe

C:\Windows\System\dqjBSgD.exe

C:\Windows\System\Gcltxov.exe

C:\Windows\System\Gcltxov.exe

C:\Windows\System\TgMfSnd.exe

C:\Windows\System\TgMfSnd.exe

C:\Windows\System\FJFFfCT.exe

C:\Windows\System\FJFFfCT.exe

C:\Windows\System\cCkXeBY.exe

C:\Windows\System\cCkXeBY.exe

C:\Windows\System\DrxRrAR.exe

C:\Windows\System\DrxRrAR.exe

C:\Windows\System\NdKMNHc.exe

C:\Windows\System\NdKMNHc.exe

C:\Windows\System\Piqpldp.exe

C:\Windows\System\Piqpldp.exe

C:\Windows\System\CCTlQtG.exe

C:\Windows\System\CCTlQtG.exe

C:\Windows\System\NQwpNhO.exe

C:\Windows\System\NQwpNhO.exe

C:\Windows\System\pBcSGVL.exe

C:\Windows\System\pBcSGVL.exe

C:\Windows\System\LIdakET.exe

C:\Windows\System\LIdakET.exe

C:\Windows\System\SFfEQAD.exe

C:\Windows\System\SFfEQAD.exe

C:\Windows\System\UPqfdLW.exe

C:\Windows\System\UPqfdLW.exe

C:\Windows\System\vhohuxB.exe

C:\Windows\System\vhohuxB.exe

C:\Windows\System\DFutiYG.exe

C:\Windows\System\DFutiYG.exe

C:\Windows\System\lIuNCck.exe

C:\Windows\System\lIuNCck.exe

C:\Windows\System\LJbvqqk.exe

C:\Windows\System\LJbvqqk.exe

C:\Windows\System\MkQazBe.exe

C:\Windows\System\MkQazBe.exe

C:\Windows\System\OjdcKYZ.exe

C:\Windows\System\OjdcKYZ.exe

C:\Windows\System\KXbKtMW.exe

C:\Windows\System\KXbKtMW.exe

C:\Windows\System\HYsKxUN.exe

C:\Windows\System\HYsKxUN.exe

C:\Windows\System\UWCzyrf.exe

C:\Windows\System\UWCzyrf.exe

C:\Windows\System\aibTogJ.exe

C:\Windows\System\aibTogJ.exe

C:\Windows\System\wrQcbew.exe

C:\Windows\System\wrQcbew.exe

C:\Windows\System\fDLKNip.exe

C:\Windows\System\fDLKNip.exe

C:\Windows\System\OHVLikS.exe

C:\Windows\System\OHVLikS.exe

C:\Windows\System\GRMGSkK.exe

C:\Windows\System\GRMGSkK.exe

C:\Windows\System\SonGdAE.exe

C:\Windows\System\SonGdAE.exe

C:\Windows\System\PFITOLj.exe

C:\Windows\System\PFITOLj.exe

C:\Windows\System\ODGJmQP.exe

C:\Windows\System\ODGJmQP.exe

C:\Windows\System\wQmZfUo.exe

C:\Windows\System\wQmZfUo.exe

C:\Windows\System\SyONOnZ.exe

C:\Windows\System\SyONOnZ.exe

C:\Windows\System\NVfaRbu.exe

C:\Windows\System\NVfaRbu.exe

C:\Windows\System\wZpnzoK.exe

C:\Windows\System\wZpnzoK.exe

C:\Windows\System\nvfFjYU.exe

C:\Windows\System\nvfFjYU.exe

C:\Windows\System\TxuoqNC.exe

C:\Windows\System\TxuoqNC.exe

C:\Windows\System\oqYqGzn.exe

C:\Windows\System\oqYqGzn.exe

C:\Windows\System\ndsVpWg.exe

C:\Windows\System\ndsVpWg.exe

C:\Windows\System\elttmgh.exe

C:\Windows\System\elttmgh.exe

C:\Windows\System\YQDYEJp.exe

C:\Windows\System\YQDYEJp.exe

C:\Windows\System\QJlViqK.exe

C:\Windows\System\QJlViqK.exe

C:\Windows\System\JipHUXD.exe

C:\Windows\System\JipHUXD.exe

C:\Windows\System\pemKmUs.exe

C:\Windows\System\pemKmUs.exe

C:\Windows\System\dzcKNNF.exe

C:\Windows\System\dzcKNNF.exe

C:\Windows\System\oiIdtTo.exe

C:\Windows\System\oiIdtTo.exe

C:\Windows\System\pJFuQKG.exe

C:\Windows\System\pJFuQKG.exe

C:\Windows\System\jOGPLKT.exe

C:\Windows\System\jOGPLKT.exe

C:\Windows\System\fVnNpoz.exe

C:\Windows\System\fVnNpoz.exe

C:\Windows\System\iKfyLGH.exe

C:\Windows\System\iKfyLGH.exe

C:\Windows\System\YZzacrt.exe

C:\Windows\System\YZzacrt.exe

C:\Windows\System\mRQstaC.exe

C:\Windows\System\mRQstaC.exe

C:\Windows\System\iaNtjNK.exe

C:\Windows\System\iaNtjNK.exe

C:\Windows\System\aZRBfhx.exe

C:\Windows\System\aZRBfhx.exe

C:\Windows\System\JWhQTUC.exe

C:\Windows\System\JWhQTUC.exe

C:\Windows\System\AaJgvBA.exe

C:\Windows\System\AaJgvBA.exe

C:\Windows\System\ZOgDaIp.exe

C:\Windows\System\ZOgDaIp.exe

C:\Windows\System\cgkIMMr.exe

C:\Windows\System\cgkIMMr.exe

C:\Windows\System\hjAbhVF.exe

C:\Windows\System\hjAbhVF.exe

C:\Windows\System\rcRGzVr.exe

C:\Windows\System\rcRGzVr.exe

C:\Windows\System\WHLMsYU.exe

C:\Windows\System\WHLMsYU.exe

C:\Windows\System\oswkJWG.exe

C:\Windows\System\oswkJWG.exe

C:\Windows\System\lxTCxXP.exe

C:\Windows\System\lxTCxXP.exe

C:\Windows\System\aGMRjYG.exe

C:\Windows\System\aGMRjYG.exe

C:\Windows\System\FWHaiLD.exe

C:\Windows\System\FWHaiLD.exe

C:\Windows\System\TaDGSPR.exe

C:\Windows\System\TaDGSPR.exe

C:\Windows\System\fYwpdnM.exe

C:\Windows\System\fYwpdnM.exe

C:\Windows\System\OYCerOx.exe

C:\Windows\System\OYCerOx.exe

C:\Windows\System\ADjxChA.exe

C:\Windows\System\ADjxChA.exe

C:\Windows\System\dAtiqyU.exe

C:\Windows\System\dAtiqyU.exe

C:\Windows\System\SoIWOxQ.exe

C:\Windows\System\SoIWOxQ.exe

C:\Windows\System\hzvTTwj.exe

C:\Windows\System\hzvTTwj.exe

C:\Windows\System\KycWerf.exe

C:\Windows\System\KycWerf.exe

C:\Windows\System\BNkImgK.exe

C:\Windows\System\BNkImgK.exe

C:\Windows\System\YDZeFru.exe

C:\Windows\System\YDZeFru.exe

C:\Windows\System\NHQiDQi.exe

C:\Windows\System\NHQiDQi.exe

C:\Windows\System\ZzVXIae.exe

C:\Windows\System\ZzVXIae.exe

C:\Windows\System\GfRkOYC.exe

C:\Windows\System\GfRkOYC.exe

C:\Windows\System\JNCoacd.exe

C:\Windows\System\JNCoacd.exe

C:\Windows\System\xfMJkNI.exe

C:\Windows\System\xfMJkNI.exe

C:\Windows\System\cwaMtYv.exe

C:\Windows\System\cwaMtYv.exe

C:\Windows\System\CmrDLtG.exe

C:\Windows\System\CmrDLtG.exe

C:\Windows\System\sLvaYdL.exe

C:\Windows\System\sLvaYdL.exe

C:\Windows\System\hqVMOdM.exe

C:\Windows\System\hqVMOdM.exe

C:\Windows\System\yWXprHJ.exe

C:\Windows\System\yWXprHJ.exe

C:\Windows\System\SnDEgcV.exe

C:\Windows\System\SnDEgcV.exe

C:\Windows\System\UgGVZSQ.exe

C:\Windows\System\UgGVZSQ.exe

C:\Windows\System\FPNVuIf.exe

C:\Windows\System\FPNVuIf.exe

C:\Windows\System\LmBcugf.exe

C:\Windows\System\LmBcugf.exe

C:\Windows\System\QbhnBns.exe

C:\Windows\System\QbhnBns.exe

C:\Windows\System\tAamXnY.exe

C:\Windows\System\tAamXnY.exe

C:\Windows\System\TseimBW.exe

C:\Windows\System\TseimBW.exe

C:\Windows\System\oHlOTwN.exe

C:\Windows\System\oHlOTwN.exe

C:\Windows\System\ybMcaRH.exe

C:\Windows\System\ybMcaRH.exe

C:\Windows\System\wYYtMNt.exe

C:\Windows\System\wYYtMNt.exe

C:\Windows\System\bURPZbr.exe

C:\Windows\System\bURPZbr.exe

C:\Windows\System\kAMSNUI.exe

C:\Windows\System\kAMSNUI.exe

C:\Windows\System\HImicEG.exe

C:\Windows\System\HImicEG.exe

C:\Windows\System\pNCXIFX.exe

C:\Windows\System\pNCXIFX.exe

C:\Windows\System\hTORePx.exe

C:\Windows\System\hTORePx.exe

C:\Windows\System\CkRDhtL.exe

C:\Windows\System\CkRDhtL.exe

C:\Windows\System\IduzMju.exe

C:\Windows\System\IduzMju.exe

C:\Windows\System\HOxVXMs.exe

C:\Windows\System\HOxVXMs.exe

C:\Windows\System\BZaJKIt.exe

C:\Windows\System\BZaJKIt.exe

C:\Windows\System\gHevuFU.exe

C:\Windows\System\gHevuFU.exe

C:\Windows\System\YRBaDFm.exe

C:\Windows\System\YRBaDFm.exe

C:\Windows\System\uGIMOLK.exe

C:\Windows\System\uGIMOLK.exe

C:\Windows\System\iIgcxYf.exe

C:\Windows\System\iIgcxYf.exe

C:\Windows\System\hqARjxz.exe

C:\Windows\System\hqARjxz.exe

C:\Windows\System\SOzgHQK.exe

C:\Windows\System\SOzgHQK.exe

C:\Windows\System\EJyliTQ.exe

C:\Windows\System\EJyliTQ.exe

C:\Windows\System\HOygAtp.exe

C:\Windows\System\HOygAtp.exe

C:\Windows\System\gLRlCyp.exe

C:\Windows\System\gLRlCyp.exe

C:\Windows\System\ShPVmnE.exe

C:\Windows\System\ShPVmnE.exe

C:\Windows\System\EYrZekz.exe

C:\Windows\System\EYrZekz.exe

C:\Windows\System\KklPEUH.exe

C:\Windows\System\KklPEUH.exe

C:\Windows\System\lUluyAW.exe

C:\Windows\System\lUluyAW.exe

C:\Windows\System\fSyHhYx.exe

C:\Windows\System\fSyHhYx.exe

C:\Windows\System\kEInhSb.exe

C:\Windows\System\kEInhSb.exe

C:\Windows\System\ETEYeOs.exe

C:\Windows\System\ETEYeOs.exe

C:\Windows\System\bclFGya.exe

C:\Windows\System\bclFGya.exe

C:\Windows\System\QGFzwRn.exe

C:\Windows\System\QGFzwRn.exe

C:\Windows\System\qiIrFKG.exe

C:\Windows\System\qiIrFKG.exe

C:\Windows\System\yqWHbSs.exe

C:\Windows\System\yqWHbSs.exe

C:\Windows\System\JfybQNE.exe

C:\Windows\System\JfybQNE.exe

C:\Windows\System\zhAMplo.exe

C:\Windows\System\zhAMplo.exe

C:\Windows\System\QWjtBSb.exe

C:\Windows\System\QWjtBSb.exe

C:\Windows\System\PIujddR.exe

C:\Windows\System\PIujddR.exe

C:\Windows\System\kyzaIPS.exe

C:\Windows\System\kyzaIPS.exe

C:\Windows\System\CuvWzmI.exe

C:\Windows\System\CuvWzmI.exe

C:\Windows\System\sUyTfJP.exe

C:\Windows\System\sUyTfJP.exe

C:\Windows\System\BdfKXGw.exe

C:\Windows\System\BdfKXGw.exe

C:\Windows\System\tFtVloa.exe

C:\Windows\System\tFtVloa.exe

C:\Windows\System\ONbmXtG.exe

C:\Windows\System\ONbmXtG.exe

C:\Windows\System\akMDEjQ.exe

C:\Windows\System\akMDEjQ.exe

C:\Windows\System\JDKlzBZ.exe

C:\Windows\System\JDKlzBZ.exe

C:\Windows\System\utjfBnk.exe

C:\Windows\System\utjfBnk.exe

C:\Windows\System\DEMKzSL.exe

C:\Windows\System\DEMKzSL.exe

C:\Windows\System\ErLXynA.exe

C:\Windows\System\ErLXynA.exe

C:\Windows\System\NYOwLca.exe

C:\Windows\System\NYOwLca.exe

C:\Windows\System\iDfoxPy.exe

C:\Windows\System\iDfoxPy.exe

C:\Windows\System\gfUGIDq.exe

C:\Windows\System\gfUGIDq.exe

C:\Windows\System\SKEROLh.exe

C:\Windows\System\SKEROLh.exe

C:\Windows\System\WxOrkjq.exe

C:\Windows\System\WxOrkjq.exe

C:\Windows\System\fQncRNR.exe

C:\Windows\System\fQncRNR.exe

C:\Windows\System\fxNZoox.exe

C:\Windows\System\fxNZoox.exe

C:\Windows\System\YtkCfLr.exe

C:\Windows\System\YtkCfLr.exe

C:\Windows\System\RmLWXxr.exe

C:\Windows\System\RmLWXxr.exe

C:\Windows\System\gzWPOCG.exe

C:\Windows\System\gzWPOCG.exe

C:\Windows\System\aSbCStY.exe

C:\Windows\System\aSbCStY.exe

C:\Windows\System\mxOCEsV.exe

C:\Windows\System\mxOCEsV.exe

C:\Windows\System\qptcyCJ.exe

C:\Windows\System\qptcyCJ.exe

C:\Windows\System\OocTLza.exe

C:\Windows\System\OocTLza.exe

C:\Windows\System\zopnttY.exe

C:\Windows\System\zopnttY.exe

C:\Windows\System\odEXzet.exe

C:\Windows\System\odEXzet.exe

C:\Windows\System\eVjByZI.exe

C:\Windows\System\eVjByZI.exe

C:\Windows\System\FgXkyDc.exe

C:\Windows\System\FgXkyDc.exe

C:\Windows\System\pfZOIdv.exe

C:\Windows\System\pfZOIdv.exe

C:\Windows\System\ciqzqBc.exe

C:\Windows\System\ciqzqBc.exe

C:\Windows\System\rjzFiLl.exe

C:\Windows\System\rjzFiLl.exe

C:\Windows\System\FmvPmsD.exe

C:\Windows\System\FmvPmsD.exe

C:\Windows\System\UAEtnFf.exe

C:\Windows\System\UAEtnFf.exe

C:\Windows\System\eMoIGob.exe

C:\Windows\System\eMoIGob.exe

C:\Windows\System\hBQcMlO.exe

C:\Windows\System\hBQcMlO.exe

C:\Windows\System\GRWVhoV.exe

C:\Windows\System\GRWVhoV.exe

C:\Windows\System\IInoAJc.exe

C:\Windows\System\IInoAJc.exe

C:\Windows\System\ithjdFY.exe

C:\Windows\System\ithjdFY.exe

C:\Windows\System\IahxndY.exe

C:\Windows\System\IahxndY.exe

C:\Windows\System\wmpLnRT.exe

C:\Windows\System\wmpLnRT.exe

C:\Windows\System\hWNdMfY.exe

C:\Windows\System\hWNdMfY.exe

C:\Windows\System\EURZzxX.exe

C:\Windows\System\EURZzxX.exe

C:\Windows\System\mHWQMcc.exe

C:\Windows\System\mHWQMcc.exe

C:\Windows\System\zCvxBkJ.exe

C:\Windows\System\zCvxBkJ.exe

C:\Windows\System\MOwQCsr.exe

C:\Windows\System\MOwQCsr.exe

C:\Windows\System\uvZFYAs.exe

C:\Windows\System\uvZFYAs.exe

C:\Windows\System\ClIdfuW.exe

C:\Windows\System\ClIdfuW.exe

C:\Windows\System\CAsBief.exe

C:\Windows\System\CAsBief.exe

C:\Windows\System\ksXjNwp.exe

C:\Windows\System\ksXjNwp.exe

C:\Windows\System\oWtvLah.exe

C:\Windows\System\oWtvLah.exe

C:\Windows\System\PtktWqR.exe

C:\Windows\System\PtktWqR.exe

C:\Windows\System\WrPhUmT.exe

C:\Windows\System\WrPhUmT.exe

C:\Windows\System\VOwBecb.exe

C:\Windows\System\VOwBecb.exe

C:\Windows\System\FXvhoYm.exe

C:\Windows\System\FXvhoYm.exe

C:\Windows\System\dwchftT.exe

C:\Windows\System\dwchftT.exe

C:\Windows\System\uCYPAXy.exe

C:\Windows\System\uCYPAXy.exe

C:\Windows\System\BOlUUaE.exe

C:\Windows\System\BOlUUaE.exe

C:\Windows\System\oJFvEAz.exe

C:\Windows\System\oJFvEAz.exe

C:\Windows\System\IGnnnHK.exe

C:\Windows\System\IGnnnHK.exe

C:\Windows\System\ntywxyd.exe

C:\Windows\System\ntywxyd.exe

C:\Windows\System\qqOYsKB.exe

C:\Windows\System\qqOYsKB.exe

C:\Windows\System\BpKjhIV.exe

C:\Windows\System\BpKjhIV.exe

C:\Windows\System\FVOScpy.exe

C:\Windows\System\FVOScpy.exe

C:\Windows\System\gmdIERk.exe

C:\Windows\System\gmdIERk.exe

C:\Windows\System\YPrwcFf.exe

C:\Windows\System\YPrwcFf.exe

C:\Windows\System\pzQqyVA.exe

C:\Windows\System\pzQqyVA.exe

C:\Windows\System\yEeYsqw.exe

C:\Windows\System\yEeYsqw.exe

C:\Windows\System\dtqYdAU.exe

C:\Windows\System\dtqYdAU.exe

C:\Windows\System\UpiYaZj.exe

C:\Windows\System\UpiYaZj.exe

C:\Windows\System\fpkeKQV.exe

C:\Windows\System\fpkeKQV.exe

C:\Windows\System\MfpotHm.exe

C:\Windows\System\MfpotHm.exe

C:\Windows\System\yYjeTEA.exe

C:\Windows\System\yYjeTEA.exe

C:\Windows\System\UYXHBQB.exe

C:\Windows\System\UYXHBQB.exe

C:\Windows\System\fMqJZAd.exe

C:\Windows\System\fMqJZAd.exe

C:\Windows\System\kCQGGfn.exe

C:\Windows\System\kCQGGfn.exe

C:\Windows\System\VwoIVQs.exe

C:\Windows\System\VwoIVQs.exe

C:\Windows\System\OyOwszx.exe

C:\Windows\System\OyOwszx.exe

C:\Windows\System\pwtpiZb.exe

C:\Windows\System\pwtpiZb.exe

C:\Windows\System\XGOsGXS.exe

C:\Windows\System\XGOsGXS.exe

C:\Windows\System\vERpcva.exe

C:\Windows\System\vERpcva.exe

C:\Windows\System\qObixmF.exe

C:\Windows\System\qObixmF.exe

C:\Windows\System\QPWkAOa.exe

C:\Windows\System\QPWkAOa.exe

C:\Windows\System\gkZzrkU.exe

C:\Windows\System\gkZzrkU.exe

C:\Windows\System\wpAIBsL.exe

C:\Windows\System\wpAIBsL.exe

C:\Windows\System\VccAxcq.exe

C:\Windows\System\VccAxcq.exe

C:\Windows\System\DTstaWI.exe

C:\Windows\System\DTstaWI.exe

C:\Windows\System\mmSXMKh.exe

C:\Windows\System\mmSXMKh.exe

C:\Windows\System\VajYSMT.exe

C:\Windows\System\VajYSMT.exe

C:\Windows\System\IqdRtly.exe

C:\Windows\System\IqdRtly.exe

C:\Windows\System\cOTEQAR.exe

C:\Windows\System\cOTEQAR.exe

C:\Windows\System\bUHOLWy.exe

C:\Windows\System\bUHOLWy.exe

C:\Windows\System\fTDkUWf.exe

C:\Windows\System\fTDkUWf.exe

C:\Windows\System\wczBsLl.exe

C:\Windows\System\wczBsLl.exe

C:\Windows\System\SOasQZQ.exe

C:\Windows\System\SOasQZQ.exe

C:\Windows\System\empMQiG.exe

C:\Windows\System\empMQiG.exe

C:\Windows\System\HHQxBlF.exe

C:\Windows\System\HHQxBlF.exe

C:\Windows\System\uSBWidZ.exe

C:\Windows\System\uSBWidZ.exe

C:\Windows\System\rcDhTMK.exe

C:\Windows\System\rcDhTMK.exe

C:\Windows\System\fQKqHeV.exe

C:\Windows\System\fQKqHeV.exe

C:\Windows\System\dszZJDU.exe

C:\Windows\System\dszZJDU.exe

C:\Windows\System\jicilNN.exe

C:\Windows\System\jicilNN.exe

C:\Windows\System\OZEojyu.exe

C:\Windows\System\OZEojyu.exe

C:\Windows\System\XZRzCtS.exe

C:\Windows\System\XZRzCtS.exe

C:\Windows\System\oNODZoQ.exe

C:\Windows\System\oNODZoQ.exe

C:\Windows\System\ElbwxAW.exe

C:\Windows\System\ElbwxAW.exe

C:\Windows\System\RXanVZU.exe

C:\Windows\System\RXanVZU.exe

C:\Windows\System\PcDfUPW.exe

C:\Windows\System\PcDfUPW.exe

C:\Windows\System\nIBlEbl.exe

C:\Windows\System\nIBlEbl.exe

C:\Windows\System\GZlVHJU.exe

C:\Windows\System\GZlVHJU.exe

C:\Windows\System\mWjdKYA.exe

C:\Windows\System\mWjdKYA.exe

C:\Windows\System\yICIkoK.exe

C:\Windows\System\yICIkoK.exe

C:\Windows\System\cGBKLvT.exe

C:\Windows\System\cGBKLvT.exe

C:\Windows\System\MWujYAA.exe

C:\Windows\System\MWujYAA.exe

C:\Windows\System\okbXNqK.exe

C:\Windows\System\okbXNqK.exe

C:\Windows\System\vwMpFoo.exe

C:\Windows\System\vwMpFoo.exe

C:\Windows\System\dYpDfwu.exe

C:\Windows\System\dYpDfwu.exe

C:\Windows\System\rSIMUCx.exe

C:\Windows\System\rSIMUCx.exe

C:\Windows\System\cotaPed.exe

C:\Windows\System\cotaPed.exe

C:\Windows\System\FFhyupd.exe

C:\Windows\System\FFhyupd.exe

C:\Windows\System\pvsusoh.exe

C:\Windows\System\pvsusoh.exe

C:\Windows\System\RQBDYyS.exe

C:\Windows\System\RQBDYyS.exe

C:\Windows\System\ZLOQQpa.exe

C:\Windows\System\ZLOQQpa.exe

C:\Windows\System\sDXFQvp.exe

C:\Windows\System\sDXFQvp.exe

C:\Windows\System\apYsFrn.exe

C:\Windows\System\apYsFrn.exe

C:\Windows\System\NapltwN.exe

C:\Windows\System\NapltwN.exe

C:\Windows\System\EeAvRWH.exe

C:\Windows\System\EeAvRWH.exe

C:\Windows\System\GivVGWz.exe

C:\Windows\System\GivVGWz.exe

C:\Windows\System\MNsuitp.exe

C:\Windows\System\MNsuitp.exe

C:\Windows\System\jKupxLg.exe

C:\Windows\System\jKupxLg.exe

C:\Windows\System\HiQVEyZ.exe

C:\Windows\System\HiQVEyZ.exe

C:\Windows\System\BYpBJFC.exe

C:\Windows\System\BYpBJFC.exe

C:\Windows\System\OeiVlDP.exe

C:\Windows\System\OeiVlDP.exe

C:\Windows\System\uNFKHQg.exe

C:\Windows\System\uNFKHQg.exe

C:\Windows\System\vZvZYUQ.exe

C:\Windows\System\vZvZYUQ.exe

C:\Windows\System\jbWoOTB.exe

C:\Windows\System\jbWoOTB.exe

C:\Windows\System\KSVADDb.exe

C:\Windows\System\KSVADDb.exe

C:\Windows\System\uiNbSFs.exe

C:\Windows\System\uiNbSFs.exe

C:\Windows\System\KwGMWup.exe

C:\Windows\System\KwGMWup.exe

C:\Windows\System\URcmRSt.exe

C:\Windows\System\URcmRSt.exe

C:\Windows\System\ynMXCZO.exe

C:\Windows\System\ynMXCZO.exe

C:\Windows\System\QeYDjJn.exe

C:\Windows\System\QeYDjJn.exe

C:\Windows\System\hUEwbXG.exe

C:\Windows\System\hUEwbXG.exe

C:\Windows\System\BDXbWMZ.exe

C:\Windows\System\BDXbWMZ.exe

C:\Windows\System\XfYCRba.exe

C:\Windows\System\XfYCRba.exe

C:\Windows\System\zQHhSIi.exe

C:\Windows\System\zQHhSIi.exe

C:\Windows\System\YFEdIaV.exe

C:\Windows\System\YFEdIaV.exe

C:\Windows\System\YgNjIgx.exe

C:\Windows\System\YgNjIgx.exe

C:\Windows\System\CxZTQui.exe

C:\Windows\System\CxZTQui.exe

C:\Windows\System\FKasHtD.exe

C:\Windows\System\FKasHtD.exe

C:\Windows\System\BayrpEo.exe

C:\Windows\System\BayrpEo.exe

C:\Windows\System\GqLjUbB.exe

C:\Windows\System\GqLjUbB.exe

C:\Windows\System\MTvJjrk.exe

C:\Windows\System\MTvJjrk.exe

C:\Windows\System\rCwOuCs.exe

C:\Windows\System\rCwOuCs.exe

C:\Windows\System\faPxcXM.exe

C:\Windows\System\faPxcXM.exe

C:\Windows\System\aYSBLyO.exe

C:\Windows\System\aYSBLyO.exe

C:\Windows\System\YDnEXJw.exe

C:\Windows\System\YDnEXJw.exe

C:\Windows\System\nwvgmuf.exe

C:\Windows\System\nwvgmuf.exe

C:\Windows\System\CoanaBB.exe

C:\Windows\System\CoanaBB.exe

C:\Windows\System\SlscZVu.exe

C:\Windows\System\SlscZVu.exe

C:\Windows\System\JAhrvHC.exe

C:\Windows\System\JAhrvHC.exe

C:\Windows\System\TWijNth.exe

C:\Windows\System\TWijNth.exe

C:\Windows\System\MavfaGR.exe

C:\Windows\System\MavfaGR.exe

C:\Windows\System\nmaOevZ.exe

C:\Windows\System\nmaOevZ.exe

C:\Windows\System\OkLgRyo.exe

C:\Windows\System\OkLgRyo.exe

C:\Windows\System\jPyQeix.exe

C:\Windows\System\jPyQeix.exe

C:\Windows\System\FTXcdHq.exe

C:\Windows\System\FTXcdHq.exe

C:\Windows\System\rdDZYRj.exe

C:\Windows\System\rdDZYRj.exe

C:\Windows\System\kngRmIp.exe

C:\Windows\System\kngRmIp.exe

C:\Windows\System\WGVYnOC.exe

C:\Windows\System\WGVYnOC.exe

C:\Windows\System\DRJqdfo.exe

C:\Windows\System\DRJqdfo.exe

C:\Windows\System\nmvUbed.exe

C:\Windows\System\nmvUbed.exe

C:\Windows\System\FgzzaGu.exe

C:\Windows\System\FgzzaGu.exe

C:\Windows\System\EUYKzXX.exe

C:\Windows\System\EUYKzXX.exe

C:\Windows\System\cfFPoTa.exe

C:\Windows\System\cfFPoTa.exe

C:\Windows\System\lDOqjZN.exe

C:\Windows\System\lDOqjZN.exe

C:\Windows\System\VfWwTaj.exe

C:\Windows\System\VfWwTaj.exe

C:\Windows\System\OpJibYr.exe

C:\Windows\System\OpJibYr.exe

C:\Windows\System\BaCbxXG.exe

C:\Windows\System\BaCbxXG.exe

C:\Windows\System\wFaUIFY.exe

C:\Windows\System\wFaUIFY.exe

C:\Windows\System\qPdQWKl.exe

C:\Windows\System\qPdQWKl.exe

C:\Windows\System\hGJcxeJ.exe

C:\Windows\System\hGJcxeJ.exe

C:\Windows\System\xiKJSfN.exe

C:\Windows\System\xiKJSfN.exe

C:\Windows\System\llUcXzW.exe

C:\Windows\System\llUcXzW.exe

C:\Windows\System\woVNjAs.exe

C:\Windows\System\woVNjAs.exe

C:\Windows\System\wfvuZrV.exe

C:\Windows\System\wfvuZrV.exe

C:\Windows\System\HFZODPp.exe

C:\Windows\System\HFZODPp.exe

C:\Windows\System\nyyiAHl.exe

C:\Windows\System\nyyiAHl.exe

C:\Windows\System\MCpDyXu.exe

C:\Windows\System\MCpDyXu.exe

C:\Windows\System\sihiFEo.exe

C:\Windows\System\sihiFEo.exe

C:\Windows\System\psRtWLb.exe

C:\Windows\System\psRtWLb.exe

C:\Windows\System\oflFZkT.exe

C:\Windows\System\oflFZkT.exe

C:\Windows\System\jkYhLCa.exe

C:\Windows\System\jkYhLCa.exe

C:\Windows\System\BzAEmBG.exe

C:\Windows\System\BzAEmBG.exe

C:\Windows\System\MhZuYtt.exe

C:\Windows\System\MhZuYtt.exe

C:\Windows\System\mSjVNwg.exe

C:\Windows\System\mSjVNwg.exe

C:\Windows\System\uRelJJQ.exe

C:\Windows\System\uRelJJQ.exe

C:\Windows\System\QpCFqIn.exe

C:\Windows\System\QpCFqIn.exe

C:\Windows\System\lyhpGdb.exe

C:\Windows\System\lyhpGdb.exe

C:\Windows\System\iSIgNkM.exe

C:\Windows\System\iSIgNkM.exe

C:\Windows\System\CUTwNAx.exe

C:\Windows\System\CUTwNAx.exe

C:\Windows\System\fxWRHGp.exe

C:\Windows\System\fxWRHGp.exe

C:\Windows\System\mknXyDt.exe

C:\Windows\System\mknXyDt.exe

C:\Windows\System\fzgMZRw.exe

C:\Windows\System\fzgMZRw.exe

C:\Windows\System\xHTUSly.exe

C:\Windows\System\xHTUSly.exe

C:\Windows\System\OsvDEMQ.exe

C:\Windows\System\OsvDEMQ.exe

C:\Windows\System\AqQpXcK.exe

C:\Windows\System\AqQpXcK.exe

C:\Windows\System\yvxmcHY.exe

C:\Windows\System\yvxmcHY.exe

C:\Windows\System\biYocFS.exe

C:\Windows\System\biYocFS.exe

C:\Windows\System\eAzkHKU.exe

C:\Windows\System\eAzkHKU.exe

C:\Windows\System\tTJsRtz.exe

C:\Windows\System\tTJsRtz.exe

C:\Windows\System\vNFBZfw.exe

C:\Windows\System\vNFBZfw.exe

C:\Windows\System\aqRNnwK.exe

C:\Windows\System\aqRNnwK.exe

C:\Windows\System\dLdMuoX.exe

C:\Windows\System\dLdMuoX.exe

C:\Windows\System\NAarlpt.exe

C:\Windows\System\NAarlpt.exe

C:\Windows\System\vKWPGaT.exe

C:\Windows\System\vKWPGaT.exe

C:\Windows\System\TYtvrXQ.exe

C:\Windows\System\TYtvrXQ.exe

C:\Windows\System\EMOiqhs.exe

C:\Windows\System\EMOiqhs.exe

C:\Windows\System\LhFnege.exe

C:\Windows\System\LhFnege.exe

C:\Windows\System\vJBMEVG.exe

C:\Windows\System\vJBMEVG.exe

C:\Windows\System\LlOGOri.exe

C:\Windows\System\LlOGOri.exe

C:\Windows\System\WzHIWrg.exe

C:\Windows\System\WzHIWrg.exe

C:\Windows\System\djJRUVU.exe

C:\Windows\System\djJRUVU.exe

C:\Windows\System\hroArbh.exe

C:\Windows\System\hroArbh.exe

C:\Windows\System\bRIqOXK.exe

C:\Windows\System\bRIqOXK.exe

C:\Windows\System\GLtpght.exe

C:\Windows\System\GLtpght.exe

C:\Windows\System\KlUdbqC.exe

C:\Windows\System\KlUdbqC.exe

C:\Windows\System\dkJloUO.exe

C:\Windows\System\dkJloUO.exe

C:\Windows\System\oCyuVNx.exe

C:\Windows\System\oCyuVNx.exe

C:\Windows\System\vpyPINI.exe

C:\Windows\System\vpyPINI.exe

C:\Windows\System\iHcGnzm.exe

C:\Windows\System\iHcGnzm.exe

C:\Windows\System\icRvMcQ.exe

C:\Windows\System\icRvMcQ.exe

C:\Windows\System\kVjyFBs.exe

C:\Windows\System\kVjyFBs.exe

C:\Windows\System\uYeQMab.exe

C:\Windows\System\uYeQMab.exe

C:\Windows\System\cuUlUuz.exe

C:\Windows\System\cuUlUuz.exe

C:\Windows\System\tGigDEB.exe

C:\Windows\System\tGigDEB.exe

C:\Windows\System\GdQntQQ.exe

C:\Windows\System\GdQntQQ.exe

C:\Windows\System\SPQEpcm.exe

C:\Windows\System\SPQEpcm.exe

C:\Windows\System\jyNULnA.exe

C:\Windows\System\jyNULnA.exe

C:\Windows\System\hhqGIuf.exe

C:\Windows\System\hhqGIuf.exe

C:\Windows\System\PPNeZze.exe

C:\Windows\System\PPNeZze.exe

C:\Windows\System\LeiHyns.exe

C:\Windows\System\LeiHyns.exe

C:\Windows\System\dvfcUei.exe

C:\Windows\System\dvfcUei.exe

C:\Windows\System\kjLdbhZ.exe

C:\Windows\System\kjLdbhZ.exe

C:\Windows\System\efRPxHa.exe

C:\Windows\System\efRPxHa.exe

C:\Windows\System\nFuwgbl.exe

C:\Windows\System\nFuwgbl.exe

C:\Windows\System\hGerRsX.exe

C:\Windows\System\hGerRsX.exe

C:\Windows\System\utXvWru.exe

C:\Windows\System\utXvWru.exe

C:\Windows\System\QZLpntp.exe

C:\Windows\System\QZLpntp.exe

C:\Windows\System\MftrZCx.exe

C:\Windows\System\MftrZCx.exe

C:\Windows\System\EftxwCb.exe

C:\Windows\System\EftxwCb.exe

C:\Windows\System\DWEGFiq.exe

C:\Windows\System\DWEGFiq.exe

C:\Windows\System\wgBwLwr.exe

C:\Windows\System\wgBwLwr.exe

C:\Windows\System\YhWwuiH.exe

C:\Windows\System\YhWwuiH.exe

C:\Windows\System\loFjytQ.exe

C:\Windows\System\loFjytQ.exe

C:\Windows\System\ujIRfpy.exe

C:\Windows\System\ujIRfpy.exe

C:\Windows\System\rXRAlpF.exe

C:\Windows\System\rXRAlpF.exe

C:\Windows\System\dBVmcGl.exe

C:\Windows\System\dBVmcGl.exe

C:\Windows\System\ZvXyCWM.exe

C:\Windows\System\ZvXyCWM.exe

C:\Windows\System\ZlwnuLc.exe

C:\Windows\System\ZlwnuLc.exe

C:\Windows\System\USgElAq.exe

C:\Windows\System\USgElAq.exe

C:\Windows\System\qYAgTNS.exe

C:\Windows\System\qYAgTNS.exe

C:\Windows\System\VUqxAVI.exe

C:\Windows\System\VUqxAVI.exe

C:\Windows\System\alWphDm.exe

C:\Windows\System\alWphDm.exe

C:\Windows\System\CeasRjm.exe

C:\Windows\System\CeasRjm.exe

C:\Windows\System\GLPlJPK.exe

C:\Windows\System\GLPlJPK.exe

C:\Windows\System\uPNCbVk.exe

C:\Windows\System\uPNCbVk.exe

C:\Windows\System\gNXulTB.exe

C:\Windows\System\gNXulTB.exe

C:\Windows\System\Txdknhm.exe

C:\Windows\System\Txdknhm.exe

C:\Windows\System\ovHPKlo.exe

C:\Windows\System\ovHPKlo.exe

C:\Windows\System\lCCxrST.exe

C:\Windows\System\lCCxrST.exe

C:\Windows\System\oPhWIHO.exe

C:\Windows\System\oPhWIHO.exe

C:\Windows\System\TgKepUk.exe

C:\Windows\System\TgKepUk.exe

C:\Windows\System\fmWoEjE.exe

C:\Windows\System\fmWoEjE.exe

C:\Windows\System\VginlsD.exe

C:\Windows\System\VginlsD.exe

C:\Windows\System\sUsqOVY.exe

C:\Windows\System\sUsqOVY.exe

C:\Windows\System\dJRBuxn.exe

C:\Windows\System\dJRBuxn.exe

C:\Windows\System\SMpoggP.exe

C:\Windows\System\SMpoggP.exe

C:\Windows\System\ILWfwaj.exe

C:\Windows\System\ILWfwaj.exe

C:\Windows\System\nOPsCDh.exe

C:\Windows\System\nOPsCDh.exe

C:\Windows\System\aEodwNP.exe

C:\Windows\System\aEodwNP.exe

C:\Windows\System\DkHkTBh.exe

C:\Windows\System\DkHkTBh.exe

C:\Windows\System\zdLeKmw.exe

C:\Windows\System\zdLeKmw.exe

C:\Windows\System\ipGsYxk.exe

C:\Windows\System\ipGsYxk.exe

C:\Windows\System\YscWFNJ.exe

C:\Windows\System\YscWFNJ.exe

C:\Windows\System\CzVcwGI.exe

C:\Windows\System\CzVcwGI.exe

C:\Windows\System\VwPqXoT.exe

C:\Windows\System\VwPqXoT.exe

C:\Windows\System\RFupQOA.exe

C:\Windows\System\RFupQOA.exe

C:\Windows\System\hVbOAZp.exe

C:\Windows\System\hVbOAZp.exe

C:\Windows\System\qmoLwQn.exe

C:\Windows\System\qmoLwQn.exe

C:\Windows\System\nPLlmjD.exe

C:\Windows\System\nPLlmjD.exe

C:\Windows\System\KMwyblt.exe

C:\Windows\System\KMwyblt.exe

C:\Windows\System\hloWNjf.exe

C:\Windows\System\hloWNjf.exe

C:\Windows\System\zOiLAlK.exe

C:\Windows\System\zOiLAlK.exe

C:\Windows\System\lwNqVOn.exe

C:\Windows\System\lwNqVOn.exe

C:\Windows\System\arMSaoP.exe

C:\Windows\System\arMSaoP.exe

C:\Windows\System\MrPVyAP.exe

C:\Windows\System\MrPVyAP.exe

C:\Windows\System\gYdpGXp.exe

C:\Windows\System\gYdpGXp.exe

C:\Windows\System\uzJBkfa.exe

C:\Windows\System\uzJBkfa.exe

C:\Windows\System\xEZynKa.exe

C:\Windows\System\xEZynKa.exe

C:\Windows\System\cQbOEqD.exe

C:\Windows\System\cQbOEqD.exe

C:\Windows\System\tNRzhCk.exe

C:\Windows\System\tNRzhCk.exe

C:\Windows\System\aOljNNU.exe

C:\Windows\System\aOljNNU.exe

C:\Windows\System\RTECYqQ.exe

C:\Windows\System\RTECYqQ.exe

C:\Windows\System\VIBtNNU.exe

C:\Windows\System\VIBtNNU.exe

C:\Windows\System\JsvzqHu.exe

C:\Windows\System\JsvzqHu.exe

C:\Windows\System\JgFdoHo.exe

C:\Windows\System\JgFdoHo.exe

C:\Windows\System\KmUSSGo.exe

C:\Windows\System\KmUSSGo.exe

C:\Windows\System\fNEtwgX.exe

C:\Windows\System\fNEtwgX.exe

C:\Windows\System\hwdxwyM.exe

C:\Windows\System\hwdxwyM.exe

C:\Windows\System\KsCLMRJ.exe

C:\Windows\System\KsCLMRJ.exe

C:\Windows\System\KNoGHxN.exe

C:\Windows\System\KNoGHxN.exe

C:\Windows\System\jaXOCDe.exe

C:\Windows\System\jaXOCDe.exe

C:\Windows\System\iCRqyCb.exe

C:\Windows\System\iCRqyCb.exe

C:\Windows\System\SomQjnA.exe

C:\Windows\System\SomQjnA.exe

C:\Windows\System\dotwSpE.exe

C:\Windows\System\dotwSpE.exe

C:\Windows\System\yxFgMbs.exe

C:\Windows\System\yxFgMbs.exe

C:\Windows\System\PsMzZdQ.exe

C:\Windows\System\PsMzZdQ.exe

C:\Windows\System\aSVbPSy.exe

C:\Windows\System\aSVbPSy.exe

C:\Windows\System\gXEfHmc.exe

C:\Windows\System\gXEfHmc.exe

C:\Windows\System\oZHQGGE.exe

C:\Windows\System\oZHQGGE.exe

C:\Windows\System\rYlXlLC.exe

C:\Windows\System\rYlXlLC.exe

C:\Windows\System\HhGICUO.exe

C:\Windows\System\HhGICUO.exe

C:\Windows\System\vmpIANF.exe

C:\Windows\System\vmpIANF.exe

C:\Windows\System\kcmOxVp.exe

C:\Windows\System\kcmOxVp.exe

C:\Windows\System\YaHkzxE.exe

C:\Windows\System\YaHkzxE.exe

C:\Windows\System\zgKXCQe.exe

C:\Windows\System\zgKXCQe.exe

C:\Windows\System\GAyLgIf.exe

C:\Windows\System\GAyLgIf.exe

C:\Windows\System\eXbZbbT.exe

C:\Windows\System\eXbZbbT.exe

C:\Windows\System\HZWgXDt.exe

C:\Windows\System\HZWgXDt.exe

C:\Windows\System\JqVjXgx.exe

C:\Windows\System\JqVjXgx.exe

C:\Windows\System\XSFqltz.exe

C:\Windows\System\XSFqltz.exe

C:\Windows\System\ehaikto.exe

C:\Windows\System\ehaikto.exe

C:\Windows\System\DZhMTIo.exe

C:\Windows\System\DZhMTIo.exe

C:\Windows\System\kvjMsKe.exe

C:\Windows\System\kvjMsKe.exe

C:\Windows\System\KvVKjmC.exe

C:\Windows\System\KvVKjmC.exe

C:\Windows\System\vasxcxa.exe

C:\Windows\System\vasxcxa.exe

C:\Windows\System\TRcoesI.exe

C:\Windows\System\TRcoesI.exe

C:\Windows\System\ulcmOSP.exe

C:\Windows\System\ulcmOSP.exe

C:\Windows\System\vhqFLbl.exe

C:\Windows\System\vhqFLbl.exe

C:\Windows\System\ROjINOt.exe

C:\Windows\System\ROjINOt.exe

C:\Windows\System\qxLpsxh.exe

C:\Windows\System\qxLpsxh.exe

C:\Windows\System\AbZgvaa.exe

C:\Windows\System\AbZgvaa.exe

C:\Windows\System\kCQOZRy.exe

C:\Windows\System\kCQOZRy.exe

C:\Windows\System\uJAUUQF.exe

C:\Windows\System\uJAUUQF.exe

C:\Windows\System\VpLdHgX.exe

C:\Windows\System\VpLdHgX.exe

C:\Windows\System\KcnuIyw.exe

C:\Windows\System\KcnuIyw.exe

C:\Windows\System\EazspTz.exe

C:\Windows\System\EazspTz.exe

C:\Windows\System\TBFBAyd.exe

C:\Windows\System\TBFBAyd.exe

C:\Windows\System\NmgZVuz.exe

C:\Windows\System\NmgZVuz.exe

C:\Windows\System\MHolSaU.exe

C:\Windows\System\MHolSaU.exe

C:\Windows\System\BHdGbKJ.exe

C:\Windows\System\BHdGbKJ.exe

C:\Windows\System\PpgmfMf.exe

C:\Windows\System\PpgmfMf.exe

C:\Windows\System\hvyXnzy.exe

C:\Windows\System\hvyXnzy.exe

C:\Windows\System\ZkGYHma.exe

C:\Windows\System\ZkGYHma.exe

C:\Windows\System\siObzVQ.exe

C:\Windows\System\siObzVQ.exe

C:\Windows\System\hmVIxAf.exe

C:\Windows\System\hmVIxAf.exe

C:\Windows\System\cCMEXTf.exe

C:\Windows\System\cCMEXTf.exe

C:\Windows\System\rPNCviO.exe

C:\Windows\System\rPNCviO.exe

C:\Windows\System\hxVGWFG.exe

C:\Windows\System\hxVGWFG.exe

C:\Windows\System\xsEImRh.exe

C:\Windows\System\xsEImRh.exe

C:\Windows\System\kCgGUPx.exe

C:\Windows\System\kCgGUPx.exe

C:\Windows\System\UwfGzNb.exe

C:\Windows\System\UwfGzNb.exe

C:\Windows\System\jjiEvgc.exe

C:\Windows\System\jjiEvgc.exe

C:\Windows\System\NdiUPPk.exe

C:\Windows\System\NdiUPPk.exe

C:\Windows\System\TqTSntV.exe

C:\Windows\System\TqTSntV.exe

C:\Windows\System\SAcRoUJ.exe

C:\Windows\System\SAcRoUJ.exe

C:\Windows\System\dIrOhzs.exe

C:\Windows\System\dIrOhzs.exe

C:\Windows\System\IraIUhh.exe

C:\Windows\System\IraIUhh.exe

C:\Windows\System\xAyiNRZ.exe

C:\Windows\System\xAyiNRZ.exe

C:\Windows\System\SpcvTle.exe

C:\Windows\System\SpcvTle.exe

C:\Windows\System\aYPgJms.exe

C:\Windows\System\aYPgJms.exe

C:\Windows\System\vEOhEFW.exe

C:\Windows\System\vEOhEFW.exe

C:\Windows\System\vehSgCa.exe

C:\Windows\System\vehSgCa.exe

C:\Windows\System\aHEOApp.exe

C:\Windows\System\aHEOApp.exe

C:\Windows\System\DAaGTsc.exe

C:\Windows\System\DAaGTsc.exe

C:\Windows\System\jKnvfMS.exe

C:\Windows\System\jKnvfMS.exe

C:\Windows\System\bNxhjlR.exe

C:\Windows\System\bNxhjlR.exe

C:\Windows\System\IJFQNuE.exe

C:\Windows\System\IJFQNuE.exe

C:\Windows\System\yAJRnMs.exe

C:\Windows\System\yAJRnMs.exe

C:\Windows\System\WbsSJuP.exe

C:\Windows\System\WbsSJuP.exe

C:\Windows\System\vPUajeV.exe

C:\Windows\System\vPUajeV.exe

C:\Windows\System\WRzxzuN.exe

C:\Windows\System\WRzxzuN.exe

C:\Windows\System\eCVwVed.exe

C:\Windows\System\eCVwVed.exe

C:\Windows\System\UmykQEq.exe

C:\Windows\System\UmykQEq.exe

C:\Windows\System\nKluXcj.exe

C:\Windows\System\nKluXcj.exe

C:\Windows\System\Veqycrf.exe

C:\Windows\System\Veqycrf.exe

C:\Windows\System\GdMvFjv.exe

C:\Windows\System\GdMvFjv.exe

C:\Windows\System\GkfSVDN.exe

C:\Windows\System\GkfSVDN.exe

C:\Windows\System\GZcNYRl.exe

C:\Windows\System\GZcNYRl.exe

C:\Windows\System\buVgpDB.exe

C:\Windows\System\buVgpDB.exe

C:\Windows\System\tSARZfc.exe

C:\Windows\System\tSARZfc.exe

C:\Windows\System\bAVCjsK.exe

C:\Windows\System\bAVCjsK.exe

C:\Windows\System\yWJGtHl.exe

C:\Windows\System\yWJGtHl.exe

C:\Windows\System\JhFHkFe.exe

C:\Windows\System\JhFHkFe.exe

C:\Windows\System\YcWEFDa.exe

C:\Windows\System\YcWEFDa.exe

C:\Windows\System\wnjrlAb.exe

C:\Windows\System\wnjrlAb.exe

C:\Windows\System\uegJOtG.exe

C:\Windows\System\uegJOtG.exe

C:\Windows\System\iCXxtfx.exe

C:\Windows\System\iCXxtfx.exe

C:\Windows\System\QKuzbuu.exe

C:\Windows\System\QKuzbuu.exe

C:\Windows\System\zsEBRcK.exe

C:\Windows\System\zsEBRcK.exe

C:\Windows\System\kidWLBG.exe

C:\Windows\System\kidWLBG.exe

C:\Windows\System\mhTGCRu.exe

C:\Windows\System\mhTGCRu.exe

C:\Windows\System\wPPbkVP.exe

C:\Windows\System\wPPbkVP.exe

C:\Windows\System\kcFuYKN.exe

C:\Windows\System\kcFuYKN.exe

C:\Windows\System\itdjyxb.exe

C:\Windows\System\itdjyxb.exe

C:\Windows\System\DVPVLqO.exe

C:\Windows\System\DVPVLqO.exe

C:\Windows\System\BlegpFm.exe

C:\Windows\System\BlegpFm.exe

C:\Windows\System\xddPGhn.exe

C:\Windows\System\xddPGhn.exe

C:\Windows\System\oXXFcrq.exe

C:\Windows\System\oXXFcrq.exe

C:\Windows\System\iSsSxgk.exe

C:\Windows\System\iSsSxgk.exe

C:\Windows\System\kUTuyWn.exe

C:\Windows\System\kUTuyWn.exe

C:\Windows\System\ggpLzLa.exe

C:\Windows\System\ggpLzLa.exe

C:\Windows\System\RMAbrPa.exe

C:\Windows\System\RMAbrPa.exe

C:\Windows\System\VzMnMVh.exe

C:\Windows\System\VzMnMVh.exe

C:\Windows\System\RwUBkhe.exe

C:\Windows\System\RwUBkhe.exe

C:\Windows\System\uxSHVNF.exe

C:\Windows\System\uxSHVNF.exe

C:\Windows\System\qBDhzmu.exe

C:\Windows\System\qBDhzmu.exe

C:\Windows\System\OubxmHh.exe

C:\Windows\System\OubxmHh.exe

C:\Windows\System\BiTBiso.exe

C:\Windows\System\BiTBiso.exe

C:\Windows\System\mxKyymT.exe

C:\Windows\System\mxKyymT.exe

C:\Windows\System\sCjNHjM.exe

C:\Windows\System\sCjNHjM.exe

C:\Windows\System\OkDcWZB.exe

C:\Windows\System\OkDcWZB.exe

C:\Windows\System\FjjrokY.exe

C:\Windows\System\FjjrokY.exe

C:\Windows\System\BESgLYW.exe

C:\Windows\System\BESgLYW.exe

C:\Windows\System\yRONWLV.exe

C:\Windows\System\yRONWLV.exe

C:\Windows\System\ahKfwBT.exe

C:\Windows\System\ahKfwBT.exe

C:\Windows\System\zIPPvNX.exe

C:\Windows\System\zIPPvNX.exe

C:\Windows\System\gPIBusl.exe

C:\Windows\System\gPIBusl.exe

C:\Windows\System\qcKunOR.exe

C:\Windows\System\qcKunOR.exe

C:\Windows\System\MbOpTef.exe

C:\Windows\System\MbOpTef.exe

C:\Windows\System\tBLMxmw.exe

C:\Windows\System\tBLMxmw.exe

C:\Windows\System\SzAUQuV.exe

C:\Windows\System\SzAUQuV.exe

C:\Windows\System\nAXoUhA.exe

C:\Windows\System\nAXoUhA.exe

C:\Windows\System\IVtWkGV.exe

C:\Windows\System\IVtWkGV.exe

C:\Windows\System\DUuyYTL.exe

C:\Windows\System\DUuyYTL.exe

C:\Windows\System\PAfypLv.exe

C:\Windows\System\PAfypLv.exe

C:\Windows\System\SeFLcFE.exe

C:\Windows\System\SeFLcFE.exe

Network

Country	Destination	Domain	Proto
US	8.8.8.8:53	8.8.8.8.in-addr.arpa	udp
US	8.8.8.8:53	26.165.165.52.in-addr.arpa	udp
US	8.8.8.8:53	g.bing.com	udp
US	8.8.8.8:53	138.32.126.40.in-addr.arpa	udp
US	8.8.8.8:53	g.bing.com	udp
US	204.79.197.237:443	g.bing.com	tcp
US	8.8.8.8:53	23.236.111.52.in-addr.arpa	udp
US	8.8.8.8:53	237.197.79.204.in-addr.arpa	udp
US	8.8.8.8:53	88.251.17.2.in-addr.arpa	udp
NL	23.62.61.194:443	www.bing.com	tcp
US	8.8.8.8:53	194.61.62.23.in-addr.arpa	udp
US	8.8.8.8:53	98.251.17.2.in-addr.arpa	udp
US	8.8.8.8:53	104.193.132.51.in-addr.arpa	udp

Files

memory/2272-0-0x00007FF76BB40000-0x00007FF76BE91000-memory.dmp

memory/2272-1-0x00000183F1100000-0x00000183F1110000-memory.dmp

C:\Windows\System\DdPnBta.exe

MD5	51b5d8a281180dfb5308c9ce3e555958
SHA1	c1ee0d923a80ff96b65c1d528562749459a130ff
SHA256	b78fd7d63249e98152f0ea8fe5ec44d6084ef105ce5e7dd19350de83a8b03f36
SHA512	7e623b9683736a1106a74676a7a849e6e6076be02db86e7c5aa346beeb9395b7ba280fa00a030363ef497387ef5db9864f80372d632b16023fc425aab5bcf9a3

C:\Windows\System\TxZEXEK.exe

MD5	ec5cc713978c01c1f6ff9cc86fe0ddee
SHA1	e153d719c54c9be2a22686cf65e8bcd29b4c890d
SHA256	bf55b39be89ccc7c31235344f3dc048331f0e98616d660c1a3c0286ec7905655
SHA512	3282fbae1104502da111cbeede18435a371615b8ae59b7288ac3eb5a7003587e97c5627a71e54ec8b22b5c2bc11c7639194b7f8b6886a9de2c5012cf74fae41b

C:\Windows\System\AQWxtRo.exe

MD5	895d94ecfe231986d637e6dc787a3928
SHA1	5c4c797a22412317e2b2e59b235ab7e0dfde3e86
SHA256	d90c7dc90dea5363562566c0e398641209b51c865d3a94fb9580e0a7999a6e30
SHA512	a96772a2da0085aa58734a9ad74b8d8c2cbfdcbb990c0c91ee10a307bae0221963a8d1a1d32167852151dfe8a6369dcfe5b4dba7d378bf86e5415a4c6c235ba9

C:\Windows\System\eqTeBvr.exe

MD5	3acbb5d2a66e7d41eca1fef01eeffd24
SHA1	25a7b59224319241ae8000e30628de4d5ae1cf9f
SHA256	8bfbb3ed3ec71ff8a7a81f76c1b004ef6b8cbb7cf2c85fc58a0906b41ef472ea
SHA512	2433c95912fff4adb71280b8b481bb6e33a6d7f71886024278425a0e71f4cfac5c4233f9b3040bcf325833510dc5ad0c7475b9eb48300217c42e6a3c3291964e

C:\Windows\System\rwxzycF.exe

MD5	d5731c5f4674ff2d018bc40824db2564
SHA1	c6f5c96e7ae8de2cfb5fbaad41f66ec1d9036864
SHA256	38e37259bca4eef0540cb0595e33df538384c3b2a3fcb3339860741d98c374d5
SHA512	66d7e581bf4bd3555be9124384c07d3175b3f1260a01ec4573e9623dd87d553d8007eb3c20ad31f069c1073e0018e2aa72809c3838ca629d8dea3a9f486da893

C:\Windows\System\IPLeqVD.exe

MD5	0a5ae2ddff25c4ad381433882c8ad40c
SHA1	98aae258523c2955f1f6143624bb63ab49f2a774
SHA256	16ac5f85d43a1be0f3bb87d98b2224a94b26d389b794dcdea218fbab1e8e8ad5
SHA512	9086c9d296ef02e928e5db9a5a9fd8a93cf25168319b595de4d6ab4a9f270d4f02e87cad1a16b6d1abb7b74c125d9a1667d83582264b1122b9672c15a967b011

C:\Windows\System\lzbOXcE.exe

MD5	aac2e6afece8c625c8b8c6da1e267a72
SHA1	43021193e5ff36686efe98985f87716477a23f02
SHA256	e649bee86fb19480d215c82234211637ff46332c8348929c78530b42e4a0beea
SHA512	29f1bd8bae6b8bca0a590ba3117d099de2d31dfacd446d9ba66b3d5199ba6a13693c187c2655d5e3809448cedd76ee10b23dc94602993b913f77d5fde0ed66c9

C:\Windows\System\cbWXoJc.exe

MD5	5d6dcbab333131dedcfcdce43acb7e05
SHA1	03bd0a6a81bb4897ae57e2997624cb8b91491faa
SHA256	99519afb32d6add33f7b59b4f034d243e8ce7556f4d4a79fdbce03511df793b6
SHA512	d439645f0bf460d6f1578b32df15e1fd60c4e9c1e4423e9a666ae7212c18965969beba93417f0dda6ee4d20b68614c0c93631972c25da6dc2320b0bfc594b10b

C:\Windows\System\UyVeIlp.exe

MD5	136b4a361eca09c613e33e1dad9f407a
SHA1	4e1242f5c55e0146d6307655b6f2cc377ed22688
SHA256	c6a6f1d75e13e687ecc84aee6bd9446e50fe4656b1b9491936ed60913ca9a5fc
SHA512	998a671cf88244a286d8b94e1c6f7501e074dffa754831fff72be1150cf139d13d2664cc26bbcb72bc1530ff0d5ee2db029b1caf8cebed58b5face21fe08004b

C:\Windows\System\wiDmkYd.exe

MD5	62ae87a566a20b4a97623cdcb93625a1
SHA1	6676481c2aec93794898591c0a1330cb33169286
SHA256	b24587af3757af703a910a18ce83f6b4a201413c136886de9593729c2e3f50e8
SHA512	746a7e124dc7f639c3e77d09c4fee9800fb57bbcee89ad9b543b6f7768de9d1bb04f8179829a29a52bf9de617c2c6f1ac635c972ea7134e34b0928cfe10ce89e

C:\Windows\System\nGiHJpU.exe

MD5	3a5114b30cafc4a8f83f7824c3b90a72
SHA1	5f5bc1b9fca22e1af2eada10ea6e1c0c6bc8a5d1
SHA256	aa0688612d81084d812a054ee2cc324d84c0acab41975374f7b8d5e6928d6a3d
SHA512	5e13bd49c42841c17f751a5b00d82c1b42e85dae02c53be2901898cd162297f1704655bc0ae4f69ffc63d8ef5f7462ad253e8256426298162e1e44d8dc89c61e

memory/1464-493-0x00007FF6163F0000-0x00007FF616741000-memory.dmp

memory/2648-495-0x00007FF683030000-0x00007FF683381000-memory.dmp

memory/816-494-0x00007FF79E290000-0x00007FF79E5E1000-memory.dmp

memory/4156-496-0x00007FF71AAA0000-0x00007FF71ADF1000-memory.dmp

memory/2456-497-0x00007FF6085F0000-0x00007FF608941000-memory.dmp

memory/4208-498-0x00007FF652020000-0x00007FF652371000-memory.dmp

memory/3364-499-0x00007FF60C3A0000-0x00007FF60C6F1000-memory.dmp

memory/4492-501-0x00007FF704220000-0x00007FF704571000-memory.dmp

memory/1708-502-0x00007FF6C8CD0000-0x00007FF6C9021000-memory.dmp

memory/4584-504-0x00007FF7FCE10000-0x00007FF7FD161000-memory.dmp

memory/1048-506-0x00007FF786510000-0x00007FF786861000-memory.dmp

memory/3192-507-0x00007FF632240000-0x00007FF632591000-memory.dmp

memory/4420-509-0x00007FF6959D0000-0x00007FF695D21000-memory.dmp

memory/1492-508-0x00007FF7250C0000-0x00007FF725411000-memory.dmp

memory/4696-505-0x00007FF76D380000-0x00007FF76D6D1000-memory.dmp

memory/756-503-0x00007FF72C700000-0x00007FF72CA51000-memory.dmp

memory/2432-500-0x00007FF71B880000-0x00007FF71BBD1000-memory.dmp

C:\Windows\System\dsKVqxU.exe

MD5	04161cc91a30390a7feebfd6dee1b28d
SHA1	51b14c8ba6692cdcb4a05e38ae42abd8a89ed9dc
SHA256	d7dcfc949ce9a91f3a231a7b051d31adc268eed9abda2412d80bc493998d41cb
SHA512	be779c7bc524f70f15ea0b502d0ad7245722611f62809bd0f7f9a4e579af27a6c7cc12aae38b5b42fdb12257284e99e57363a2d087939263943b578881730b52

C:\Windows\System\fvYIOiG.exe

MD5	4d3bc8065828bf0e9a60ab8aa5ee222e
SHA1	64bc008e1d7d9a7afee048b2997dd0e5e00abb95
SHA256	4eadac88c0e1e1c6cd9481dae52f3e4ab708d4a58c6b5d52f9e654bdbcc1c2d3
SHA512	70f8b42a39b9f42d6ed4c54e66a153dcbcec6bd41712e172e7176b6d0ceb095194135740693d81c701b546439a66eb421fcba6702b9af5e9cf08088e4d8f90fc

C:\Windows\System\eqnyBlH.exe

MD5	f7b82c6bec3169ce09cf6e6180dfc7e2
SHA1	d8a6b338e50232d05e450201444040d23fa8a617
SHA256	186bdb3b2b35c83a9113ab2447bf4321256f15170e6e5f663e5cdbb1f0e79dee
SHA512	124d37cdcb32c5023227b2de6948984e43f9a8cd9520fa8ba51617b2bf0c799797f24620184dc93976d1c6c7c323b4ebb829aded79874b360f168063e34d6e94

C:\Windows\System\dCmULrZ.exe

MD5	42025a03fc23f7f9a3f14cb5aa534a77
SHA1	2f28fa1e05e7208ba6c26db1c83c1eddd1d19c5d
SHA256	248336a04dd6edaeb38bd2db0236470874611e154680a8729f905e068b7d7cff
SHA512	bd9c3cd0cef77a528672486b657dbea0703a8d586c05aefb387bdacf873461864e39c758937e0d3856b4590908ca10352a37d18bffc33052d69977215f639315

C:\Windows\System\VrGgRHW.exe

MD5	bb4ccae4ecd4c5936cc06f1e1a61edf5
SHA1	966399f94c33e0d268ffcf7b3c31d6612114831f
SHA256	b8668ea96c49e4bfa357488bcb38ce51873f7fe583cbf3211c6616fdd2d4018c
SHA512	558be6ce0c828aac0246597d0da4659ab134114c62a84fb12c895901901ef1d66813ecef0baec057c35d14965f535f5dd10b2fa760afbdf435f01036d28abb74

C:\Windows\System\wPVEgtY.exe

MD5	3e8e17a421b6c7ab5b46a2c1d7a9e4b9
SHA1	1476fd1cd7daa25aa2eb301f83e581b8bb7db650
SHA256	7f90808b0edfb28de65c46987628def9e15e8b0c4cb0c77086ddd411e586ed35
SHA512	2d20c6c4306cb71f6d7597388ea8f4d58d651616ef98c7951a7084eee0f181ebc68b4e2dd71c99016703e22cbde48c9e25c588fd18d7cb82e90c1f570b2c7476

C:\Windows\System\ZpVHUca.exe

MD5	ca4484c9272b803539c91f74b8c56021
SHA1	1764d843fc7736798ba5f5a3c0cdc76b7a5add02
SHA256	db8c0c50d004c3471a5cc9edb86beeefed1e2b6f63cd7edd4ecbdeab4f576561
SHA512	62d2091df70c66134042349f93a4dea56e10022c0f149a7705f6fda811c6d6b5a28b45f0e6e7e939efa06193addfc9767cda00040f31ddf432b4a6b0b0d830dd

C:\Windows\System\BtZclgg.exe

MD5	26feae59943d8877b91ee8d698ed7a0c
SHA1	4345458585f355330b7b2d87510ff0655d0b0fb0
SHA256	a5be683da0abeb1606dda321a1891274404ef5c9ed45cfcc98eadbed1466bf01
SHA512	407f9c5f0cab4d609919579c9356f9fdd4aabf2e190690aed94deda027808d1850b214528f28a71d5a83ef0ac93599f1fdd830ef4b4ff6daefcb4d63e4b89875

C:\Windows\System\dwizsfM.exe

MD5	78284dcfaa34eb1f94529dd0598e0c2a
SHA1	1c13c1bfdab905479635e79ba9e24b266d990f7d
SHA256	a26c5c6c848f7d464fe6e70101b3abaef8230c6424b53d0b3720c33c8d4e1562
SHA512	e339c0e29caa784d749f20929a756a23f6e870e81bb89d3a1803dfb5e2472550d771e56e4641ad0a7291efd1cb465d98b1d0c56402bcf2a8eb42a60fce5dd261

C:\Windows\System\XfurzyP.exe

MD5	2cbe25ad30fa9b63eb8dcd565b0cd08f
SHA1	417ee9f50a0cdf97fa72ff1fba3b774588a90490
SHA256	827c8323c7b5f2a57c5d1554f9f692197a829bcba13553df8a033025d226a3e6
SHA512	3e67aa3af26fde25802891e74b676135663512d43129e489dbc0dac89578f3541ecb19c17278fc8e4f79000381f9eb9384363f0e4a561e69c2cebf000ddea38c

C:\Windows\System\dQufFAc.exe

MD5	26b49ff433928151174d89c6159534ed
SHA1	d62871f702771cc350517d2209b23e88bace8c73
SHA256	3da3c95383df6891cdd2abe3c455a7f54644e96ca781678493d7893aa7481b5b
SHA512	400cd095733b480e3288c267ecdadef7615e5d273a4d464b1807cc6f0f76dcbe50c694b6ee445ce9fb3063d702a6de432d2d9b6c0fc9f6ad0aeb5f681f45f44b

C:\Windows\System\IrUyiRK.exe

MD5	795576b32b54c1f2e92caad108b3f7f5
SHA1	047be8afaaa83caf0f0b3a5367d10cfcaa40a61a
SHA256	64d61f4335a15b775d447b518cd9ba956e63c279961d8c57dc3b0a6a27ba2f8e
SHA512	e9be1828f19d4152fb8dad0b743bc17e18cf93ba5d93cf987b4721569e80bef513f122beda432e0941847ec5bcd0f5150daefdbbfd8fbc2be9bf63a1beb0acc2

C:\Windows\System\oXECras.exe

MD5	d35cfe0e7c7a0e4a82df291135e898fe
SHA1	26fe3205169dd8a707bd7e3426b736c6a93d7ffb
SHA256	f0e13d604dd468305f68346ae24ff053e7c4951f266277ae35f7b16da3be0d3d
SHA512	84ac342d08ca1598e8eb344424647623b00979bc2db3bf88315677c2efd9a0adecf1442651c141f05978ccc7f957397d9090bac7f94c2a9d078fc45a99ce4b59

C:\Windows\System\GzNrNfs.exe

MD5	168b522d7939c2165d9fe3d46c8f300a
SHA1	6aa70c4e06aad1e13a73d8acd1114d77bf1c0e83
SHA256	eec4f37ee8cffbc44161d4682039c2d0093ac6b8f8030d746cd89753453f01a9
SHA512	bae7bc3e56d647a5a2e947b2893312034b9e305b69861963bcd17415e319f83fa3e0e7133eeb6b17a4fcb7d4e47860173428b08e5d89a6dba2afe4f58a5e6283

C:\Windows\System\HUXNJOl.exe

MD5	e7b211f79220b19cf4b186b01e88c2e6
SHA1	ef51a93f1c471567b6b256de57cd11c3413f4f71
SHA256	40014123891605e1d13354bc0e733f49f25ba6bbc0d621fb4160b1f1c7b98832
SHA512	8c67fd5ad117f07898414c5ce17f40842a4de0cdb4cf567a79e2e943f47ed946c212d9678681f0c23b21aa271bb55554cbbd9a1d8b1d83e72c61741fd96540cb

C:\Windows\System\aYOsTHW.exe

MD5	dc457a202f47a3e55b4a5f4184613b8a
SHA1	bd01b7c0d7edeaee3a05dd8e59df4a18484daa4f
SHA256	81d4152d54a947aabcf665999f31a012f848c009afa34264c559609f7e38651b
SHA512	9c01130c884a30b4c0ab4e9e95d107d4e139323b8c830319238fc9c924efec1668e55e3c7c2e60ba01db959b4a3ad192bc9ff2d40112b518256869c3b5915c72

memory/4232-75-0x00007FF6147A0000-0x00007FF614AF1000-memory.dmp

C:\Windows\System\nceFosd.exe

MD5	3aba161ab7a2246698b4ea03eee1cac8
SHA1	39d72a184726108ae6e9a84d39bb55192a0bcf79
SHA256	7b3cec77143bc4f22d9f54847791de85f4c2932447415529395fb080107959b8
SHA512	cdd9f9b934d048ffea1b27d574899796da1353ac395857077389ed4287dcaa7c5f0218186bd3c8380e87d2ad57be1b31f39b814ae142c9e0f76afbd7b7867997

C:\Windows\System\kUGCiYT.exe

MD5	3499e9c7dd740130d4d9ae74a8a948a6
SHA1	21cbc6d7a0ab1717bde2790c786200f03099d2b6
SHA256	0bcb0fca7e74e07d606aa78fc3953e6ec6337524bcdeab37d1aec9b4931565ea
SHA512	2252c1056300f0d967afb21903b401fd0f718c78ebce8015ffd3087d52b7020772d0e13c1c5da7d6f4816c46723a8ca0803b8cbdf4aeb4c0620face0e2c057b3

C:\Windows\System\WbFDFnT.exe

MD5	0e55bff9928d08df0c395e46bd667f8d
SHA1	8f27dbfaa3d71fa7302f79d90e27b006d52abb28
SHA256	3ac62f3fbb821de09ce5626b67f62948a0b85de6872ec85c0ce0f115f2329883
SHA512	52292d0ee108be45bc221085776ada8d20f0f9fb152a64734bbdc1c3165ba810db86e538a962d6e83841ba004ca4ea9abf9a3b80cac520d5ec91bb2f79987431

memory/2880-67-0x00007FF7B7240000-0x00007FF7B7591000-memory.dmp

memory/4864-66-0x00007FF763500000-0x00007FF763851000-memory.dmp

memory/4824-59-0x00007FF7ED210000-0x00007FF7ED561000-memory.dmp

memory/2696-53-0x00007FF78DC20000-0x00007FF78DF71000-memory.dmp

memory/2652-52-0x00007FF741F00000-0x00007FF742251000-memory.dmp

C:\Windows\System\burnJwJ.exe

MD5	c07e04c260179a754b4defa555cf36b3
SHA1	2a0b9c6df90eba44f6cf63f5d5c27c297bbd97ac
SHA256	0b9eca05e0aa93e7c3cac5f9790bf3bcaf98a61311eaa2531b07779f8ecbe237
SHA512	f394faacf39b4577b34f4fb4808a3bce7cbfb894b0224e20674c6d4378af98eb1fa60a7b4002c8dd78e808eec17c15ffb1d9f185a8a69bf9997fc2b75288564a

memory/2060-44-0x00007FF659050000-0x00007FF6593A1000-memory.dmp

C:\Windows\System\gZarJGa.exe

MD5	034ea105984649a014651425231294f1
SHA1	eafa77176c7ad1a4ed4152c0dd3b9576b65f0704
SHA256	4eaa5e07bc93cd7b2db30bef700cbe99c6e27489a1bbb6881fb3fb9530277e9f
SHA512	a417f381f2a55417198cfc291b315de43d200dad18f20e50ddbcba22a6140fcd607efa3e521f9836e56d882a72bfef2885d12aa304f3234eee297e518ee996b9

memory/3636-32-0x00007FF7402E0000-0x00007FF740631000-memory.dmp

memory/3948-29-0x00007FF678CD0000-0x00007FF679021000-memory.dmp

memory/464-23-0x00007FF7F1C50000-0x00007FF7F1FA1000-memory.dmp

C:\Windows\System\KJhZHoa.exe

MD5	e00e22165a8c14cdb7c41d07717daa38
SHA1	284287d0263f09f0cfaecda98b81df7005093102
SHA256	c726011cb3ac22d648fb5c0186f35e9cc1fc20a6912ec66a2b15d540b30dadf7
SHA512	4bf3280f7ce0208ed323c807b6c846e0d162ffe8905792bb2772c895d8b731f39068a817f5a4a27e08b6916a21ad4932e92549d0884f3e031dc97032e9d34799

memory/2592-14-0x00007FF6EA430000-0x00007FF6EA781000-memory.dmp

memory/3008-9-0x00007FF656DB0000-0x00007FF657101000-memory.dmp

memory/2272-1550-0x00007FF76BB40000-0x00007FF76BE91000-memory.dmp

memory/3008-2181-0x00007FF656DB0000-0x00007FF657101000-memory.dmp

memory/2592-2183-0x00007FF6EA430000-0x00007FF6EA781000-memory.dmp

memory/3948-2186-0x00007FF678CD0000-0x00007FF679021000-memory.dmp

memory/2060-2326-0x00007FF659050000-0x00007FF6593A1000-memory.dmp

memory/4824-2327-0x00007FF7ED210000-0x00007FF7ED561000-memory.dmp

memory/4864-2328-0x00007FF763500000-0x00007FF763851000-memory.dmp

memory/2880-2329-0x00007FF7B7240000-0x00007FF7B7591000-memory.dmp

memory/4232-2349-0x00007FF6147A0000-0x00007FF614AF1000-memory.dmp

memory/3008-2355-0x00007FF656DB0000-0x00007FF657101000-memory.dmp

memory/3948-2359-0x00007FF678CD0000-0x00007FF679021000-memory.dmp

memory/2592-2357-0x00007FF6EA430000-0x00007FF6EA781000-memory.dmp

memory/2060-2361-0x00007FF659050000-0x00007FF6593A1000-memory.dmp

memory/464-2365-0x00007FF7F1C50000-0x00007FF7F1FA1000-memory.dmp

memory/2696-2367-0x00007FF78DC20000-0x00007FF78DF71000-memory.dmp

memory/4824-2370-0x00007FF7ED210000-0x00007FF7ED561000-memory.dmp

memory/2652-2371-0x00007FF741F00000-0x00007FF742251000-memory.dmp

memory/3636-2363-0x00007FF7402E0000-0x00007FF740631000-memory.dmp

memory/4864-2377-0x00007FF763500000-0x00007FF763851000-memory.dmp

memory/2648-2383-0x00007FF683030000-0x00007FF683381000-memory.dmp

memory/4156-2381-0x00007FF71AAA0000-0x00007FF71ADF1000-memory.dmp

memory/4232-2378-0x00007FF6147A0000-0x00007FF614AF1000-memory.dmp

memory/1464-2379-0x00007FF6163F0000-0x00007FF616741000-memory.dmp

memory/816-2374-0x00007FF79E290000-0x00007FF79E5E1000-memory.dmp

memory/2456-2385-0x00007FF6085F0000-0x00007FF608941000-memory.dmp

memory/4208-2387-0x00007FF652020000-0x00007FF652371000-memory.dmp

memory/2432-2391-0x00007FF71B880000-0x00007FF71BBD1000-memory.dmp

memory/4492-2393-0x00007FF704220000-0x00007FF704571000-memory.dmp

memory/3364-2389-0x00007FF60C3A0000-0x00007FF60C6F1000-memory.dmp

memory/756-2421-0x00007FF72C700000-0x00007FF72CA51000-memory.dmp

memory/4584-2419-0x00007FF7FCE10000-0x00007FF7FD161000-memory.dmp

memory/4696-2414-0x00007FF76D380000-0x00007FF76D6D1000-memory.dmp

memory/1048-2413-0x00007FF786510000-0x00007FF786861000-memory.dmp

memory/4420-2412-0x00007FF6959D0000-0x00007FF695D21000-memory.dmp

memory/1492-2411-0x00007FF7250C0000-0x00007FF725411000-memory.dmp

memory/3192-2410-0x00007FF632240000-0x00007FF632591000-memory.dmp

memory/1708-2409-0x00007FF6C8CD0000-0x00007FF6C9021000-memory.dmp

memory/2880-2551-0x00007FF7B7240000-0x00007FF7B7591000-memory.dmp

Sample ID	240613-2m3adatcpa
Target	8d16c5b9f9ef9a6907abafe9540d31c0_NeikiAnalytics.exe
SHA256	045983259a2f9eb469687f105c6a64717b8cac6b61246c411653f2912682cd79
Tags	upx miner xmrig

Malware Analysis Report

2024-07-28 21:40

Table of Contents

Analysis Overview

Threat Level: Known bad

Malicious Activity Summary

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files