Analysis Overview

score

10^/10

SHA256

290af2c3fdb5292e8985f6df60e35a82e1a18d6d0837151912a268432f70a4be

Threat Level: Known bad

The file 7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe was found to be: Known bad.

Malicious Activity Summary

xmrig miner upx

xmrig

Xmrig family

XMRig Miner payload

Executes dropped EXE

Loads dropped DLL

UPX packed file

Drops file in Windows directory

Unsigned PE

Suspicious use of WriteProcessMemory

MITRE ATT&CK Matrix

N/A

Analysis: static1

Detonation Overview

Reported

2024-06-13 13:10

Signatures

XMRig Miner payload

miner

Description	Indicator	Process	Target
N/A	N/A	N/A	N/A

Xmrig family

xmrig

UPX packed file

upx

Description	Indicator	Process	Target
N/A	N/A	N/A	N/A

Unsigned PE

Description	Indicator	Process	Target
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-13 13:10

Reported

2024-06-13 13:12

Platform

win7-20240508-en

Max time kernel

142s

Max time network

119s

Command Line

"C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe"

Signatures

xmrig

miner xmrig

XMRig Miner payload

miner

Description	Indicator	Process	Target
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A

Executes dropped EXE

Description	Indicator	Process	Target
N/A	N/A	C:\Windows\System\ZkXmSDU.exe	N/A
N/A	N/A	C:\Windows\System\RbyYiVV.exe	N/A
N/A	N/A	C:\Windows\System\KQXNgko.exe	N/A
N/A	N/A	C:\Windows\System\vUexJbm.exe	N/A
N/A	N/A	C:\Windows\System\SWpezdZ.exe	N/A
N/A	N/A	C:\Windows\System\pgPYcWq.exe	N/A
N/A	N/A	C:\Windows\System\Shqbuvu.exe	N/A
N/A	N/A	C:\Windows\System\BfAUWop.exe	N/A
N/A	N/A	C:\Windows\System\lKovnnF.exe	N/A
N/A	N/A	C:\Windows\System\eqxxviW.exe	N/A
N/A	N/A	C:\Windows\System\nINMMum.exe	N/A
N/A	N/A	C:\Windows\System\HrrvZER.exe	N/A
N/A	N/A	C:\Windows\System\ezDhEgX.exe	N/A
N/A	N/A	C:\Windows\System\NkLUbvZ.exe	N/A
N/A	N/A	C:\Windows\System\PIfhcvQ.exe	N/A
N/A	N/A	C:\Windows\System\ToiWXwE.exe	N/A
N/A	N/A	C:\Windows\System\VyFZYFK.exe	N/A
N/A	N/A	C:\Windows\System\UuxYyWB.exe	N/A
N/A	N/A	C:\Windows\System\QzbFxiK.exe	N/A
N/A	N/A	C:\Windows\System\QqZvVQG.exe	N/A
N/A	N/A	C:\Windows\System\gXsfGFM.exe	N/A
N/A	N/A	C:\Windows\System\jbLNIlI.exe	N/A
N/A	N/A	C:\Windows\System\ZOoBYYe.exe	N/A
N/A	N/A	C:\Windows\System\hqWZTWp.exe	N/A
N/A	N/A	C:\Windows\System\ltKorkC.exe	N/A
N/A	N/A	C:\Windows\System\zefOasL.exe	N/A
N/A	N/A	C:\Windows\System\LrqVStA.exe	N/A
N/A	N/A	C:\Windows\System\MDPWzfl.exe	N/A
N/A	N/A	C:\Windows\System\jWrNDXA.exe	N/A
N/A	N/A	C:\Windows\System\gxSxctx.exe	N/A
N/A	N/A	C:\Windows\System\BeDuiEA.exe	N/A
N/A	N/A	C:\Windows\System\DgVQhEF.exe	N/A
N/A	N/A	C:\Windows\System\FIXXJsF.exe	N/A
N/A	N/A	C:\Windows\System\gWhKkUV.exe	N/A
N/A	N/A	C:\Windows\System\UzeVKJg.exe	N/A
N/A	N/A	C:\Windows\System\WHKOIhr.exe	N/A
N/A	N/A	C:\Windows\System\SANFzzA.exe	N/A
N/A	N/A	C:\Windows\System\yrcmkMv.exe	N/A
N/A	N/A	C:\Windows\System\widRFiz.exe	N/A
N/A	N/A	C:\Windows\System\ScSslic.exe	N/A
N/A	N/A	C:\Windows\System\IHUdmtm.exe	N/A
N/A	N/A	C:\Windows\System\wVpaHsM.exe	N/A
N/A	N/A	C:\Windows\System\dsgsXOc.exe	N/A
N/A	N/A	C:\Windows\System\GceqfEn.exe	N/A
N/A	N/A	C:\Windows\System\AtITBoB.exe	N/A
N/A	N/A	C:\Windows\System\ioZTGSI.exe	N/A
N/A	N/A	C:\Windows\System\BoiBpCo.exe	N/A
N/A	N/A	C:\Windows\System\qAViUAh.exe	N/A
N/A	N/A	C:\Windows\System\oPrLeHl.exe	N/A
N/A	N/A	C:\Windows\System\HeqcFqm.exe	N/A
N/A	N/A	C:\Windows\System\DJIBNNE.exe	N/A
N/A	N/A	C:\Windows\System\mPZxRoS.exe	N/A
N/A	N/A	C:\Windows\System\tqzAnLT.exe	N/A
N/A	N/A	C:\Windows\System\ioGpFcz.exe	N/A
N/A	N/A	C:\Windows\System\MvLxZAN.exe	N/A
N/A	N/A	C:\Windows\System\RviIYrA.exe	N/A
N/A	N/A	C:\Windows\System\vOgyPqo.exe	N/A
N/A	N/A	C:\Windows\System\rbQhDHu.exe	N/A
N/A	N/A	C:\Windows\System\RwLcyRv.exe	N/A
N/A	N/A	C:\Windows\System\fGquSmn.exe	N/A
N/A	N/A	C:\Windows\System\pPSRVNp.exe	N/A
N/A	N/A	C:\Windows\System\DOhSTxZ.exe	N/A
N/A	N/A	C:\Windows\System\OGJBkDx.exe	N/A
N/A	N/A	C:\Windows\System\NzgpyCk.exe	N/A

Loads dropped DLL

Description	Indicator	Process	Target
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A

UPX packed file

upx

Description	Indicator	Process	Target
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A

Drops file in Windows directory

Description	Indicator	Process	Target
File created	C:\Windows\System\ayswawa.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\XyGbDBC.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\RwFFWwr.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\DKaKVsq.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\mXzdQZM.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\XsNVaOV.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\QOGQGBa.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\qErbFra.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\tERSUKF.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\qkQWQwz.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\EaIBIEh.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\akYfPoL.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\NrRjxdt.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\LzdyLmw.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\ypQxQLQ.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\JiszcGa.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\Shqbuvu.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\JKSMARj.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\MsmwHrM.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\HkEuKdG.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\OYowaBz.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\pYJaRWQ.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\UQMrOAY.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\WKgDRFJ.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\nwFzrLr.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\XKmhFvC.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\iqImCnU.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\PQbMgkr.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\bcxURAf.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\Kjjcgba.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\vdxMHGI.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\vKsBtZW.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\pAnlgQz.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\TjjFEQq.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\hEVLYCu.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\goWxVQW.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\CvbkGHb.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\xQawqgT.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\vsLquJl.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\HLvXZPV.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\udrFdLa.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\vKLiztF.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\ssMCDiY.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\qQrImdH.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\BeBUIEB.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\BeDuiEA.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\edaUTwx.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\rYxozVA.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\btVIMvn.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\osYkuTU.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\GPGLyHj.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\sRzFcJA.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\QOnVmFX.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\rraTVZC.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\vRsCqIp.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\xAGTnno.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\BtmPRLK.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\UQfztfy.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\KmvymVA.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\JoJvOGy.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\UuxYyWB.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\KwWRhlB.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\zgdczBC.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\HuRwhhY.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A

Suspicious use of WriteProcessMemory

Description	Indicator	Process	Target
PID 2944 wrote to memory of 3016	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\ZkXmSDU.exe
PID 2944 wrote to memory of 3016	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\ZkXmSDU.exe
PID 2944 wrote to memory of 3016	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\ZkXmSDU.exe
PID 2944 wrote to memory of 2136	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\RbyYiVV.exe
PID 2944 wrote to memory of 2136	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\RbyYiVV.exe
PID 2944 wrote to memory of 2136	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\RbyYiVV.exe
PID 2944 wrote to memory of 2356	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\KQXNgko.exe
PID 2944 wrote to memory of 2356	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\KQXNgko.exe
PID 2944 wrote to memory of 2356	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\KQXNgko.exe
PID 2944 wrote to memory of 2648	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\vUexJbm.exe
PID 2944 wrote to memory of 2648	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\vUexJbm.exe
PID 2944 wrote to memory of 2648	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\vUexJbm.exe
PID 2944 wrote to memory of 2868	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\BfAUWop.exe
PID 2944 wrote to memory of 2868	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\BfAUWop.exe
PID 2944 wrote to memory of 2868	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\BfAUWop.exe
PID 2944 wrote to memory of 2812	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\SWpezdZ.exe
PID 2944 wrote to memory of 2812	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\SWpezdZ.exe
PID 2944 wrote to memory of 2812	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\SWpezdZ.exe
PID 2944 wrote to memory of 2860	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\nINMMum.exe
PID 2944 wrote to memory of 2860	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\nINMMum.exe
PID 2944 wrote to memory of 2860	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\nINMMum.exe
PID 2944 wrote to memory of 2560	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\pgPYcWq.exe
PID 2944 wrote to memory of 2560	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\pgPYcWq.exe
PID 2944 wrote to memory of 2560	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\pgPYcWq.exe
PID 2944 wrote to memory of 2196	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\HrrvZER.exe
PID 2944 wrote to memory of 2196	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\HrrvZER.exe
PID 2944 wrote to memory of 2196	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\HrrvZER.exe
PID 2944 wrote to memory of 2688	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\Shqbuvu.exe
PID 2944 wrote to memory of 2688	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\Shqbuvu.exe
PID 2944 wrote to memory of 2688	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\Shqbuvu.exe
PID 2944 wrote to memory of 2524	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\NkLUbvZ.exe
PID 2944 wrote to memory of 2524	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\NkLUbvZ.exe
PID 2944 wrote to memory of 2524	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\NkLUbvZ.exe
PID 2944 wrote to memory of 2568	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\lKovnnF.exe
PID 2944 wrote to memory of 2568	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\lKovnnF.exe
PID 2944 wrote to memory of 2568	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\lKovnnF.exe
PID 2944 wrote to memory of 2640	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\PIfhcvQ.exe
PID 2944 wrote to memory of 2640	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\PIfhcvQ.exe
PID 2944 wrote to memory of 2640	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\PIfhcvQ.exe
PID 2944 wrote to memory of 2760	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\eqxxviW.exe
PID 2944 wrote to memory of 2760	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\eqxxviW.exe
PID 2944 wrote to memory of 2760	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\eqxxviW.exe
PID 2944 wrote to memory of 1644	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\ToiWXwE.exe
PID 2944 wrote to memory of 1644	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\ToiWXwE.exe
PID 2944 wrote to memory of 1644	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\ToiWXwE.exe
PID 2944 wrote to memory of 3032	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\ezDhEgX.exe
PID 2944 wrote to memory of 3032	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\ezDhEgX.exe
PID 2944 wrote to memory of 3032	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\ezDhEgX.exe
PID 2944 wrote to memory of 2336	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\VyFZYFK.exe
PID 2944 wrote to memory of 2336	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\VyFZYFK.exe
PID 2944 wrote to memory of 2336	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\VyFZYFK.exe
PID 2944 wrote to memory of 2444	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\UuxYyWB.exe
PID 2944 wrote to memory of 2444	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\UuxYyWB.exe
PID 2944 wrote to memory of 2444	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\UuxYyWB.exe
PID 2944 wrote to memory of 1812	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\QzbFxiK.exe
PID 2944 wrote to memory of 1812	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\QzbFxiK.exe
PID 2944 wrote to memory of 1812	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\QzbFxiK.exe
PID 2944 wrote to memory of 1980	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\QqZvVQG.exe
PID 2944 wrote to memory of 1980	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\QqZvVQG.exe
PID 2944 wrote to memory of 1980	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\QqZvVQG.exe
PID 2944 wrote to memory of 344	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\gXsfGFM.exe
PID 2944 wrote to memory of 344	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\gXsfGFM.exe
PID 2944 wrote to memory of 344	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\gXsfGFM.exe
PID 2944 wrote to memory of 1300	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\jbLNIlI.exe

Processes

C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe

"C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe"

C:\Windows\System\ZkXmSDU.exe

C:\Windows\System\ZkXmSDU.exe

C:\Windows\System\RbyYiVV.exe

C:\Windows\System\RbyYiVV.exe

C:\Windows\System\KQXNgko.exe

C:\Windows\System\KQXNgko.exe

C:\Windows\System\vUexJbm.exe

C:\Windows\System\vUexJbm.exe

C:\Windows\System\BfAUWop.exe

C:\Windows\System\BfAUWop.exe

C:\Windows\System\SWpezdZ.exe

C:\Windows\System\SWpezdZ.exe

C:\Windows\System\nINMMum.exe

C:\Windows\System\nINMMum.exe

C:\Windows\System\pgPYcWq.exe

C:\Windows\System\pgPYcWq.exe

C:\Windows\System\HrrvZER.exe

C:\Windows\System\HrrvZER.exe

C:\Windows\System\Shqbuvu.exe

C:\Windows\System\Shqbuvu.exe

C:\Windows\System\NkLUbvZ.exe

C:\Windows\System\NkLUbvZ.exe

C:\Windows\System\lKovnnF.exe

C:\Windows\System\lKovnnF.exe

C:\Windows\System\PIfhcvQ.exe

C:\Windows\System\PIfhcvQ.exe

C:\Windows\System\eqxxviW.exe

C:\Windows\System\eqxxviW.exe

C:\Windows\System\ToiWXwE.exe

C:\Windows\System\ToiWXwE.exe

C:\Windows\System\ezDhEgX.exe

C:\Windows\System\ezDhEgX.exe

C:\Windows\System\VyFZYFK.exe

C:\Windows\System\VyFZYFK.exe

C:\Windows\System\UuxYyWB.exe

C:\Windows\System\UuxYyWB.exe

C:\Windows\System\QzbFxiK.exe

C:\Windows\System\QzbFxiK.exe

C:\Windows\System\QqZvVQG.exe

C:\Windows\System\QqZvVQG.exe

C:\Windows\System\gXsfGFM.exe

C:\Windows\System\gXsfGFM.exe

C:\Windows\System\jbLNIlI.exe

C:\Windows\System\jbLNIlI.exe

C:\Windows\System\ZOoBYYe.exe

C:\Windows\System\ZOoBYYe.exe

C:\Windows\System\hqWZTWp.exe

C:\Windows\System\hqWZTWp.exe

C:\Windows\System\ltKorkC.exe

C:\Windows\System\ltKorkC.exe

C:\Windows\System\zefOasL.exe

C:\Windows\System\zefOasL.exe

C:\Windows\System\LrqVStA.exe

C:\Windows\System\LrqVStA.exe

C:\Windows\System\MDPWzfl.exe

C:\Windows\System\MDPWzfl.exe

C:\Windows\System\jWrNDXA.exe

C:\Windows\System\jWrNDXA.exe

C:\Windows\System\gxSxctx.exe

C:\Windows\System\gxSxctx.exe

C:\Windows\System\BeDuiEA.exe

C:\Windows\System\BeDuiEA.exe

C:\Windows\System\DgVQhEF.exe

C:\Windows\System\DgVQhEF.exe

C:\Windows\System\FIXXJsF.exe

C:\Windows\System\FIXXJsF.exe

C:\Windows\System\gWhKkUV.exe

C:\Windows\System\gWhKkUV.exe

C:\Windows\System\UzeVKJg.exe

C:\Windows\System\UzeVKJg.exe

C:\Windows\System\WHKOIhr.exe

C:\Windows\System\WHKOIhr.exe

C:\Windows\System\SANFzzA.exe

C:\Windows\System\SANFzzA.exe

C:\Windows\System\yrcmkMv.exe

C:\Windows\System\yrcmkMv.exe

C:\Windows\System\widRFiz.exe

C:\Windows\System\widRFiz.exe

C:\Windows\System\ScSslic.exe

C:\Windows\System\ScSslic.exe

C:\Windows\System\IHUdmtm.exe

C:\Windows\System\IHUdmtm.exe

C:\Windows\System\wVpaHsM.exe

C:\Windows\System\wVpaHsM.exe

C:\Windows\System\dsgsXOc.exe

C:\Windows\System\dsgsXOc.exe

C:\Windows\System\GceqfEn.exe

C:\Windows\System\GceqfEn.exe

C:\Windows\System\AtITBoB.exe

C:\Windows\System\AtITBoB.exe

C:\Windows\System\ioZTGSI.exe

C:\Windows\System\ioZTGSI.exe

C:\Windows\System\BoiBpCo.exe

C:\Windows\System\BoiBpCo.exe

C:\Windows\System\qAViUAh.exe

C:\Windows\System\qAViUAh.exe

C:\Windows\System\oPrLeHl.exe

C:\Windows\System\oPrLeHl.exe

C:\Windows\System\HeqcFqm.exe

C:\Windows\System\HeqcFqm.exe

C:\Windows\System\DJIBNNE.exe

C:\Windows\System\DJIBNNE.exe

C:\Windows\System\mPZxRoS.exe

C:\Windows\System\mPZxRoS.exe

C:\Windows\System\tqzAnLT.exe

C:\Windows\System\tqzAnLT.exe

C:\Windows\System\ioGpFcz.exe

C:\Windows\System\ioGpFcz.exe

C:\Windows\System\MvLxZAN.exe

C:\Windows\System\MvLxZAN.exe

C:\Windows\System\RviIYrA.exe

C:\Windows\System\RviIYrA.exe

C:\Windows\System\vOgyPqo.exe

C:\Windows\System\vOgyPqo.exe

C:\Windows\System\rbQhDHu.exe

C:\Windows\System\rbQhDHu.exe

C:\Windows\System\RwLcyRv.exe

C:\Windows\System\RwLcyRv.exe

C:\Windows\System\fGquSmn.exe

C:\Windows\System\fGquSmn.exe

C:\Windows\System\pPSRVNp.exe

C:\Windows\System\pPSRVNp.exe

C:\Windows\System\DOhSTxZ.exe

C:\Windows\System\DOhSTxZ.exe

C:\Windows\System\OGJBkDx.exe

C:\Windows\System\OGJBkDx.exe

C:\Windows\System\NzgpyCk.exe

C:\Windows\System\NzgpyCk.exe

C:\Windows\System\rKkacci.exe

C:\Windows\System\rKkacci.exe

C:\Windows\System\TUhqdyh.exe

C:\Windows\System\TUhqdyh.exe

C:\Windows\System\netoTob.exe

C:\Windows\System\netoTob.exe

C:\Windows\System\LzgELKU.exe

C:\Windows\System\LzgELKU.exe

C:\Windows\System\vCvQtBl.exe

C:\Windows\System\vCvQtBl.exe

C:\Windows\System\wZiDxBh.exe

C:\Windows\System\wZiDxBh.exe

C:\Windows\System\JtyHtcf.exe

C:\Windows\System\JtyHtcf.exe

C:\Windows\System\RxUMDkE.exe

C:\Windows\System\RxUMDkE.exe

C:\Windows\System\vKsBtZW.exe

C:\Windows\System\vKsBtZW.exe

C:\Windows\System\ITnEYFn.exe

C:\Windows\System\ITnEYFn.exe

C:\Windows\System\YUIgJSi.exe

C:\Windows\System\YUIgJSi.exe

C:\Windows\System\JbhRPYd.exe

C:\Windows\System\JbhRPYd.exe

C:\Windows\System\vsLquJl.exe

C:\Windows\System\vsLquJl.exe

C:\Windows\System\xlVbeCb.exe

C:\Windows\System\xlVbeCb.exe

C:\Windows\System\wwtcFdS.exe

C:\Windows\System\wwtcFdS.exe

C:\Windows\System\HQMxALb.exe

C:\Windows\System\HQMxALb.exe

C:\Windows\System\DcevjNu.exe

C:\Windows\System\DcevjNu.exe

C:\Windows\System\gbtwFjR.exe

C:\Windows\System\gbtwFjR.exe

C:\Windows\System\ZTpYekM.exe

C:\Windows\System\ZTpYekM.exe

C:\Windows\System\UqQqzcJ.exe

C:\Windows\System\UqQqzcJ.exe

C:\Windows\System\nAsZUtH.exe

C:\Windows\System\nAsZUtH.exe

C:\Windows\System\EBAYwcB.exe

C:\Windows\System\EBAYwcB.exe

C:\Windows\System\TTtrPfi.exe

C:\Windows\System\TTtrPfi.exe

C:\Windows\System\CGEMVoK.exe

C:\Windows\System\CGEMVoK.exe

C:\Windows\System\ZcLQatO.exe

C:\Windows\System\ZcLQatO.exe

C:\Windows\System\jVwICfW.exe

C:\Windows\System\jVwICfW.exe

C:\Windows\System\xLiCRda.exe

C:\Windows\System\xLiCRda.exe

C:\Windows\System\UQMrOAY.exe

C:\Windows\System\UQMrOAY.exe

C:\Windows\System\QdpsdAc.exe

C:\Windows\System\QdpsdAc.exe

C:\Windows\System\PYKKWNN.exe

C:\Windows\System\PYKKWNN.exe

C:\Windows\System\NExuKkr.exe

C:\Windows\System\NExuKkr.exe

C:\Windows\System\vnWKMFV.exe

C:\Windows\System\vnWKMFV.exe

C:\Windows\System\kqYFEWJ.exe

C:\Windows\System\kqYFEWJ.exe

C:\Windows\System\DRBHdDs.exe

C:\Windows\System\DRBHdDs.exe

C:\Windows\System\fWOAYPC.exe

C:\Windows\System\fWOAYPC.exe

C:\Windows\System\BipkXRT.exe

C:\Windows\System\BipkXRT.exe

C:\Windows\System\MGIrKAw.exe

C:\Windows\System\MGIrKAw.exe

C:\Windows\System\AWipvdI.exe

C:\Windows\System\AWipvdI.exe

C:\Windows\System\vNhEhgD.exe

C:\Windows\System\vNhEhgD.exe

C:\Windows\System\XeYkxqY.exe

C:\Windows\System\XeYkxqY.exe

C:\Windows\System\CEvTeVo.exe

C:\Windows\System\CEvTeVo.exe

C:\Windows\System\QpSdplH.exe

C:\Windows\System\QpSdplH.exe

C:\Windows\System\XCECKQy.exe

C:\Windows\System\XCECKQy.exe

C:\Windows\System\ZvGtHwz.exe

C:\Windows\System\ZvGtHwz.exe

C:\Windows\System\FaTblcg.exe

C:\Windows\System\FaTblcg.exe

C:\Windows\System\HwEEIlw.exe

C:\Windows\System\HwEEIlw.exe

C:\Windows\System\OjRmYkH.exe

C:\Windows\System\OjRmYkH.exe

C:\Windows\System\hEVLYCu.exe

C:\Windows\System\hEVLYCu.exe

C:\Windows\System\akYfPoL.exe

C:\Windows\System\akYfPoL.exe

C:\Windows\System\AIckqpV.exe

C:\Windows\System\AIckqpV.exe

C:\Windows\System\ZxAoERd.exe

C:\Windows\System\ZxAoERd.exe

C:\Windows\System\eudWTtC.exe

C:\Windows\System\eudWTtC.exe

C:\Windows\System\PWvoZan.exe

C:\Windows\System\PWvoZan.exe

C:\Windows\System\narmNAe.exe

C:\Windows\System\narmNAe.exe

C:\Windows\System\sWjTQKE.exe

C:\Windows\System\sWjTQKE.exe

C:\Windows\System\UcqWRHE.exe

C:\Windows\System\UcqWRHE.exe

C:\Windows\System\NvTnxes.exe

C:\Windows\System\NvTnxes.exe

C:\Windows\System\eMjTvqd.exe

C:\Windows\System\eMjTvqd.exe

C:\Windows\System\uziqFYd.exe

C:\Windows\System\uziqFYd.exe

C:\Windows\System\JBuPYie.exe

C:\Windows\System\JBuPYie.exe

C:\Windows\System\fzCgZgl.exe

C:\Windows\System\fzCgZgl.exe

C:\Windows\System\rucaonU.exe

C:\Windows\System\rucaonU.exe

C:\Windows\System\iwrcQsG.exe

C:\Windows\System\iwrcQsG.exe

C:\Windows\System\ZpREpXQ.exe

C:\Windows\System\ZpREpXQ.exe

C:\Windows\System\Oceygic.exe

C:\Windows\System\Oceygic.exe

C:\Windows\System\MAaqEDi.exe

C:\Windows\System\MAaqEDi.exe

C:\Windows\System\PVHdDws.exe

C:\Windows\System\PVHdDws.exe

C:\Windows\System\SSUUkSO.exe

C:\Windows\System\SSUUkSO.exe

C:\Windows\System\YnlPBkW.exe

C:\Windows\System\YnlPBkW.exe

C:\Windows\System\SQZUtfD.exe

C:\Windows\System\SQZUtfD.exe

C:\Windows\System\DZpaFlD.exe

C:\Windows\System\DZpaFlD.exe

C:\Windows\System\fcbXdKe.exe

C:\Windows\System\fcbXdKe.exe

C:\Windows\System\bEhnAkX.exe

C:\Windows\System\bEhnAkX.exe

C:\Windows\System\TrjJjiS.exe

C:\Windows\System\TrjJjiS.exe

C:\Windows\System\KyYksMk.exe

C:\Windows\System\KyYksMk.exe

C:\Windows\System\tbHEVCJ.exe

C:\Windows\System\tbHEVCJ.exe

C:\Windows\System\gKXWviW.exe

C:\Windows\System\gKXWviW.exe

C:\Windows\System\znKdMHL.exe

C:\Windows\System\znKdMHL.exe

C:\Windows\System\ZzJjtUP.exe

C:\Windows\System\ZzJjtUP.exe

C:\Windows\System\RTnUsBJ.exe

C:\Windows\System\RTnUsBJ.exe

C:\Windows\System\BFLxBja.exe

C:\Windows\System\BFLxBja.exe

C:\Windows\System\faJXcoC.exe

C:\Windows\System\faJXcoC.exe

C:\Windows\System\EkqbXeP.exe

C:\Windows\System\EkqbXeP.exe

C:\Windows\System\JClWbGq.exe

C:\Windows\System\JClWbGq.exe

C:\Windows\System\sfTFzvj.exe

C:\Windows\System\sfTFzvj.exe

C:\Windows\System\tbmXpNC.exe

C:\Windows\System\tbmXpNC.exe

C:\Windows\System\lLUxpYV.exe

C:\Windows\System\lLUxpYV.exe

C:\Windows\System\CANmcFk.exe

C:\Windows\System\CANmcFk.exe

C:\Windows\System\FmBxbQB.exe

C:\Windows\System\FmBxbQB.exe

C:\Windows\System\ANPkaSS.exe

C:\Windows\System\ANPkaSS.exe

C:\Windows\System\JJAotEt.exe

C:\Windows\System\JJAotEt.exe

C:\Windows\System\dsnazLS.exe

C:\Windows\System\dsnazLS.exe

C:\Windows\System\kKevjdO.exe

C:\Windows\System\kKevjdO.exe

C:\Windows\System\xCXTOvw.exe

C:\Windows\System\xCXTOvw.exe

C:\Windows\System\FOkvnWS.exe

C:\Windows\System\FOkvnWS.exe

C:\Windows\System\ucLSvye.exe

C:\Windows\System\ucLSvye.exe

C:\Windows\System\uMnkdNV.exe

C:\Windows\System\uMnkdNV.exe

C:\Windows\System\hJweWKj.exe

C:\Windows\System\hJweWKj.exe

C:\Windows\System\LPZdFsd.exe

C:\Windows\System\LPZdFsd.exe

C:\Windows\System\tERSUKF.exe

C:\Windows\System\tERSUKF.exe

C:\Windows\System\XZOPine.exe

C:\Windows\System\XZOPine.exe

C:\Windows\System\HIqwgjA.exe

C:\Windows\System\HIqwgjA.exe

C:\Windows\System\zHOHIPf.exe

C:\Windows\System\zHOHIPf.exe

C:\Windows\System\WmFuSit.exe

C:\Windows\System\WmFuSit.exe

C:\Windows\System\EAfJrCY.exe

C:\Windows\System\EAfJrCY.exe

C:\Windows\System\zQqHMnq.exe

C:\Windows\System\zQqHMnq.exe

C:\Windows\System\APzOASc.exe

C:\Windows\System\APzOASc.exe

C:\Windows\System\nNGAkqO.exe

C:\Windows\System\nNGAkqO.exe

C:\Windows\System\soIiFfw.exe

C:\Windows\System\soIiFfw.exe

C:\Windows\System\vEbXpMk.exe

C:\Windows\System\vEbXpMk.exe

C:\Windows\System\jutXJnV.exe

C:\Windows\System\jutXJnV.exe

C:\Windows\System\GpQXgfM.exe

C:\Windows\System\GpQXgfM.exe

C:\Windows\System\AFefuKg.exe

C:\Windows\System\AFefuKg.exe

C:\Windows\System\IAhiXHh.exe

C:\Windows\System\IAhiXHh.exe

C:\Windows\System\hzfFYBG.exe

C:\Windows\System\hzfFYBG.exe

C:\Windows\System\HaiJkgA.exe

C:\Windows\System\HaiJkgA.exe

C:\Windows\System\PUmeEdM.exe

C:\Windows\System\PUmeEdM.exe

C:\Windows\System\YoGsEqk.exe

C:\Windows\System\YoGsEqk.exe

C:\Windows\System\gsQNNNX.exe

C:\Windows\System\gsQNNNX.exe

C:\Windows\System\RDxHKvp.exe

C:\Windows\System\RDxHKvp.exe

C:\Windows\System\HnYQpUX.exe

C:\Windows\System\HnYQpUX.exe

C:\Windows\System\fbqRyIS.exe

C:\Windows\System\fbqRyIS.exe

C:\Windows\System\ukoaRDB.exe

C:\Windows\System\ukoaRDB.exe

C:\Windows\System\IfzSwQk.exe

C:\Windows\System\IfzSwQk.exe

C:\Windows\System\bhFhxfp.exe

C:\Windows\System\bhFhxfp.exe

C:\Windows\System\ICIMrkj.exe

C:\Windows\System\ICIMrkj.exe

C:\Windows\System\ayrvHvO.exe

C:\Windows\System\ayrvHvO.exe

C:\Windows\System\DhlxsQK.exe

C:\Windows\System\DhlxsQK.exe

C:\Windows\System\FuGiXae.exe

C:\Windows\System\FuGiXae.exe

C:\Windows\System\XELpfTw.exe

C:\Windows\System\XELpfTw.exe

C:\Windows\System\gPYKLEd.exe

C:\Windows\System\gPYKLEd.exe

C:\Windows\System\ioUMSVa.exe

C:\Windows\System\ioUMSVa.exe

C:\Windows\System\ntvhgkA.exe

C:\Windows\System\ntvhgkA.exe

C:\Windows\System\tXxSHGB.exe

C:\Windows\System\tXxSHGB.exe

C:\Windows\System\BeFReaq.exe

C:\Windows\System\BeFReaq.exe

C:\Windows\System\cIyQEHZ.exe

C:\Windows\System\cIyQEHZ.exe

C:\Windows\System\TWQJdUn.exe

C:\Windows\System\TWQJdUn.exe

C:\Windows\System\UQfztfy.exe

C:\Windows\System\UQfztfy.exe

C:\Windows\System\KRzBjCr.exe

C:\Windows\System\KRzBjCr.exe

C:\Windows\System\CvbkGHb.exe

C:\Windows\System\CvbkGHb.exe

C:\Windows\System\wJKAlCA.exe

C:\Windows\System\wJKAlCA.exe

C:\Windows\System\WQEPsyS.exe

C:\Windows\System\WQEPsyS.exe

C:\Windows\System\OlWiDMD.exe

C:\Windows\System\OlWiDMD.exe

C:\Windows\System\xbqBcWw.exe

C:\Windows\System\xbqBcWw.exe

C:\Windows\System\TaigRKd.exe

C:\Windows\System\TaigRKd.exe

C:\Windows\System\bagNvAo.exe

C:\Windows\System\bagNvAo.exe

C:\Windows\System\lHTglEz.exe

C:\Windows\System\lHTglEz.exe

C:\Windows\System\xNXGJmq.exe

C:\Windows\System\xNXGJmq.exe

C:\Windows\System\MUGNdaV.exe

C:\Windows\System\MUGNdaV.exe

C:\Windows\System\vxqbhYB.exe

C:\Windows\System\vxqbhYB.exe

C:\Windows\System\jkcwdWL.exe

C:\Windows\System\jkcwdWL.exe

C:\Windows\System\ooNKbfY.exe

C:\Windows\System\ooNKbfY.exe

C:\Windows\System\qYMnyJU.exe

C:\Windows\System\qYMnyJU.exe

C:\Windows\System\UrZGpQz.exe

C:\Windows\System\UrZGpQz.exe

C:\Windows\System\zNSSxPF.exe

C:\Windows\System\zNSSxPF.exe

C:\Windows\System\xQawqgT.exe

C:\Windows\System\xQawqgT.exe

C:\Windows\System\BtfLxGB.exe

C:\Windows\System\BtfLxGB.exe

C:\Windows\System\UnCdsCq.exe

C:\Windows\System\UnCdsCq.exe

C:\Windows\System\tzstbKv.exe

C:\Windows\System\tzstbKv.exe

C:\Windows\System\XDORSXg.exe

C:\Windows\System\XDORSXg.exe

C:\Windows\System\RCXnkpL.exe

C:\Windows\System\RCXnkpL.exe

C:\Windows\System\VajpvoH.exe

C:\Windows\System\VajpvoH.exe

C:\Windows\System\OFXMDOB.exe

C:\Windows\System\OFXMDOB.exe

C:\Windows\System\JKSMARj.exe

C:\Windows\System\JKSMARj.exe

C:\Windows\System\xugqZmQ.exe

C:\Windows\System\xugqZmQ.exe

C:\Windows\System\BPGJLMf.exe

C:\Windows\System\BPGJLMf.exe

C:\Windows\System\QxwzwTW.exe

C:\Windows\System\QxwzwTW.exe

C:\Windows\System\QHNXDtH.exe

C:\Windows\System\QHNXDtH.exe

C:\Windows\System\mbQkbpv.exe

C:\Windows\System\mbQkbpv.exe

C:\Windows\System\jcxnrIO.exe

C:\Windows\System\jcxnrIO.exe

C:\Windows\System\LlytTUM.exe

C:\Windows\System\LlytTUM.exe

C:\Windows\System\OzEAXpM.exe

C:\Windows\System\OzEAXpM.exe

C:\Windows\System\hUYMFpR.exe

C:\Windows\System\hUYMFpR.exe

C:\Windows\System\EUsywyf.exe

C:\Windows\System\EUsywyf.exe

C:\Windows\System\pAnlgQz.exe

C:\Windows\System\pAnlgQz.exe

C:\Windows\System\usGNshk.exe

C:\Windows\System\usGNshk.exe

C:\Windows\System\KOpUKGV.exe

C:\Windows\System\KOpUKGV.exe

C:\Windows\System\hZtfkqZ.exe

C:\Windows\System\hZtfkqZ.exe

C:\Windows\System\HHdaQMt.exe

C:\Windows\System\HHdaQMt.exe

C:\Windows\System\IxcrjVy.exe

C:\Windows\System\IxcrjVy.exe

C:\Windows\System\aQjKPDy.exe

C:\Windows\System\aQjKPDy.exe

C:\Windows\System\OJiSwiN.exe

C:\Windows\System\OJiSwiN.exe

C:\Windows\System\dqnoMuI.exe

C:\Windows\System\dqnoMuI.exe

C:\Windows\System\EkrrqOH.exe

C:\Windows\System\EkrrqOH.exe

C:\Windows\System\RitqjfR.exe

C:\Windows\System\RitqjfR.exe

C:\Windows\System\Kkccayb.exe

C:\Windows\System\Kkccayb.exe

C:\Windows\System\HeqphSy.exe

C:\Windows\System\HeqphSy.exe

C:\Windows\System\qRtperF.exe

C:\Windows\System\qRtperF.exe

C:\Windows\System\tBTdJpm.exe

C:\Windows\System\tBTdJpm.exe

C:\Windows\System\pWJeMys.exe

C:\Windows\System\pWJeMys.exe

C:\Windows\System\eLcLzDt.exe

C:\Windows\System\eLcLzDt.exe

C:\Windows\System\HmsZvQo.exe

C:\Windows\System\HmsZvQo.exe

C:\Windows\System\EQWYfDG.exe

C:\Windows\System\EQWYfDG.exe

C:\Windows\System\EnnmGsX.exe

C:\Windows\System\EnnmGsX.exe

C:\Windows\System\UFwtyng.exe

C:\Windows\System\UFwtyng.exe

C:\Windows\System\iqBxCFy.exe

C:\Windows\System\iqBxCFy.exe

C:\Windows\System\rZsRYzP.exe

C:\Windows\System\rZsRYzP.exe

C:\Windows\System\PFCwTzl.exe

C:\Windows\System\PFCwTzl.exe

C:\Windows\System\badOuqJ.exe

C:\Windows\System\badOuqJ.exe

C:\Windows\System\KuQZDMe.exe

C:\Windows\System\KuQZDMe.exe

C:\Windows\System\AcwVrSV.exe

C:\Windows\System\AcwVrSV.exe

C:\Windows\System\EXJFokb.exe

C:\Windows\System\EXJFokb.exe

C:\Windows\System\ryhyWnH.exe

C:\Windows\System\ryhyWnH.exe

C:\Windows\System\CXXdAVd.exe

C:\Windows\System\CXXdAVd.exe

C:\Windows\System\Wuzpnnc.exe

C:\Windows\System\Wuzpnnc.exe

C:\Windows\System\RKXupSV.exe

C:\Windows\System\RKXupSV.exe

C:\Windows\System\ofMPDON.exe

C:\Windows\System\ofMPDON.exe

C:\Windows\System\wRoQAPE.exe

C:\Windows\System\wRoQAPE.exe

C:\Windows\System\ZiZUTjf.exe

C:\Windows\System\ZiZUTjf.exe

C:\Windows\System\KAhxGwM.exe

C:\Windows\System\KAhxGwM.exe

C:\Windows\System\QLuzTNk.exe

C:\Windows\System\QLuzTNk.exe

C:\Windows\System\yUNQtPx.exe

C:\Windows\System\yUNQtPx.exe

C:\Windows\System\hqjukUn.exe

C:\Windows\System\hqjukUn.exe

C:\Windows\System\EuugjYv.exe

C:\Windows\System\EuugjYv.exe

C:\Windows\System\xzRbwKY.exe

C:\Windows\System\xzRbwKY.exe

C:\Windows\System\EVRFxMd.exe

C:\Windows\System\EVRFxMd.exe

C:\Windows\System\mmEpAXp.exe

C:\Windows\System\mmEpAXp.exe

C:\Windows\System\imGDJiB.exe

C:\Windows\System\imGDJiB.exe

C:\Windows\System\oyrutFP.exe

C:\Windows\System\oyrutFP.exe

C:\Windows\System\WAnkLiA.exe

C:\Windows\System\WAnkLiA.exe

C:\Windows\System\sVPXfit.exe

C:\Windows\System\sVPXfit.exe

C:\Windows\System\SVKfQTn.exe

C:\Windows\System\SVKfQTn.exe

C:\Windows\System\iUevRfM.exe

C:\Windows\System\iUevRfM.exe

C:\Windows\System\eTFuNXf.exe

C:\Windows\System\eTFuNXf.exe

C:\Windows\System\FLUeawN.exe

C:\Windows\System\FLUeawN.exe

C:\Windows\System\TOwhEKt.exe

C:\Windows\System\TOwhEKt.exe

C:\Windows\System\bYpTdTP.exe

C:\Windows\System\bYpTdTP.exe

C:\Windows\System\pQEkpKt.exe

C:\Windows\System\pQEkpKt.exe

C:\Windows\System\hVwwphQ.exe

C:\Windows\System\hVwwphQ.exe

C:\Windows\System\nJwlIZd.exe

C:\Windows\System\nJwlIZd.exe

C:\Windows\System\AzcAPCz.exe

C:\Windows\System\AzcAPCz.exe

C:\Windows\System\LNleEIm.exe

C:\Windows\System\LNleEIm.exe

C:\Windows\System\UzCjVaS.exe

C:\Windows\System\UzCjVaS.exe

C:\Windows\System\KmvymVA.exe

C:\Windows\System\KmvymVA.exe

C:\Windows\System\UorXKZF.exe

C:\Windows\System\UorXKZF.exe

C:\Windows\System\McXhhSi.exe

C:\Windows\System\McXhhSi.exe

C:\Windows\System\AagEJrz.exe

C:\Windows\System\AagEJrz.exe

C:\Windows\System\cjqNclF.exe

C:\Windows\System\cjqNclF.exe

C:\Windows\System\yaObdrj.exe

C:\Windows\System\yaObdrj.exe

C:\Windows\System\rFgqsuA.exe

C:\Windows\System\rFgqsuA.exe

C:\Windows\System\cuVeNwQ.exe

C:\Windows\System\cuVeNwQ.exe

C:\Windows\System\lPESVoX.exe

C:\Windows\System\lPESVoX.exe

C:\Windows\System\MsmwHrM.exe

C:\Windows\System\MsmwHrM.exe

C:\Windows\System\ZIrzoHv.exe

C:\Windows\System\ZIrzoHv.exe

C:\Windows\System\aZxReYt.exe

C:\Windows\System\aZxReYt.exe

C:\Windows\System\jiGBvnN.exe

C:\Windows\System\jiGBvnN.exe

C:\Windows\System\dgKshRx.exe

C:\Windows\System\dgKshRx.exe

C:\Windows\System\lqIlbkO.exe

C:\Windows\System\lqIlbkO.exe

C:\Windows\System\cKYlocy.exe

C:\Windows\System\cKYlocy.exe

C:\Windows\System\XqpjCnC.exe

C:\Windows\System\XqpjCnC.exe

C:\Windows\System\WOSKhwY.exe

C:\Windows\System\WOSKhwY.exe

C:\Windows\System\dKkVSQF.exe

C:\Windows\System\dKkVSQF.exe

C:\Windows\System\GCxwFTl.exe

C:\Windows\System\GCxwFTl.exe

C:\Windows\System\lBbRgpN.exe

C:\Windows\System\lBbRgpN.exe

C:\Windows\System\vcekeJs.exe

C:\Windows\System\vcekeJs.exe

C:\Windows\System\JRWQOow.exe

C:\Windows\System\JRWQOow.exe

C:\Windows\System\Dljahmt.exe

C:\Windows\System\Dljahmt.exe

C:\Windows\System\XPaihjf.exe

C:\Windows\System\XPaihjf.exe

C:\Windows\System\CmriyuI.exe

C:\Windows\System\CmriyuI.exe

C:\Windows\System\icUrVOI.exe

C:\Windows\System\icUrVOI.exe

C:\Windows\System\qqsgICg.exe

C:\Windows\System\qqsgICg.exe

C:\Windows\System\ajMXCeB.exe

C:\Windows\System\ajMXCeB.exe

C:\Windows\System\yhTXofO.exe

C:\Windows\System\yhTXofO.exe

C:\Windows\System\TVoEShb.exe

C:\Windows\System\TVoEShb.exe

C:\Windows\System\YNFEwJb.exe

C:\Windows\System\YNFEwJb.exe

C:\Windows\System\dwLlTFx.exe

C:\Windows\System\dwLlTFx.exe

C:\Windows\System\jESpZkF.exe

C:\Windows\System\jESpZkF.exe

C:\Windows\System\rGBFpwm.exe

C:\Windows\System\rGBFpwm.exe

C:\Windows\System\GMQMqDV.exe

C:\Windows\System\GMQMqDV.exe

C:\Windows\System\zzsmlIy.exe

C:\Windows\System\zzsmlIy.exe

C:\Windows\System\xFDbZtk.exe

C:\Windows\System\xFDbZtk.exe

C:\Windows\System\tYpzcEt.exe

C:\Windows\System\tYpzcEt.exe

C:\Windows\System\rKuAzlA.exe

C:\Windows\System\rKuAzlA.exe

C:\Windows\System\GjyvVkY.exe

C:\Windows\System\GjyvVkY.exe

C:\Windows\System\yxplBeq.exe

C:\Windows\System\yxplBeq.exe

C:\Windows\System\TjxFXOI.exe

C:\Windows\System\TjxFXOI.exe

C:\Windows\System\VagvDNH.exe

C:\Windows\System\VagvDNH.exe

C:\Windows\System\uOHVKmR.exe

C:\Windows\System\uOHVKmR.exe

C:\Windows\System\PTvzczg.exe

C:\Windows\System\PTvzczg.exe

C:\Windows\System\qkQWQwz.exe

C:\Windows\System\qkQWQwz.exe

C:\Windows\System\qfBEbTe.exe

C:\Windows\System\qfBEbTe.exe

C:\Windows\System\HLvXZPV.exe

C:\Windows\System\HLvXZPV.exe

C:\Windows\System\udrFdLa.exe

C:\Windows\System\udrFdLa.exe

C:\Windows\System\vfBUWaM.exe

C:\Windows\System\vfBUWaM.exe

C:\Windows\System\OHtBdOi.exe

C:\Windows\System\OHtBdOi.exe

C:\Windows\System\VCmWTxv.exe

C:\Windows\System\VCmWTxv.exe

C:\Windows\System\CRIGEWA.exe

C:\Windows\System\CRIGEWA.exe

C:\Windows\System\fBvKALT.exe

C:\Windows\System\fBvKALT.exe

C:\Windows\System\gIWLBjq.exe

C:\Windows\System\gIWLBjq.exe

C:\Windows\System\TPxNKAs.exe

C:\Windows\System\TPxNKAs.exe

C:\Windows\System\eqZDPUV.exe

C:\Windows\System\eqZDPUV.exe

C:\Windows\System\ZyfIZhd.exe

C:\Windows\System\ZyfIZhd.exe

C:\Windows\System\fNLEVsZ.exe

C:\Windows\System\fNLEVsZ.exe

C:\Windows\System\SujnIpG.exe

C:\Windows\System\SujnIpG.exe

C:\Windows\System\IkQJYFo.exe

C:\Windows\System\IkQJYFo.exe

C:\Windows\System\duXENye.exe

C:\Windows\System\duXENye.exe

C:\Windows\System\DeanBEb.exe

C:\Windows\System\DeanBEb.exe

C:\Windows\System\vtVrxle.exe

C:\Windows\System\vtVrxle.exe

C:\Windows\System\XKsACqr.exe

C:\Windows\System\XKsACqr.exe

C:\Windows\System\rpTWVQy.exe

C:\Windows\System\rpTWVQy.exe

C:\Windows\System\tVSOFRy.exe

C:\Windows\System\tVSOFRy.exe

C:\Windows\System\JaBKDKO.exe

C:\Windows\System\JaBKDKO.exe

C:\Windows\System\kkhWoLT.exe

C:\Windows\System\kkhWoLT.exe

C:\Windows\System\fTASsCu.exe

C:\Windows\System\fTASsCu.exe

C:\Windows\System\iKDFOLT.exe

C:\Windows\System\iKDFOLT.exe

C:\Windows\System\CcboThS.exe

C:\Windows\System\CcboThS.exe

C:\Windows\System\OybebdF.exe

C:\Windows\System\OybebdF.exe

C:\Windows\System\WmIvMqL.exe

C:\Windows\System\WmIvMqL.exe

C:\Windows\System\RPVDdep.exe

C:\Windows\System\RPVDdep.exe

C:\Windows\System\NjAxAak.exe

C:\Windows\System\NjAxAak.exe

C:\Windows\System\dNngZpF.exe

C:\Windows\System\dNngZpF.exe

C:\Windows\System\kNUWoHv.exe

C:\Windows\System\kNUWoHv.exe

C:\Windows\System\uFoEnLq.exe

C:\Windows\System\uFoEnLq.exe

C:\Windows\System\ulBgOBi.exe

C:\Windows\System\ulBgOBi.exe

C:\Windows\System\csdmVmr.exe

C:\Windows\System\csdmVmr.exe

C:\Windows\System\sPotETk.exe

C:\Windows\System\sPotETk.exe

C:\Windows\System\UURpyVE.exe

C:\Windows\System\UURpyVE.exe

C:\Windows\System\STzUVfJ.exe

C:\Windows\System\STzUVfJ.exe

C:\Windows\System\swFpjhV.exe

C:\Windows\System\swFpjhV.exe

C:\Windows\System\tODFdzh.exe

C:\Windows\System\tODFdzh.exe

C:\Windows\System\qFWMmnE.exe

C:\Windows\System\qFWMmnE.exe

C:\Windows\System\kxFNhjA.exe

C:\Windows\System\kxFNhjA.exe

C:\Windows\System\iwtqqcB.exe

C:\Windows\System\iwtqqcB.exe

C:\Windows\System\KFcxGpi.exe

C:\Windows\System\KFcxGpi.exe

C:\Windows\System\PWHpkoZ.exe

C:\Windows\System\PWHpkoZ.exe

C:\Windows\System\UEfXiGM.exe

C:\Windows\System\UEfXiGM.exe

C:\Windows\System\MEiIUVL.exe

C:\Windows\System\MEiIUVL.exe

C:\Windows\System\qXcZhpy.exe

C:\Windows\System\qXcZhpy.exe

C:\Windows\System\JiXFIWB.exe

C:\Windows\System\JiXFIWB.exe

C:\Windows\System\JSIMGNo.exe

C:\Windows\System\JSIMGNo.exe

C:\Windows\System\mcqrMVL.exe

C:\Windows\System\mcqrMVL.exe

C:\Windows\System\YxfrwRS.exe

C:\Windows\System\YxfrwRS.exe

C:\Windows\System\QxlCQeL.exe

C:\Windows\System\QxlCQeL.exe

C:\Windows\System\WXWbvwP.exe

C:\Windows\System\WXWbvwP.exe

C:\Windows\System\vSQliul.exe

C:\Windows\System\vSQliul.exe

C:\Windows\System\LlZUoNP.exe

C:\Windows\System\LlZUoNP.exe

C:\Windows\System\xFYdhpB.exe

C:\Windows\System\xFYdhpB.exe

C:\Windows\System\ZcihRjO.exe

C:\Windows\System\ZcihRjO.exe

C:\Windows\System\iEPCfOx.exe

C:\Windows\System\iEPCfOx.exe

C:\Windows\System\whqIbju.exe

C:\Windows\System\whqIbju.exe

C:\Windows\System\iAMmuGc.exe

C:\Windows\System\iAMmuGc.exe

C:\Windows\System\QPujUWi.exe

C:\Windows\System\QPujUWi.exe

C:\Windows\System\KKmoLmr.exe

C:\Windows\System\KKmoLmr.exe

C:\Windows\System\bdNGoga.exe

C:\Windows\System\bdNGoga.exe

C:\Windows\System\DLrYNNS.exe

C:\Windows\System\DLrYNNS.exe

C:\Windows\System\NlnueMd.exe

C:\Windows\System\NlnueMd.exe

C:\Windows\System\zeGaydV.exe

C:\Windows\System\zeGaydV.exe

C:\Windows\System\wuDRvUu.exe

C:\Windows\System\wuDRvUu.exe

C:\Windows\System\aiTants.exe

C:\Windows\System\aiTants.exe

C:\Windows\System\gykeDBC.exe

C:\Windows\System\gykeDBC.exe

C:\Windows\System\bhMReGr.exe

C:\Windows\System\bhMReGr.exe

C:\Windows\System\TAkhQeB.exe

C:\Windows\System\TAkhQeB.exe

C:\Windows\System\zgdczBC.exe

C:\Windows\System\zgdczBC.exe

C:\Windows\System\KltLDdY.exe

C:\Windows\System\KltLDdY.exe

C:\Windows\System\zFpLVIV.exe

C:\Windows\System\zFpLVIV.exe

C:\Windows\System\xDzsPdM.exe

C:\Windows\System\xDzsPdM.exe

C:\Windows\System\XXqvVaH.exe

C:\Windows\System\XXqvVaH.exe

C:\Windows\System\pUeJleT.exe

C:\Windows\System\pUeJleT.exe

C:\Windows\System\VxqfTrt.exe

C:\Windows\System\VxqfTrt.exe

C:\Windows\System\RwFFWwr.exe

C:\Windows\System\RwFFWwr.exe

C:\Windows\System\GESIHAc.exe

C:\Windows\System\GESIHAc.exe

C:\Windows\System\RCRXMNW.exe

C:\Windows\System\RCRXMNW.exe

C:\Windows\System\gNojVGy.exe

C:\Windows\System\gNojVGy.exe

C:\Windows\System\ayswawa.exe

C:\Windows\System\ayswawa.exe

C:\Windows\System\gekQKmP.exe

C:\Windows\System\gekQKmP.exe

C:\Windows\System\qklmUpS.exe

C:\Windows\System\qklmUpS.exe

C:\Windows\System\qByGyxq.exe

C:\Windows\System\qByGyxq.exe

C:\Windows\System\ZXgwdro.exe

C:\Windows\System\ZXgwdro.exe

C:\Windows\System\dptIOkt.exe

C:\Windows\System\dptIOkt.exe

C:\Windows\System\imNtIye.exe

C:\Windows\System\imNtIye.exe

C:\Windows\System\PjaWnAb.exe

C:\Windows\System\PjaWnAb.exe

C:\Windows\System\bcxURAf.exe

C:\Windows\System\bcxURAf.exe

C:\Windows\System\VAoAMXS.exe

C:\Windows\System\VAoAMXS.exe

C:\Windows\System\HrgNnGu.exe

C:\Windows\System\HrgNnGu.exe

C:\Windows\System\WKVlObU.exe

C:\Windows\System\WKVlObU.exe

C:\Windows\System\iLopmpA.exe

C:\Windows\System\iLopmpA.exe

C:\Windows\System\pTYsnjS.exe

C:\Windows\System\pTYsnjS.exe

C:\Windows\System\DvwAjFT.exe

C:\Windows\System\DvwAjFT.exe

C:\Windows\System\kfIhCDw.exe

C:\Windows\System\kfIhCDw.exe

C:\Windows\System\fcyuMQf.exe

C:\Windows\System\fcyuMQf.exe

C:\Windows\System\lhAZiOB.exe

C:\Windows\System\lhAZiOB.exe

C:\Windows\System\fSvEJNk.exe

C:\Windows\System\fSvEJNk.exe

C:\Windows\System\JoJvOGy.exe

C:\Windows\System\JoJvOGy.exe

C:\Windows\System\ckgFVLP.exe

C:\Windows\System\ckgFVLP.exe

C:\Windows\System\eBagVFh.exe

C:\Windows\System\eBagVFh.exe

C:\Windows\System\gcaSAuj.exe

C:\Windows\System\gcaSAuj.exe

C:\Windows\System\xUqNuKH.exe

C:\Windows\System\xUqNuKH.exe

C:\Windows\System\yKdMJOH.exe

C:\Windows\System\yKdMJOH.exe

C:\Windows\System\vWdtkOc.exe

C:\Windows\System\vWdtkOc.exe

C:\Windows\System\PFETBsq.exe

C:\Windows\System\PFETBsq.exe

C:\Windows\System\rviGyyK.exe

C:\Windows\System\rviGyyK.exe

C:\Windows\System\rdAJoZe.exe

C:\Windows\System\rdAJoZe.exe

C:\Windows\System\dCmuNJZ.exe

C:\Windows\System\dCmuNJZ.exe

C:\Windows\System\jGUlyls.exe

C:\Windows\System\jGUlyls.exe

C:\Windows\System\OWVDcBv.exe

C:\Windows\System\OWVDcBv.exe

C:\Windows\System\dczZpgB.exe

C:\Windows\System\dczZpgB.exe

C:\Windows\System\AqYXmFS.exe

C:\Windows\System\AqYXmFS.exe

C:\Windows\System\dUQAfBn.exe

C:\Windows\System\dUQAfBn.exe

C:\Windows\System\NrRjxdt.exe

C:\Windows\System\NrRjxdt.exe

C:\Windows\System\gktAttO.exe

C:\Windows\System\gktAttO.exe

C:\Windows\System\AgLWtXk.exe

C:\Windows\System\AgLWtXk.exe

C:\Windows\System\WzKBAuQ.exe

C:\Windows\System\WzKBAuQ.exe

C:\Windows\System\DxceRKi.exe

C:\Windows\System\DxceRKi.exe

C:\Windows\System\inZDGdW.exe

C:\Windows\System\inZDGdW.exe

C:\Windows\System\mbnAOPS.exe

C:\Windows\System\mbnAOPS.exe

C:\Windows\System\VjuyYrW.exe

C:\Windows\System\VjuyYrW.exe

C:\Windows\System\BVvNTrC.exe

C:\Windows\System\BVvNTrC.exe

C:\Windows\System\tbuFfky.exe

C:\Windows\System\tbuFfky.exe

C:\Windows\System\woHMFMN.exe

C:\Windows\System\woHMFMN.exe

C:\Windows\System\paOrCND.exe

C:\Windows\System\paOrCND.exe

C:\Windows\System\CYsieSm.exe

C:\Windows\System\CYsieSm.exe

C:\Windows\System\NIIefvk.exe

C:\Windows\System\NIIefvk.exe

C:\Windows\System\fEkFOAX.exe

C:\Windows\System\fEkFOAX.exe

C:\Windows\System\fybieLV.exe

C:\Windows\System\fybieLV.exe

C:\Windows\System\IttBbRR.exe

C:\Windows\System\IttBbRR.exe

C:\Windows\System\IisGTdL.exe

C:\Windows\System\IisGTdL.exe

C:\Windows\System\DgJZzgF.exe

C:\Windows\System\DgJZzgF.exe

C:\Windows\System\eNczlOZ.exe

C:\Windows\System\eNczlOZ.exe

C:\Windows\System\PdQhLQV.exe

C:\Windows\System\PdQhLQV.exe

C:\Windows\System\hLBBvmD.exe

C:\Windows\System\hLBBvmD.exe

C:\Windows\System\yzEwKEm.exe

C:\Windows\System\yzEwKEm.exe

C:\Windows\System\scvjRsP.exe

C:\Windows\System\scvjRsP.exe

C:\Windows\System\tuIVIKo.exe

C:\Windows\System\tuIVIKo.exe

C:\Windows\System\nvtBHyW.exe

C:\Windows\System\nvtBHyW.exe

C:\Windows\System\MjAOAyA.exe

C:\Windows\System\MjAOAyA.exe

C:\Windows\System\iNBCjwv.exe

C:\Windows\System\iNBCjwv.exe

C:\Windows\System\XZfgYOW.exe

C:\Windows\System\XZfgYOW.exe

C:\Windows\System\dzDPyic.exe

C:\Windows\System\dzDPyic.exe

C:\Windows\System\BVNAmPU.exe

C:\Windows\System\BVNAmPU.exe

C:\Windows\System\waXYbJB.exe

C:\Windows\System\waXYbJB.exe

C:\Windows\System\kSwyKJf.exe

C:\Windows\System\kSwyKJf.exe

C:\Windows\System\FFHlBTM.exe

C:\Windows\System\FFHlBTM.exe

C:\Windows\System\jclfznq.exe

C:\Windows\System\jclfznq.exe

C:\Windows\System\QpNsuTg.exe

C:\Windows\System\QpNsuTg.exe

C:\Windows\System\GZlJQVO.exe

C:\Windows\System\GZlJQVO.exe

C:\Windows\System\oikJBXN.exe

C:\Windows\System\oikJBXN.exe

C:\Windows\System\oWrHvoF.exe

C:\Windows\System\oWrHvoF.exe

C:\Windows\System\QPItccE.exe

C:\Windows\System\QPItccE.exe

C:\Windows\System\SyArOWm.exe

C:\Windows\System\SyArOWm.exe

C:\Windows\System\ROmDjKz.exe

C:\Windows\System\ROmDjKz.exe

C:\Windows\System\UdGlCdU.exe

C:\Windows\System\UdGlCdU.exe

C:\Windows\System\PKvGbKd.exe

C:\Windows\System\PKvGbKd.exe

C:\Windows\System\eYmeakx.exe

C:\Windows\System\eYmeakx.exe

C:\Windows\System\ygUgjaY.exe

C:\Windows\System\ygUgjaY.exe

C:\Windows\System\EDTsrbX.exe

C:\Windows\System\EDTsrbX.exe

C:\Windows\System\YItJGeu.exe

C:\Windows\System\YItJGeu.exe

C:\Windows\System\JECBvtZ.exe

C:\Windows\System\JECBvtZ.exe

C:\Windows\System\AwbwgZK.exe

C:\Windows\System\AwbwgZK.exe

C:\Windows\System\pxXAahy.exe

C:\Windows\System\pxXAahy.exe

C:\Windows\System\FteaIgO.exe

C:\Windows\System\FteaIgO.exe

C:\Windows\System\VdOfnwz.exe

C:\Windows\System\VdOfnwz.exe

C:\Windows\System\KvDUOBr.exe

C:\Windows\System\KvDUOBr.exe

C:\Windows\System\UBKEJLr.exe

C:\Windows\System\UBKEJLr.exe

C:\Windows\System\uqRQdjs.exe

C:\Windows\System\uqRQdjs.exe

C:\Windows\System\NBQhWgp.exe

C:\Windows\System\NBQhWgp.exe

C:\Windows\System\KOigXwb.exe

C:\Windows\System\KOigXwb.exe

C:\Windows\System\SeWEMtk.exe

C:\Windows\System\SeWEMtk.exe

C:\Windows\System\fjHpFwa.exe

C:\Windows\System\fjHpFwa.exe

C:\Windows\System\EVwSrxX.exe

C:\Windows\System\EVwSrxX.exe

C:\Windows\System\SaMQkkv.exe

C:\Windows\System\SaMQkkv.exe

C:\Windows\System\DKaKVsq.exe

C:\Windows\System\DKaKVsq.exe

C:\Windows\System\tngKtIJ.exe

C:\Windows\System\tngKtIJ.exe

C:\Windows\System\zUIVNFR.exe

C:\Windows\System\zUIVNFR.exe

C:\Windows\System\LQbiOQy.exe

C:\Windows\System\LQbiOQy.exe

C:\Windows\System\CTHozWP.exe

C:\Windows\System\CTHozWP.exe

C:\Windows\System\dIMTgFs.exe

C:\Windows\System\dIMTgFs.exe

C:\Windows\System\rAcULWf.exe

C:\Windows\System\rAcULWf.exe

C:\Windows\System\HkEuKdG.exe

C:\Windows\System\HkEuKdG.exe

C:\Windows\System\gUZMdMN.exe

C:\Windows\System\gUZMdMN.exe

C:\Windows\System\realDqp.exe

C:\Windows\System\realDqp.exe

C:\Windows\System\HnYXeBf.exe

C:\Windows\System\HnYXeBf.exe

C:\Windows\System\GPGLyHj.exe

C:\Windows\System\GPGLyHj.exe

C:\Windows\System\NIDZXUP.exe

C:\Windows\System\NIDZXUP.exe

C:\Windows\System\YMXuaBy.exe

C:\Windows\System\YMXuaBy.exe

C:\Windows\System\zDdxXDE.exe

C:\Windows\System\zDdxXDE.exe

C:\Windows\System\yPJcYcR.exe

C:\Windows\System\yPJcYcR.exe

C:\Windows\System\TeBHkjg.exe

C:\Windows\System\TeBHkjg.exe

C:\Windows\System\DKQDfmT.exe

C:\Windows\System\DKQDfmT.exe

C:\Windows\System\tdeKxIm.exe

C:\Windows\System\tdeKxIm.exe

C:\Windows\System\McDGHoP.exe

C:\Windows\System\McDGHoP.exe

C:\Windows\System\mszvlBA.exe

C:\Windows\System\mszvlBA.exe

C:\Windows\System\pLSbeuD.exe

C:\Windows\System\pLSbeuD.exe

C:\Windows\System\QLSSZbT.exe

C:\Windows\System\QLSSZbT.exe

C:\Windows\System\GAXTFCh.exe

C:\Windows\System\GAXTFCh.exe

C:\Windows\System\OYowaBz.exe

C:\Windows\System\OYowaBz.exe

C:\Windows\System\HJZvzRt.exe

C:\Windows\System\HJZvzRt.exe

C:\Windows\System\yKkNLXS.exe

C:\Windows\System\yKkNLXS.exe

C:\Windows\System\LtdfNfJ.exe

C:\Windows\System\LtdfNfJ.exe

C:\Windows\System\TBrECJT.exe

C:\Windows\System\TBrECJT.exe

C:\Windows\System\JNILbnR.exe

C:\Windows\System\JNILbnR.exe

C:\Windows\System\xDdVkmL.exe

C:\Windows\System\xDdVkmL.exe

C:\Windows\System\IbqyVhO.exe

C:\Windows\System\IbqyVhO.exe

C:\Windows\System\BNduvUX.exe

C:\Windows\System\BNduvUX.exe

C:\Windows\System\pYJaRWQ.exe

C:\Windows\System\pYJaRWQ.exe

C:\Windows\System\yqkTTSA.exe

C:\Windows\System\yqkTTSA.exe

C:\Windows\System\XsNVaOV.exe

C:\Windows\System\XsNVaOV.exe

C:\Windows\System\myugePS.exe

C:\Windows\System\myugePS.exe

C:\Windows\System\YqxeLDO.exe

C:\Windows\System\YqxeLDO.exe

C:\Windows\System\rUqqEbK.exe

C:\Windows\System\rUqqEbK.exe

C:\Windows\System\ejcrOYW.exe

C:\Windows\System\ejcrOYW.exe

C:\Windows\System\VVEsnER.exe

C:\Windows\System\VVEsnER.exe

C:\Windows\System\CStrMkA.exe

C:\Windows\System\CStrMkA.exe

C:\Windows\System\PmQVoPb.exe

C:\Windows\System\PmQVoPb.exe

C:\Windows\System\naMAgUj.exe

C:\Windows\System\naMAgUj.exe

C:\Windows\System\nnyyPBO.exe

C:\Windows\System\nnyyPBO.exe

C:\Windows\System\sDMXDSI.exe

C:\Windows\System\sDMXDSI.exe

C:\Windows\System\SefybhM.exe

C:\Windows\System\SefybhM.exe

C:\Windows\System\dMwacdJ.exe

C:\Windows\System\dMwacdJ.exe

C:\Windows\System\JWtpLHS.exe

C:\Windows\System\JWtpLHS.exe

C:\Windows\System\iJsqWgf.exe

C:\Windows\System\iJsqWgf.exe

C:\Windows\System\GvNUrGY.exe

C:\Windows\System\GvNUrGY.exe

C:\Windows\System\jCClckG.exe

C:\Windows\System\jCClckG.exe

C:\Windows\System\tRhwFHi.exe

C:\Windows\System\tRhwFHi.exe

C:\Windows\System\doqFgrX.exe

C:\Windows\System\doqFgrX.exe

C:\Windows\System\UIyfbCT.exe

C:\Windows\System\UIyfbCT.exe

C:\Windows\System\nricNVz.exe

C:\Windows\System\nricNVz.exe

C:\Windows\System\ExuRFZk.exe

C:\Windows\System\ExuRFZk.exe

C:\Windows\System\VqceAkU.exe

C:\Windows\System\VqceAkU.exe

C:\Windows\System\gUOEEnz.exe

C:\Windows\System\gUOEEnz.exe

C:\Windows\System\vonJvrB.exe

C:\Windows\System\vonJvrB.exe

C:\Windows\System\bKbumTH.exe

C:\Windows\System\bKbumTH.exe

C:\Windows\System\RGmcpHI.exe

C:\Windows\System\RGmcpHI.exe

C:\Windows\System\NySUfJd.exe

C:\Windows\System\NySUfJd.exe

C:\Windows\System\jcGIlat.exe

C:\Windows\System\jcGIlat.exe

C:\Windows\System\PjsAISz.exe

C:\Windows\System\PjsAISz.exe

C:\Windows\System\gLNcCMD.exe

C:\Windows\System\gLNcCMD.exe

C:\Windows\System\hAoYwDT.exe

C:\Windows\System\hAoYwDT.exe

C:\Windows\System\IGIvqQs.exe

C:\Windows\System\IGIvqQs.exe

C:\Windows\System\FSMfMbU.exe

C:\Windows\System\FSMfMbU.exe

C:\Windows\System\yiBZwzp.exe

C:\Windows\System\yiBZwzp.exe

C:\Windows\System\txDoyhG.exe

C:\Windows\System\txDoyhG.exe

C:\Windows\System\EBwbZTV.exe

C:\Windows\System\EBwbZTV.exe

C:\Windows\System\ImKLkQR.exe

C:\Windows\System\ImKLkQR.exe

C:\Windows\System\WBIIPSD.exe

C:\Windows\System\WBIIPSD.exe

C:\Windows\System\eBPOvFw.exe

C:\Windows\System\eBPOvFw.exe

C:\Windows\System\gsKrmHS.exe

C:\Windows\System\gsKrmHS.exe

C:\Windows\System\aPNXnbp.exe

C:\Windows\System\aPNXnbp.exe

C:\Windows\System\gPVNDtu.exe

C:\Windows\System\gPVNDtu.exe

C:\Windows\System\SdKmbDv.exe

C:\Windows\System\SdKmbDv.exe

C:\Windows\System\rQnvYSa.exe

C:\Windows\System\rQnvYSa.exe

C:\Windows\System\dDoYbld.exe

C:\Windows\System\dDoYbld.exe

C:\Windows\System\axFNZDf.exe

C:\Windows\System\axFNZDf.exe

C:\Windows\System\yMOzpqf.exe

C:\Windows\System\yMOzpqf.exe

C:\Windows\System\lxFBzGo.exe

C:\Windows\System\lxFBzGo.exe

C:\Windows\System\eDJSZjd.exe

C:\Windows\System\eDJSZjd.exe

C:\Windows\System\ZbXpYye.exe

C:\Windows\System\ZbXpYye.exe

C:\Windows\System\crPdYXu.exe

C:\Windows\System\crPdYXu.exe

C:\Windows\System\agnRVqp.exe

C:\Windows\System\agnRVqp.exe

C:\Windows\System\BzkTmug.exe

C:\Windows\System\BzkTmug.exe

C:\Windows\System\KtRaKGf.exe

C:\Windows\System\KtRaKGf.exe

C:\Windows\System\HuRwhhY.exe

C:\Windows\System\HuRwhhY.exe

C:\Windows\System\FvEHqUu.exe

C:\Windows\System\FvEHqUu.exe

C:\Windows\System\CCDuLyN.exe

C:\Windows\System\CCDuLyN.exe

C:\Windows\System\rXxvWKU.exe

C:\Windows\System\rXxvWKU.exe

C:\Windows\System\EvezAJt.exe

C:\Windows\System\EvezAJt.exe

C:\Windows\System\PWrdRyj.exe

C:\Windows\System\PWrdRyj.exe

C:\Windows\System\KzEQAsf.exe

C:\Windows\System\KzEQAsf.exe

C:\Windows\System\OhNhUGZ.exe

C:\Windows\System\OhNhUGZ.exe

C:\Windows\System\gOkNLZl.exe

C:\Windows\System\gOkNLZl.exe

C:\Windows\System\rFKDvhb.exe

C:\Windows\System\rFKDvhb.exe

C:\Windows\System\IlLZMAB.exe

C:\Windows\System\IlLZMAB.exe

C:\Windows\System\bdMHBLO.exe

C:\Windows\System\bdMHBLO.exe

C:\Windows\System\CiPeQQj.exe

C:\Windows\System\CiPeQQj.exe

C:\Windows\System\ngZCmmT.exe

C:\Windows\System\ngZCmmT.exe

C:\Windows\System\AvBhesV.exe

C:\Windows\System\AvBhesV.exe

C:\Windows\System\FBolxZk.exe

C:\Windows\System\FBolxZk.exe

C:\Windows\System\MKxIXCX.exe

C:\Windows\System\MKxIXCX.exe

C:\Windows\System\TBMfOwI.exe

C:\Windows\System\TBMfOwI.exe

C:\Windows\System\uxKgmGr.exe

C:\Windows\System\uxKgmGr.exe

C:\Windows\System\AtFzceJ.exe

C:\Windows\System\AtFzceJ.exe

C:\Windows\System\IXOdkRf.exe

C:\Windows\System\IXOdkRf.exe

C:\Windows\System\UAFZCqw.exe

C:\Windows\System\UAFZCqw.exe

C:\Windows\System\sUmxYga.exe

C:\Windows\System\sUmxYga.exe

C:\Windows\System\LaYYwsr.exe

C:\Windows\System\LaYYwsr.exe

C:\Windows\System\wqEkswS.exe

C:\Windows\System\wqEkswS.exe

C:\Windows\System\UNQVQiw.exe

C:\Windows\System\UNQVQiw.exe

C:\Windows\System\xkQlKSh.exe

C:\Windows\System\xkQlKSh.exe

C:\Windows\System\yshacZZ.exe

C:\Windows\System\yshacZZ.exe

C:\Windows\System\YBEtUOd.exe

C:\Windows\System\YBEtUOd.exe

C:\Windows\System\LjOcKrZ.exe

C:\Windows\System\LjOcKrZ.exe

C:\Windows\System\FWyRSSm.exe

C:\Windows\System\FWyRSSm.exe

C:\Windows\System\IWkoVbP.exe

C:\Windows\System\IWkoVbP.exe

C:\Windows\System\bdVYhoE.exe

C:\Windows\System\bdVYhoE.exe

C:\Windows\System\WQkpiCM.exe

C:\Windows\System\WQkpiCM.exe

C:\Windows\System\IpSlVvM.exe

C:\Windows\System\IpSlVvM.exe

C:\Windows\System\mXzdQZM.exe

C:\Windows\System\mXzdQZM.exe

C:\Windows\System\XxKAvgo.exe

C:\Windows\System\XxKAvgo.exe

C:\Windows\System\hlNksuB.exe

C:\Windows\System\hlNksuB.exe

C:\Windows\System\WZcVHwm.exe

C:\Windows\System\WZcVHwm.exe

C:\Windows\System\nuoPYik.exe

C:\Windows\System\nuoPYik.exe

C:\Windows\System\jUFkZTp.exe

C:\Windows\System\jUFkZTp.exe

C:\Windows\System\gGFCjHX.exe

C:\Windows\System\gGFCjHX.exe

C:\Windows\System\wELqfGx.exe

C:\Windows\System\wELqfGx.exe

C:\Windows\System\uhSJIZH.exe

C:\Windows\System\uhSJIZH.exe

C:\Windows\System\xLukIYa.exe

C:\Windows\System\xLukIYa.exe

C:\Windows\System\iSugyiz.exe

C:\Windows\System\iSugyiz.exe

C:\Windows\System\CKudYgO.exe

C:\Windows\System\CKudYgO.exe

C:\Windows\System\cIrpVAI.exe

C:\Windows\System\cIrpVAI.exe

C:\Windows\System\ZGTdyrs.exe

C:\Windows\System\ZGTdyrs.exe

C:\Windows\System\ZHkddFN.exe

C:\Windows\System\ZHkddFN.exe

C:\Windows\System\nnkRVfF.exe

C:\Windows\System\nnkRVfF.exe

C:\Windows\System\fElubIj.exe

C:\Windows\System\fElubIj.exe

C:\Windows\System\LIBygTf.exe

C:\Windows\System\LIBygTf.exe

C:\Windows\System\gmiqGed.exe

C:\Windows\System\gmiqGed.exe

C:\Windows\System\pZqHSDw.exe

C:\Windows\System\pZqHSDw.exe

C:\Windows\System\NcXPOyX.exe

C:\Windows\System\NcXPOyX.exe

C:\Windows\System\zrCpEVm.exe

C:\Windows\System\zrCpEVm.exe

C:\Windows\System\lLjCjcy.exe

C:\Windows\System\lLjCjcy.exe

C:\Windows\System\SeJGjvS.exe

C:\Windows\System\SeJGjvS.exe

C:\Windows\System\UQHVeqG.exe

C:\Windows\System\UQHVeqG.exe

C:\Windows\System\tNvHaFi.exe

C:\Windows\System\tNvHaFi.exe

C:\Windows\System\DbkNIdt.exe

C:\Windows\System\DbkNIdt.exe

C:\Windows\System\RfHETvD.exe

C:\Windows\System\RfHETvD.exe

C:\Windows\System\VxRroyU.exe

C:\Windows\System\VxRroyU.exe

C:\Windows\System\sRzFcJA.exe

C:\Windows\System\sRzFcJA.exe

C:\Windows\System\ZkuDMpo.exe

C:\Windows\System\ZkuDMpo.exe

C:\Windows\System\BnwSpYy.exe

C:\Windows\System\BnwSpYy.exe

C:\Windows\System\afmeuFQ.exe

C:\Windows\System\afmeuFQ.exe

C:\Windows\System\qIihYoZ.exe

C:\Windows\System\qIihYoZ.exe

C:\Windows\System\zKhSDcn.exe

C:\Windows\System\zKhSDcn.exe

C:\Windows\System\SuKclkU.exe

C:\Windows\System\SuKclkU.exe

C:\Windows\System\AOWAKri.exe

C:\Windows\System\AOWAKri.exe

C:\Windows\System\SOlzFlc.exe

C:\Windows\System\SOlzFlc.exe

C:\Windows\System\GzqsQkm.exe

C:\Windows\System\GzqsQkm.exe

C:\Windows\System\TvGyogs.exe

C:\Windows\System\TvGyogs.exe

C:\Windows\System\HGeunDu.exe

C:\Windows\System\HGeunDu.exe

C:\Windows\System\PMfJdta.exe

C:\Windows\System\PMfJdta.exe

C:\Windows\System\VAjpUSr.exe

C:\Windows\System\VAjpUSr.exe

C:\Windows\System\VitoGbb.exe

C:\Windows\System\VitoGbb.exe

C:\Windows\System\PQbMgkr.exe

C:\Windows\System\PQbMgkr.exe

C:\Windows\System\dmQEeGr.exe

C:\Windows\System\dmQEeGr.exe

C:\Windows\System\ApsNgJG.exe

C:\Windows\System\ApsNgJG.exe

C:\Windows\System\Nqvevxv.exe

C:\Windows\System\Nqvevxv.exe

C:\Windows\System\apkJhZG.exe

C:\Windows\System\apkJhZG.exe

C:\Windows\System\EAuuppg.exe

C:\Windows\System\EAuuppg.exe

C:\Windows\System\ELfxjhP.exe

C:\Windows\System\ELfxjhP.exe

C:\Windows\System\ZOiItrP.exe

C:\Windows\System\ZOiItrP.exe

C:\Windows\System\JTRyAln.exe

C:\Windows\System\JTRyAln.exe

C:\Windows\System\BttsIUT.exe

C:\Windows\System\BttsIUT.exe

C:\Windows\System\bOdEYri.exe

C:\Windows\System\bOdEYri.exe

C:\Windows\System\FzAbVrb.exe

C:\Windows\System\FzAbVrb.exe

C:\Windows\System\aSfyDao.exe

C:\Windows\System\aSfyDao.exe

C:\Windows\System\fjGnEbz.exe

C:\Windows\System\fjGnEbz.exe

C:\Windows\System\IaviyGf.exe

C:\Windows\System\IaviyGf.exe

C:\Windows\System\xuNgumO.exe

C:\Windows\System\xuNgumO.exe

C:\Windows\System\QVlLMve.exe

C:\Windows\System\QVlLMve.exe

C:\Windows\System\iCStjXA.exe

C:\Windows\System\iCStjXA.exe

C:\Windows\System\ftLgqBN.exe

C:\Windows\System\ftLgqBN.exe

C:\Windows\System\dEJMnwR.exe

C:\Windows\System\dEJMnwR.exe

C:\Windows\System\ctAZsMZ.exe

C:\Windows\System\ctAZsMZ.exe

C:\Windows\System\UZOfHrc.exe

C:\Windows\System\UZOfHrc.exe

C:\Windows\System\KbVcuTF.exe

C:\Windows\System\KbVcuTF.exe

C:\Windows\System\ymYAKex.exe

C:\Windows\System\ymYAKex.exe

C:\Windows\System\vZzLVSR.exe

C:\Windows\System\vZzLVSR.exe

C:\Windows\System\NLvRAoy.exe

C:\Windows\System\NLvRAoy.exe

C:\Windows\System\dPldUFa.exe

C:\Windows\System\dPldUFa.exe

C:\Windows\System\bRuKHeV.exe

C:\Windows\System\bRuKHeV.exe

C:\Windows\System\PftvkyH.exe

C:\Windows\System\PftvkyH.exe

C:\Windows\System\ESrGnez.exe

C:\Windows\System\ESrGnez.exe

C:\Windows\System\UioZAmB.exe

C:\Windows\System\UioZAmB.exe

C:\Windows\System\GIJFYPc.exe

C:\Windows\System\GIJFYPc.exe

C:\Windows\System\yzrSSYI.exe

C:\Windows\System\yzrSSYI.exe

C:\Windows\System\oUIMXqz.exe

C:\Windows\System\oUIMXqz.exe

C:\Windows\System\ooBeRra.exe

C:\Windows\System\ooBeRra.exe

C:\Windows\System\gKMPdRV.exe

C:\Windows\System\gKMPdRV.exe

C:\Windows\System\cbUFgbV.exe

C:\Windows\System\cbUFgbV.exe

C:\Windows\System\CAolpDN.exe

C:\Windows\System\CAolpDN.exe

C:\Windows\System\aLTeCMn.exe

C:\Windows\System\aLTeCMn.exe

C:\Windows\System\cgYxZhQ.exe

C:\Windows\System\cgYxZhQ.exe

C:\Windows\System\hjTCNua.exe

C:\Windows\System\hjTCNua.exe

C:\Windows\System\ttjwshR.exe

C:\Windows\System\ttjwshR.exe

C:\Windows\System\vKLiztF.exe

C:\Windows\System\vKLiztF.exe

C:\Windows\System\WxuqXFJ.exe

C:\Windows\System\WxuqXFJ.exe

C:\Windows\System\NaTMgpk.exe

C:\Windows\System\NaTMgpk.exe

C:\Windows\System\NwaIpIw.exe

C:\Windows\System\NwaIpIw.exe

C:\Windows\System\vmessNc.exe

C:\Windows\System\vmessNc.exe

C:\Windows\System\UBKAQDW.exe

C:\Windows\System\UBKAQDW.exe

C:\Windows\System\VAyEdLg.exe

C:\Windows\System\VAyEdLg.exe

C:\Windows\System\ZMSyqGo.exe

C:\Windows\System\ZMSyqGo.exe

C:\Windows\System\QOnVmFX.exe

C:\Windows\System\QOnVmFX.exe

C:\Windows\System\lIKZWwi.exe

C:\Windows\System\lIKZWwi.exe

C:\Windows\System\DwSzCnm.exe

C:\Windows\System\DwSzCnm.exe

C:\Windows\System\KfaJgnK.exe

C:\Windows\System\KfaJgnK.exe

C:\Windows\System\mMnHIUC.exe

C:\Windows\System\mMnHIUC.exe

C:\Windows\System\oXDyujG.exe

C:\Windows\System\oXDyujG.exe

C:\Windows\System\dPnUdpl.exe

C:\Windows\System\dPnUdpl.exe

C:\Windows\System\hZsKpvG.exe

C:\Windows\System\hZsKpvG.exe

C:\Windows\System\OzlYRGj.exe

C:\Windows\System\OzlYRGj.exe

C:\Windows\System\KwWRhlB.exe

C:\Windows\System\KwWRhlB.exe

C:\Windows\System\BgTwBeg.exe

C:\Windows\System\BgTwBeg.exe

C:\Windows\System\PhGqyRh.exe

C:\Windows\System\PhGqyRh.exe

C:\Windows\System\DQitUXB.exe

C:\Windows\System\DQitUXB.exe

C:\Windows\System\BmoZKTe.exe

C:\Windows\System\BmoZKTe.exe

C:\Windows\System\JCEzehl.exe

C:\Windows\System\JCEzehl.exe

C:\Windows\System\KBvcWQF.exe

C:\Windows\System\KBvcWQF.exe

C:\Windows\System\AqXmBhB.exe

C:\Windows\System\AqXmBhB.exe

C:\Windows\System\seCxfRC.exe

C:\Windows\System\seCxfRC.exe

C:\Windows\System\aujmaEx.exe

C:\Windows\System\aujmaEx.exe

C:\Windows\System\CgkeCBe.exe

C:\Windows\System\CgkeCBe.exe

C:\Windows\System\rFqdKOR.exe

C:\Windows\System\rFqdKOR.exe

C:\Windows\System\pztpeni.exe

C:\Windows\System\pztpeni.exe

C:\Windows\System\SkrhysV.exe

C:\Windows\System\SkrhysV.exe

C:\Windows\System\yHTVZNv.exe

C:\Windows\System\yHTVZNv.exe

C:\Windows\System\QwhlsBe.exe

C:\Windows\System\QwhlsBe.exe

C:\Windows\System\BZZFOhw.exe

C:\Windows\System\BZZFOhw.exe

C:\Windows\System\YtgUQfU.exe

C:\Windows\System\YtgUQfU.exe

C:\Windows\System\AzDblTj.exe

C:\Windows\System\AzDblTj.exe

C:\Windows\System\RxKgPXD.exe

C:\Windows\System\RxKgPXD.exe

C:\Windows\System\XPCFHem.exe

C:\Windows\System\XPCFHem.exe

C:\Windows\System\npjKRJk.exe

C:\Windows\System\npjKRJk.exe

C:\Windows\System\NXUGArk.exe

C:\Windows\System\NXUGArk.exe

C:\Windows\System\fYmReLm.exe

C:\Windows\System\fYmReLm.exe

C:\Windows\System\TfexzfV.exe

C:\Windows\System\TfexzfV.exe

C:\Windows\System\EFTgICL.exe

C:\Windows\System\EFTgICL.exe

C:\Windows\System\LrlcHtt.exe

C:\Windows\System\LrlcHtt.exe

C:\Windows\System\snnSpmo.exe

C:\Windows\System\snnSpmo.exe

C:\Windows\System\JbvyJTS.exe

C:\Windows\System\JbvyJTS.exe

C:\Windows\System\TPTDzMA.exe

C:\Windows\System\TPTDzMA.exe

C:\Windows\System\EDeKFTO.exe

C:\Windows\System\EDeKFTO.exe

C:\Windows\System\deIhxIH.exe

C:\Windows\System\deIhxIH.exe

C:\Windows\System\SHbOmUc.exe

C:\Windows\System\SHbOmUc.exe

C:\Windows\System\KBAkcnj.exe

C:\Windows\System\KBAkcnj.exe

C:\Windows\System\ocASqQZ.exe

C:\Windows\System\ocASqQZ.exe

C:\Windows\System\WKgDRFJ.exe

C:\Windows\System\WKgDRFJ.exe

C:\Windows\System\hkwgfKc.exe

C:\Windows\System\hkwgfKc.exe

C:\Windows\System\ltxrNNg.exe

C:\Windows\System\ltxrNNg.exe

C:\Windows\System\DEWlWLx.exe

C:\Windows\System\DEWlWLx.exe

C:\Windows\System\VyCWdBU.exe

C:\Windows\System\VyCWdBU.exe

C:\Windows\System\tEtjIAL.exe

C:\Windows\System\tEtjIAL.exe

C:\Windows\System\bHqnhmc.exe

C:\Windows\System\bHqnhmc.exe

C:\Windows\System\sDSuOyz.exe

C:\Windows\System\sDSuOyz.exe

C:\Windows\System\bzJGozR.exe

C:\Windows\System\bzJGozR.exe

C:\Windows\System\MOxdEiB.exe

C:\Windows\System\MOxdEiB.exe

C:\Windows\System\lZYlTAk.exe

C:\Windows\System\lZYlTAk.exe

C:\Windows\System\uzxPvcz.exe

C:\Windows\System\uzxPvcz.exe

C:\Windows\System\bwPUjGR.exe

C:\Windows\System\bwPUjGR.exe

C:\Windows\System\GLcauIg.exe

C:\Windows\System\GLcauIg.exe

C:\Windows\System\crBWWoP.exe

C:\Windows\System\crBWWoP.exe

C:\Windows\System\TMpHYiW.exe

C:\Windows\System\TMpHYiW.exe

C:\Windows\System\sRdljfb.exe

C:\Windows\System\sRdljfb.exe

C:\Windows\System\BdTnBjH.exe

C:\Windows\System\BdTnBjH.exe

C:\Windows\System\sDxeTWk.exe

C:\Windows\System\sDxeTWk.exe

C:\Windows\System\qzPzKGH.exe

C:\Windows\System\qzPzKGH.exe

C:\Windows\System\ZukhTVP.exe

C:\Windows\System\ZukhTVP.exe

C:\Windows\System\UIymFiS.exe

C:\Windows\System\UIymFiS.exe

C:\Windows\System\LuCPqkY.exe

C:\Windows\System\LuCPqkY.exe

C:\Windows\System\goksgNj.exe

C:\Windows\System\goksgNj.exe

C:\Windows\System\erfheCV.exe

C:\Windows\System\erfheCV.exe

C:\Windows\System\weoDLuB.exe

C:\Windows\System\weoDLuB.exe

C:\Windows\System\bfaIPxM.exe

C:\Windows\System\bfaIPxM.exe

C:\Windows\System\vgwFIvo.exe

C:\Windows\System\vgwFIvo.exe

C:\Windows\System\ttoOewQ.exe

C:\Windows\System\ttoOewQ.exe

C:\Windows\System\BlkLpnO.exe

C:\Windows\System\BlkLpnO.exe

C:\Windows\System\qAsInVj.exe

C:\Windows\System\qAsInVj.exe

C:\Windows\System\IzwerRa.exe

C:\Windows\System\IzwerRa.exe

C:\Windows\System\hkXlWvX.exe

C:\Windows\System\hkXlWvX.exe

C:\Windows\System\aAGtJVe.exe

C:\Windows\System\aAGtJVe.exe

C:\Windows\System\UEKTGvW.exe

C:\Windows\System\UEKTGvW.exe

C:\Windows\System\YHoUAgL.exe

C:\Windows\System\YHoUAgL.exe

C:\Windows\System\vVxRDld.exe

C:\Windows\System\vVxRDld.exe

C:\Windows\System\HXZNIsE.exe

C:\Windows\System\HXZNIsE.exe

C:\Windows\System\cKBZfix.exe

C:\Windows\System\cKBZfix.exe

C:\Windows\System\fpdkzkp.exe

C:\Windows\System\fpdkzkp.exe

C:\Windows\System\PoyKXkO.exe

C:\Windows\System\PoyKXkO.exe

C:\Windows\System\iZLJvCh.exe

C:\Windows\System\iZLJvCh.exe

C:\Windows\System\sMSBjVf.exe

C:\Windows\System\sMSBjVf.exe

C:\Windows\System\slizJQr.exe

C:\Windows\System\slizJQr.exe

C:\Windows\System\zsYdIeW.exe

C:\Windows\System\zsYdIeW.exe

C:\Windows\System\hnssWdJ.exe

C:\Windows\System\hnssWdJ.exe

C:\Windows\System\EaIBIEh.exe

C:\Windows\System\EaIBIEh.exe

C:\Windows\System\TszZqbs.exe

C:\Windows\System\TszZqbs.exe

C:\Windows\System\qIOyDdb.exe

C:\Windows\System\qIOyDdb.exe

C:\Windows\System\fhnhgOr.exe

C:\Windows\System\fhnhgOr.exe

C:\Windows\System\PzGepxc.exe

C:\Windows\System\PzGepxc.exe

C:\Windows\System\pwvAzBi.exe

C:\Windows\System\pwvAzBi.exe

C:\Windows\System\FscJCAh.exe

C:\Windows\System\FscJCAh.exe

C:\Windows\System\UxcWdAg.exe

C:\Windows\System\UxcWdAg.exe

C:\Windows\System\fnqNIrG.exe

C:\Windows\System\fnqNIrG.exe

C:\Windows\System\sXDUvzA.exe

C:\Windows\System\sXDUvzA.exe

C:\Windows\System\VkdQvzl.exe

C:\Windows\System\VkdQvzl.exe

C:\Windows\System\endigUc.exe

C:\Windows\System\endigUc.exe

C:\Windows\System\btVIMvn.exe

C:\Windows\System\btVIMvn.exe

C:\Windows\System\uVGwJnd.exe

C:\Windows\System\uVGwJnd.exe

C:\Windows\System\WnaFuhh.exe

C:\Windows\System\WnaFuhh.exe

C:\Windows\System\pHporLa.exe

C:\Windows\System\pHporLa.exe

C:\Windows\System\EeaUsUo.exe

C:\Windows\System\EeaUsUo.exe

C:\Windows\System\bjItBus.exe

C:\Windows\System\bjItBus.exe

C:\Windows\System\ACxytpJ.exe

C:\Windows\System\ACxytpJ.exe

C:\Windows\System\FwWCLFt.exe

C:\Windows\System\FwWCLFt.exe

C:\Windows\System\PzvJqgS.exe

C:\Windows\System\PzvJqgS.exe

C:\Windows\System\TtNWjhi.exe

C:\Windows\System\TtNWjhi.exe

C:\Windows\System\QeFthDb.exe

C:\Windows\System\QeFthDb.exe

C:\Windows\System\jefLYNx.exe

C:\Windows\System\jefLYNx.exe

C:\Windows\System\gFoUSxU.exe

C:\Windows\System\gFoUSxU.exe

C:\Windows\System\bHSGvBb.exe

C:\Windows\System\bHSGvBb.exe

C:\Windows\System\drTjgwJ.exe

C:\Windows\System\drTjgwJ.exe

C:\Windows\System\DZkcXrj.exe

C:\Windows\System\DZkcXrj.exe

C:\Windows\System\djJBSnN.exe

C:\Windows\System\djJBSnN.exe

C:\Windows\System\oVVDcfn.exe

C:\Windows\System\oVVDcfn.exe

C:\Windows\System\aPKaLXW.exe

C:\Windows\System\aPKaLXW.exe

C:\Windows\System\qlDYyNe.exe

C:\Windows\System\qlDYyNe.exe

C:\Windows\System\ZBHqZra.exe

C:\Windows\System\ZBHqZra.exe

C:\Windows\System\DrStPPK.exe

C:\Windows\System\DrStPPK.exe

C:\Windows\System\lEpRjCo.exe

C:\Windows\System\lEpRjCo.exe

C:\Windows\System\MTfAySJ.exe

C:\Windows\System\MTfAySJ.exe

C:\Windows\System\IWZMzym.exe

C:\Windows\System\IWZMzym.exe

C:\Windows\System\IawNPKh.exe

C:\Windows\System\IawNPKh.exe

C:\Windows\System\vTXIpoQ.exe

C:\Windows\System\vTXIpoQ.exe

C:\Windows\System\PMqnWFI.exe

C:\Windows\System\PMqnWFI.exe

C:\Windows\System\VXUqmGw.exe

C:\Windows\System\VXUqmGw.exe

C:\Windows\System\wemtobu.exe

C:\Windows\System\wemtobu.exe

C:\Windows\System\eJUHXFK.exe

C:\Windows\System\eJUHXFK.exe

C:\Windows\System\yqPPUNx.exe

C:\Windows\System\yqPPUNx.exe

C:\Windows\System\FjrGzfS.exe

C:\Windows\System\FjrGzfS.exe

C:\Windows\System\WngtAEA.exe

C:\Windows\System\WngtAEA.exe

C:\Windows\System\esNnjmH.exe

C:\Windows\System\esNnjmH.exe

C:\Windows\System\dWGjkIp.exe

C:\Windows\System\dWGjkIp.exe

C:\Windows\System\xNHbabH.exe

C:\Windows\System\xNHbabH.exe

C:\Windows\System\MXKtwkI.exe

C:\Windows\System\MXKtwkI.exe

C:\Windows\System\LjcCqvs.exe

C:\Windows\System\LjcCqvs.exe

C:\Windows\System\GYXwhcP.exe

C:\Windows\System\GYXwhcP.exe

C:\Windows\System\LpxTAie.exe

C:\Windows\System\LpxTAie.exe

C:\Windows\System\lhJecZM.exe

C:\Windows\System\lhJecZM.exe

C:\Windows\System\binfNEL.exe

C:\Windows\System\binfNEL.exe

C:\Windows\System\TLCRETG.exe

C:\Windows\System\TLCRETG.exe

C:\Windows\System\MeOQsxi.exe

C:\Windows\System\MeOQsxi.exe

C:\Windows\System\lsWlYjZ.exe

C:\Windows\System\lsWlYjZ.exe

C:\Windows\System\baYPaoD.exe

C:\Windows\System\baYPaoD.exe

C:\Windows\System\iNAXsce.exe

C:\Windows\System\iNAXsce.exe

C:\Windows\System\GgmOZjI.exe

C:\Windows\System\GgmOZjI.exe

C:\Windows\System\yKOxTJN.exe

C:\Windows\System\yKOxTJN.exe

C:\Windows\System\oavromY.exe

C:\Windows\System\oavromY.exe

C:\Windows\System\ZJsILPk.exe

C:\Windows\System\ZJsILPk.exe

C:\Windows\System\XVvZIgT.exe

C:\Windows\System\XVvZIgT.exe

C:\Windows\System\AIiiLPG.exe

C:\Windows\System\AIiiLPG.exe

C:\Windows\System\vCyeUOe.exe

C:\Windows\System\vCyeUOe.exe

C:\Windows\System\FtLLtpK.exe

C:\Windows\System\FtLLtpK.exe

C:\Windows\System\vumrKSE.exe

C:\Windows\System\vumrKSE.exe

C:\Windows\System\EgPDsRw.exe

C:\Windows\System\EgPDsRw.exe

C:\Windows\System\gitHihZ.exe

C:\Windows\System\gitHihZ.exe

C:\Windows\System\OXnPNuq.exe

C:\Windows\System\OXnPNuq.exe

C:\Windows\System\gSktUQG.exe

C:\Windows\System\gSktUQG.exe

C:\Windows\System\DwVDLpr.exe

C:\Windows\System\DwVDLpr.exe

C:\Windows\System\DEJqnpS.exe

C:\Windows\System\DEJqnpS.exe

C:\Windows\System\FIuBDBv.exe

C:\Windows\System\FIuBDBv.exe

C:\Windows\System\rDHdDzc.exe

C:\Windows\System\rDHdDzc.exe

C:\Windows\System\tUTKeVH.exe

C:\Windows\System\tUTKeVH.exe

C:\Windows\System\eBnDgHE.exe

C:\Windows\System\eBnDgHE.exe

C:\Windows\System\QIwpWYn.exe

C:\Windows\System\QIwpWYn.exe

C:\Windows\System\IYTqEsH.exe

C:\Windows\System\IYTqEsH.exe

C:\Windows\System\vDPTEYx.exe

C:\Windows\System\vDPTEYx.exe

C:\Windows\System\qJPBWuj.exe

C:\Windows\System\qJPBWuj.exe

C:\Windows\System\oDCugve.exe

C:\Windows\System\oDCugve.exe

C:\Windows\System\aUfwhFk.exe

C:\Windows\System\aUfwhFk.exe

C:\Windows\System\mdRwDNj.exe

C:\Windows\System\mdRwDNj.exe

C:\Windows\System\yYwKxED.exe

C:\Windows\System\yYwKxED.exe

C:\Windows\System\oEijHXy.exe

C:\Windows\System\oEijHXy.exe

C:\Windows\System\cFVAjDC.exe

C:\Windows\System\cFVAjDC.exe

C:\Windows\System\BITIloM.exe

C:\Windows\System\BITIloM.exe

C:\Windows\System\DXHxqLN.exe

C:\Windows\System\DXHxqLN.exe

C:\Windows\System\PFrSPXy.exe

C:\Windows\System\PFrSPXy.exe

C:\Windows\System\tpomEIu.exe

C:\Windows\System\tpomEIu.exe

C:\Windows\System\meeAPdL.exe

C:\Windows\System\meeAPdL.exe

C:\Windows\System\CvAdDnN.exe

C:\Windows\System\CvAdDnN.exe

C:\Windows\System\SGvaRnn.exe

C:\Windows\System\SGvaRnn.exe

C:\Windows\System\ZgwNLFz.exe

C:\Windows\System\ZgwNLFz.exe

C:\Windows\System\ZnrdKRe.exe

C:\Windows\System\ZnrdKRe.exe

C:\Windows\System\PqOfmDc.exe

C:\Windows\System\PqOfmDc.exe

C:\Windows\System\lSXIfCQ.exe

C:\Windows\System\lSXIfCQ.exe

C:\Windows\System\DEuDeEw.exe

C:\Windows\System\DEuDeEw.exe

C:\Windows\System\RQLErtO.exe

C:\Windows\System\RQLErtO.exe

C:\Windows\System\wumSMvm.exe

C:\Windows\System\wumSMvm.exe

C:\Windows\System\PMclxay.exe

C:\Windows\System\PMclxay.exe

C:\Windows\System\FdNbCvl.exe

C:\Windows\System\FdNbCvl.exe

C:\Windows\System\GGPKkxe.exe

C:\Windows\System\GGPKkxe.exe

C:\Windows\System\ePDWuCr.exe

C:\Windows\System\ePDWuCr.exe

C:\Windows\System\CsWBhnH.exe

C:\Windows\System\CsWBhnH.exe

C:\Windows\System\fWcfRjM.exe

C:\Windows\System\fWcfRjM.exe

C:\Windows\System\UFOezHw.exe

C:\Windows\System\UFOezHw.exe

C:\Windows\System\wReexHy.exe

C:\Windows\System\wReexHy.exe

C:\Windows\System\kepjEqs.exe

C:\Windows\System\kepjEqs.exe

C:\Windows\System\qIGhwOA.exe

C:\Windows\System\qIGhwOA.exe

C:\Windows\System\dkmWZEf.exe

C:\Windows\System\dkmWZEf.exe

C:\Windows\System\dCLEYyd.exe

C:\Windows\System\dCLEYyd.exe

C:\Windows\System\vdjKqCO.exe

C:\Windows\System\vdjKqCO.exe

C:\Windows\System\BeBUIEB.exe

C:\Windows\System\BeBUIEB.exe

C:\Windows\System\LPEErwA.exe

C:\Windows\System\LPEErwA.exe

C:\Windows\System\dgHPkDC.exe

C:\Windows\System\dgHPkDC.exe

C:\Windows\System\zGASVFi.exe

C:\Windows\System\zGASVFi.exe

C:\Windows\System\TpTkRCI.exe

C:\Windows\System\TpTkRCI.exe

C:\Windows\System\mAlNxRO.exe

C:\Windows\System\mAlNxRO.exe

C:\Windows\System\rkSpgdW.exe

C:\Windows\System\rkSpgdW.exe

C:\Windows\System\jCNAOfk.exe

C:\Windows\System\jCNAOfk.exe

C:\Windows\System\sfYXKbw.exe

C:\Windows\System\sfYXKbw.exe

C:\Windows\System\zcLYzHj.exe

C:\Windows\System\zcLYzHj.exe

C:\Windows\System\fOMUFiz.exe

C:\Windows\System\fOMUFiz.exe

C:\Windows\System\KuEIrSb.exe

C:\Windows\System\KuEIrSb.exe

C:\Windows\System\TaqbRUT.exe

C:\Windows\System\TaqbRUT.exe

C:\Windows\System\DYEmMCp.exe

C:\Windows\System\DYEmMCp.exe

C:\Windows\System\skQeALk.exe

C:\Windows\System\skQeALk.exe

C:\Windows\System\hnqRGYt.exe

C:\Windows\System\hnqRGYt.exe

C:\Windows\System\qQrImdH.exe

C:\Windows\System\qQrImdH.exe

C:\Windows\System\ssMCDiY.exe

C:\Windows\System\ssMCDiY.exe

C:\Windows\System\CetEaGd.exe

C:\Windows\System\CetEaGd.exe

C:\Windows\System\bQnNTek.exe

C:\Windows\System\bQnNTek.exe

C:\Windows\System\zbpHkpU.exe

C:\Windows\System\zbpHkpU.exe

C:\Windows\System\MWBhjiU.exe

C:\Windows\System\MWBhjiU.exe

C:\Windows\System\ZnetwxD.exe

C:\Windows\System\ZnetwxD.exe

C:\Windows\System\rbzLnFv.exe

C:\Windows\System\rbzLnFv.exe

C:\Windows\System\nMrsENl.exe

C:\Windows\System\nMrsENl.exe

C:\Windows\System\cKyhqxo.exe

C:\Windows\System\cKyhqxo.exe

C:\Windows\System\kVjURgZ.exe

C:\Windows\System\kVjURgZ.exe

C:\Windows\System\QgAAcnI.exe

C:\Windows\System\QgAAcnI.exe

C:\Windows\System\KszjhEj.exe

C:\Windows\System\KszjhEj.exe

C:\Windows\System\KZhAfNa.exe

C:\Windows\System\KZhAfNa.exe

C:\Windows\System\oICpZWF.exe

C:\Windows\System\oICpZWF.exe

C:\Windows\System\tTGkwtt.exe

C:\Windows\System\tTGkwtt.exe

C:\Windows\System\ZpbsKXV.exe

C:\Windows\System\ZpbsKXV.exe

C:\Windows\System\yJbSpvy.exe

C:\Windows\System\yJbSpvy.exe

C:\Windows\System\pDWGddg.exe

C:\Windows\System\pDWGddg.exe

C:\Windows\System\uhDpkTa.exe

C:\Windows\System\uhDpkTa.exe

C:\Windows\System\xyEqBoM.exe

C:\Windows\System\xyEqBoM.exe

C:\Windows\System\tbuhOiN.exe

C:\Windows\System\tbuhOiN.exe

C:\Windows\System\dTYnbjY.exe

C:\Windows\System\dTYnbjY.exe

C:\Windows\System\iHRGeri.exe

C:\Windows\System\iHRGeri.exe

C:\Windows\System\ZShLvLt.exe

C:\Windows\System\ZShLvLt.exe

C:\Windows\System\DPfpgov.exe

C:\Windows\System\DPfpgov.exe

C:\Windows\System\ERlYcHc.exe

C:\Windows\System\ERlYcHc.exe

C:\Windows\System\rrAgiDD.exe

C:\Windows\System\rrAgiDD.exe

C:\Windows\System\axQHCDV.exe

C:\Windows\System\axQHCDV.exe

C:\Windows\System\OIvAdOE.exe

C:\Windows\System\OIvAdOE.exe

C:\Windows\System\wDtNfuU.exe

C:\Windows\System\wDtNfuU.exe

C:\Windows\System\JmaiwMd.exe

C:\Windows\System\JmaiwMd.exe

C:\Windows\System\fugjysQ.exe

C:\Windows\System\fugjysQ.exe

C:\Windows\System\zBmMCdi.exe

C:\Windows\System\zBmMCdi.exe

C:\Windows\System\PnzSqyO.exe

C:\Windows\System\PnzSqyO.exe

C:\Windows\System\fDWLHZP.exe

C:\Windows\System\fDWLHZP.exe

C:\Windows\System\SRKmCTr.exe

C:\Windows\System\SRKmCTr.exe

C:\Windows\System\yAHAZmH.exe

C:\Windows\System\yAHAZmH.exe

C:\Windows\System\AksKbNG.exe

C:\Windows\System\AksKbNG.exe

C:\Windows\System\BJeidYY.exe

C:\Windows\System\BJeidYY.exe

C:\Windows\System\zDqDLYj.exe

C:\Windows\System\zDqDLYj.exe

C:\Windows\System\RPKIqcz.exe

C:\Windows\System\RPKIqcz.exe

C:\Windows\System\QOGQGBa.exe

C:\Windows\System\QOGQGBa.exe

C:\Windows\System\ZEAVTPz.exe

C:\Windows\System\ZEAVTPz.exe

C:\Windows\System\FvaJmqj.exe

C:\Windows\System\FvaJmqj.exe

C:\Windows\System\vFyqdmI.exe

C:\Windows\System\vFyqdmI.exe

C:\Windows\System\HwjmmDN.exe

C:\Windows\System\HwjmmDN.exe

C:\Windows\System\oHeOWXY.exe

C:\Windows\System\oHeOWXY.exe

C:\Windows\System\ERUScFb.exe

C:\Windows\System\ERUScFb.exe

C:\Windows\System\OASmeWR.exe

C:\Windows\System\OASmeWR.exe

C:\Windows\System\KZHMhkq.exe

C:\Windows\System\KZHMhkq.exe

C:\Windows\System\HVOEmUv.exe

C:\Windows\System\HVOEmUv.exe

C:\Windows\System\FGYovbh.exe

C:\Windows\System\FGYovbh.exe

C:\Windows\System\HlWojMQ.exe

C:\Windows\System\HlWojMQ.exe

C:\Windows\System\rFxgHoy.exe

C:\Windows\System\rFxgHoy.exe

C:\Windows\System\OSOcgwv.exe

C:\Windows\System\OSOcgwv.exe

C:\Windows\System\RIqvZzP.exe

C:\Windows\System\RIqvZzP.exe

C:\Windows\System\NbREZaL.exe

C:\Windows\System\NbREZaL.exe

Network

N/A

Files

memory/2944-0-0x000000013F3E0000-0x000000013F731000-memory.dmp

memory/2944-1-0x00000000001F0000-0x0000000000200000-memory.dmp

\Windows\system\ZkXmSDU.exe

MD5	b56ed305c1219237f4100016f2d6fd2a
SHA1	6ce5f7410c48a611d129b4a9598d4ed8871778f9
SHA256	a7eae3d5d79987b5f9b8c425a54b7731c84f9003cfb1865e1b7d4f8edec1c6bc
SHA512	da8c56fdade22cd0de633631c71c514feb28a8a346c09217ced81914dcf67956a777935a739c20ff589c1a80b10c8208f8088466a61259de92f798570c302da8

memory/3016-9-0x000000013FF00000-0x0000000140251000-memory.dmp

memory/2944-7-0x000000013FF00000-0x0000000140251000-memory.dmp

\Windows\system\RbyYiVV.exe

MD5	4d0c4b2f5536976b70d9fe0cadf9a05c
SHA1	0239c523b62b02642052bde0b9cb1a047378941e
SHA256	5c4f8e096fd00da925dcc2e02c735e51cea4840288573281389768fce6fb4c5f
SHA512	35283903e71c7a4d113ec5db7e6b4084ff069c948b7b2d440c5b1f6ec7b4d87afb679ee4a8d57ac77cea7577832d93bda9e1387e0d04e8b851c39247bb79390d

\Windows\system\KQXNgko.exe

MD5	6edcf028d3c541e2c0695c84fb823eb5
SHA1	ad8e2f860835fedd07c8421eaddc159d5ed33d38
SHA256	a311e638bfc4c3a35e97a24e76c7714ce96a0f85e149034688ee60526cf08d58
SHA512	1732c70f069721d359550cd2782cff17b183e60d23fa410069023292cf39ade9fe62ede876986db659bb6f488f08deb04b85fdd1fece303caf4c4dbd16f2cc3d

memory/2356-21-0x000000013F620000-0x000000013F971000-memory.dmp

memory/2944-20-0x0000000001E90000-0x00000000021E1000-memory.dmp

memory/2136-18-0x000000013F850000-0x000000013FBA1000-memory.dmp

C:\Windows\system\vUexJbm.exe

MD5	4f5a36828882ee832b59dc854579de94
SHA1	20ffbb3128d8a501eb33a789b5c37ecae145e2d2
SHA256	984d9120cc9bf896fef92f25844e6fd0d3e244d9f21c35fcfe352dd4cad944fa
SHA512	bd5563525d8ab53b9fc4b19852301e7a3859108659fc38595bffe40a888b127f387e5ddaf5f147a4c1237a2735b6863f6c8355230c5c549a9ae3bc24cdc5227e

memory/2944-28-0x000000013FB70000-0x000000013FEC1000-memory.dmp

memory/2648-29-0x000000013FB70000-0x000000013FEC1000-memory.dmp

\Windows\system\BfAUWop.exe

MD5	ab14dddb36d24165bd7ac9a9e6f4552e
SHA1	c67d4494c44ad0738ae97fbb4dad7dbf58534230
SHA256	5ae4d55b0092273dab3b1eae265387456578bc3f727b7e927b9357d6b8fc247c
SHA512	e4195f0f1da9439ac45e08ad66ac41296c102153ed57196f66606e7bb4419d90ea5cbcaea3f43f56d74e6ef9fbce2b1ff82a34947b5eb726f0eefcd385703763

\Windows\system\Shqbuvu.exe

MD5	085bbcd010aed0dba548df67ae0b9c70
SHA1	f46599a0e3b0e1b1ce0df361e99dedb432640237
SHA256	0ba762ae3dea48642bd1e8ef12e94051824c995e1a240e0526eeb4c1e3b88da4
SHA512	54d8d469ab1e598789317d3c65bc3c2bdaac6928c5be14d1f7a4cd63e722052cb38a3167763a0c1cecd2338b9a3e33d434164cce1b61bab4ed6bf208346e82a7

\Windows\system\eqxxviW.exe

MD5	7cb4fac8268a88963a7b8d975ed9b853
SHA1	69c4bfe5984a0b5c110b8c05f4677532305ab39b
SHA256	b677770a7c867a77d82de54c7b04535475d6707fe9719018f349b546128a3210
SHA512	1e86877877d17e93cc376a54d4435eeb323f2f8f827601a1020e2f7055717d61b5623f3d9e790a7c5d931776f34b271ee1fe6de2d76147d290f0ceedaaf77488

\Windows\system\nINMMum.exe

MD5	ea28c6d1cf12f3f100be5760f8781313
SHA1	d2c8dcf40fc9769a4c5f21a4c9aac4ba72008a77
SHA256	1ba90b7e0ec9f35508d8fb9a7589291a70ffdc875e85c065f8b039852859d1c8
SHA512	f2d8ca74119cb035abeac5a7449d0412854eeb26dabba7df4eaf73984813e962ca4e7bbb5863fd4d43f2551197825b9117c0dbda3dc0790b8bbb5c5d6314d83f

\Windows\system\lKovnnF.exe

MD5	bd0807a0a55b6a28f0414f060296b258
SHA1	d1f16acddcda06e54cd2c8d12be7786ab242c064
SHA256	bd9351e649710a0c97e4e1492abb6daf89788b701a2819d8c8c4f9610ddecda7
SHA512	001d2a693fba683bc6cf5669ac5a047621673b641ff55984ce07279df8030fe829e3a2441841d50e6e90977f09f763dbfebd8ba9e937b67285dde7113b1227d6

memory/2812-42-0x000000013F720000-0x000000013FA71000-memory.dmp

\Windows\system\HrrvZER.exe

MD5	cb3345c735e9ff69d9700aaf02c37d07
SHA1	4be0915346f2a9495c33f339ee426d06e018a305
SHA256	5f60818de6c344a487d83be789b919a5f1b3106826654098a2c448f1d224343b
SHA512	807cbe307fa97be43a2d47bb028f2a42db1068a4311a28bbaf06f6a6613879911717e0946cb499089ec83504d34ff4314047dff434a4994c2bf24a7cf0a250ff

memory/2196-94-0x000000013FA90000-0x000000013FDE1000-memory.dmp

memory/2944-99-0x000000013F920000-0x000000013FC71000-memory.dmp

C:\Windows\system\NkLUbvZ.exe

MD5	e52917edb5c3510e99f3a35a16b924d2
SHA1	78b74bd43b118d8d5a5a93d29038673a4e89289c
SHA256	547a142dad5ed770b824ebecce53b14754f8fb6ed0d3efd748cade64f3805993
SHA512	7b0f04adc1818953ecc4bcd7a3f166380a772d1ead0d67886e173b8240e373271194221b009ee6c18a6f81f99b75c03298ff81d375d6a3e8df096decb72ba715

C:\Windows\system\SWpezdZ.exe

MD5	d74a87dd70aa17bedb9d38f3fbe4785f
SHA1	42c7da99f2089f75c15236f1f9e64065c11ae950
SHA256	4e08d680177e2125e2e156c1c487c68764762aa0a17d86698027e8cf15d2073b
SHA512	e54f0ac380d74ae6e21ba39f32e4eb6b0e1e2bc4852169a8d56c049c2e9522c7efb0004137d79ed358fc580a72e2389af1b6595301b771d605e2fc90a76d9d85

memory/2136-92-0x000000013F850000-0x000000013FBA1000-memory.dmp

C:\Windows\system\QqZvVQG.exe

MD5	8d020197b76ac777dd5085d1b69c5026
SHA1	063b411da64424d0a5c1671e2dc31b562dfae8a5
SHA256	6a7c2a6ff38aa02122939b822260dd01e2750c2c9c6e9708d94dfdca9d4d94af
SHA512	468a849f77fc027a60b3e6062397bf1d625f6fea354620ef6bd989f6c3657715581281bec46af382f4e44e32be42017719fd868b8ddea3b596672c2ce574cb2b

C:\Windows\system\jbLNIlI.exe

MD5	2ffd74bc9cc42a482826e3c1e613efa8
SHA1	ef52321f2d51a53475b2f777ff4d347b2acf6c9b
SHA256	e0310db5bf3533da84bb058f14f333870d5a48cc0b9daa2538e508efee93e28e
SHA512	99dab7415099130da35e4a7c04c441301e73668b6ca3119bd6d2dcf4c679656cf90cad8fa7896637b0c21e5178e2b66ca8c87045e082232f2283e0f42b02ec96

memory/2356-413-0x000000013F620000-0x000000013F971000-memory.dmp

C:\Windows\system\DgVQhEF.exe

MD5	f8eed8a4297b0a7ce3ccbdd1d636777d
SHA1	01f71d4bad2cd77af1eb55d72bb5326344b65c37
SHA256	726424be83010cfd6eb84c38d318a7924116f9efdac3d7f0d9833beddfa4bcf6
SHA512	282e7337e73b0db538076a5dff492c9cf600f45e1e531c052594d619dc906bdfb4d69900f998a25e6567088eb9a128564e9e6f4974e19b40c894ec671f7c2f00

C:\Windows\system\BeDuiEA.exe

MD5	6595570b6fb6c13582df4416fb753b83
SHA1	eb1a54b8676638828975f4804a16ccc7b0b1ea16
SHA256	ab42a23875f107b775f901e4460eff7738169d0bbb096f5267479e60e9c70c98
SHA512	ae1f54cfa278a29cf131a677b3e54b9283d193c078482a46014fc800658393ce9dae191d45514ad9f98645fc54fc6bdf3c443e3887f03abc0293d4c00c297030

C:\Windows\system\gxSxctx.exe

MD5	87b553c9618c4db779ee286a2384c77a
SHA1	cbab0f36104833c58891ca3a75958152a503d94b
SHA256	e6a8f4db65fd199f4a84a2246902454b37e9e66f0345bb0931dc6563c3df4ae6
SHA512	4f78ff277967a641f7233b006fd78fa907770202f33f7f414b594c9a4af750e3e1c794fe31bfae5884af2fa407a5e53284139495356ad4d7e707e54dbd5da46e

C:\Windows\system\jWrNDXA.exe

MD5	10633dd5debb286636539cf869192d16
SHA1	17ff59954563e0e669eda3416841eb5e2950c5ec
SHA256	b955a41281570cfdc8d209d94b8de8ade3324d662eb1d68555d51b058c925583
SHA512	b985a88914ef58330f6a04c1c8ab8f0e24f469d336860588b21a6b9c6098de8b63613bf4656022183141da3adf53efe9e96132f653436d35b3559f3de26aead9

C:\Windows\system\MDPWzfl.exe

MD5	fbde8400e6509b4e7300dabcddbaecd3
SHA1	07cbb7bf428cabac1a5e2bebcf0765c9b0114da0
SHA256	f6fce4a4ad8d90d866265be277b0e3a0cbb9370d6487d6616da10186c0010bbf
SHA512	9b0ba122432cab700918dfb1a27f9389a613079f6b7cf732398977a03dd65bb96c6c4abc84e5d05db6ac6f25b046f75150ddc6034180a46778d54fe87514b4b7

C:\Windows\system\LrqVStA.exe

MD5	7f1038bae7a655628ce88c6e232de4e8
SHA1	919529ab17f0010399ccb6d5463375bc25cce651
SHA256	daad451940ad7d51f726aad8a4ca14fd76625b3020601208d371812ed217bc68
SHA512	318caa80baeb9aadf00ca9e4829e559164ec9762be9157d3c39d69785a99df9a8ddf9d05d50343edad23ab5eb093e4d755d5eb7060f1c73e65a3e1b0b33c9dee

C:\Windows\system\zefOasL.exe

MD5	d4db08115a5c2398036bd9bb9b1b6ab1
SHA1	ef67ca0edde39aaa9ec85c9ab9df26a3b58b0a8d
SHA256	6b6c6045611a93d26dabf0776b5e408e2e49a3819f1efbb72cbb6d536809682f
SHA512	0717beac98d3308fa0c645b7f600dd1fdceb6a3660a69af38d9db23cfd177d056608ad43fb14f19a47a9d1a5b949d29c3161398f980c59b6789e071c27643097

C:\Windows\system\ltKorkC.exe

MD5	6319e9822103e6ccede591e3950d6d46
SHA1	8c8515b4a6a291ff1caab6d3884bb83272b1ac4e
SHA256	384e0f56f558ea8b2fed4dd71b465c18c477253fab94daff9a6f165f70e38e51
SHA512	f46e9fa6056665d47c5aed06c48587e2e86964688f5c9db502ed23c59e35b48997d049ac227023472a77794f1ca29bbb98763af01d5fa14724aaf6b7278738d7

C:\Windows\system\hqWZTWp.exe

MD5	eddf49810784b5bdf2b4d8b7eb5d5d2f
SHA1	52aa2e4371ab585db561c38d3cfabf84c40b2a9e
SHA256	2c53a2de89f00c33712417a24a8f89c5f5b8837c25bdf6b202f68573eab1312e
SHA512	8145da32bc8755b55ee400df8bd4bc466193ad7cd06e4b2b0c4afda8b9b33a3dc32d51c4dc0d04ead098ddd97fa4d0623c04ac5d548abb9addd510a765e93162

C:\Windows\system\ZOoBYYe.exe

MD5	2ffc625154ff0971018c3ae82e04543a
SHA1	b790faf7b2ce6a95e35075e519f0910c5dbddcab
SHA256	654234b5d8fea6e4c3700dd793bcc68d2667548c36935165d5e0e704a18b1d56
SHA512	97cd4b5d0c93a9a3be8c6f52a2e0a1f4d881c7f88a927a9f407541d93d1473d6099d3729e818d574499603e80cba92d0da6e46eaa00a0f386738c93caecf191d

C:\Windows\system\gXsfGFM.exe

MD5	a0021e0cc90431aa6db30c3d92f2996f
SHA1	e3f5c58d563cd01060bcba46be271ed510f1bc68
SHA256	848670f18f7cf1ffb41ac1d0462d953da042a411992fb6a951a4a9f41d6dc893
SHA512	0003476fcb900f5655538919b64642acd8732b82b1d97c7c371588942de6346d1f7f97b5b628fd8aabdc0f2fc3c37a8632e52e7dcecd9edf75fffab316f5fc0f

C:\Windows\system\QzbFxiK.exe

MD5	0d1bcf6617de19e6b87bbc9e16d34858
SHA1	8e699d9208a335f0d8d10847fdd096fecfe2a7de
SHA256	db9a078e073a0aef8c58b3ac38663225e006a43963b37c3ac93cee0b46eaf593
SHA512	ea146d1ec10acc0f5f6749f080b96afeab65fcf0e6d6181550fa301cc4a18bf37e35a5f95f8642f02f03d8ba47ad210ca16704291f685e283979f353bf2c66e2

C:\Windows\system\VyFZYFK.exe

MD5	0de216f5fc2d222d38b9214dbb0efc37
SHA1	c6118081312f942be2e453f1c5627ae3a4a2c6a4
SHA256	1cd657ab8af09915041f36f9fd00041124371896fb6e1543f6fa20dfca50fe5d
SHA512	c623e6ffc85cdbafa7a53d4504bc1ae54649a73404e7a4c4edfd747d1880c6d98d283661c2d11c04ad3ade2349b1b56cb3407ec27ab97f7f0c03957b39fbd75d

C:\Windows\system\ToiWXwE.exe

MD5	ea4086169c7d35f2786aa327e0344e7e
SHA1	54b82cd98aa5bed629bc58b0863914447ac14a0a
SHA256	e440ea8ddf66949838055a63922d62f8a5b50108b0edf69a0acebb8f217b696c
SHA512	9714c77e5a9dd4fa4fe2e3b4021e078732be8c132ef76c1f60b01ecb81eb5e0067743268d616b0af768500735100d11245cf2cf407cf394cf530ec925735631c

C:\Windows\system\PIfhcvQ.exe

MD5	ceeed6d8ea15230cd620e888410d537e
SHA1	401368475a09a585be1de753cbca6791fbeb4e33
SHA256	47cd6ba291c0dda8191d04f0e14ef293ef14b4a4e76ad11bc840e4a8213d8238
SHA512	9f20fb60913b1b7defbe092984cee99793178974058edd6f1370fb7c034e03f5901baac583c3fe63fecbdee3db6af9fe184f53faa5c93ef6c346ae123708e3a0

C:\Windows\system\UuxYyWB.exe

MD5	dde1448f8c2b0234c8f1de7729904b62
SHA1	872b187a0e9969127a38c4f13eccbea0e282e400
SHA256	aa9591c45a39096d3e4bc83dcd46e2fdac26a4614b5475a845c533390ccae72c
SHA512	c30b6ad939b5b870198fadb817beaad9b74272beafe8afcccae2d0fa9e153abb5d63b8b6997d0967aa41f10c042ade8878224eb598697862f6134b74d640f063

memory/2860-90-0x000000013FCB0000-0x0000000140001000-memory.dmp

memory/2944-89-0x000000013FA70000-0x000000013FDC1000-memory.dmp

memory/2944-88-0x000000013FDD0000-0x0000000140121000-memory.dmp

memory/2944-86-0x000000013F870000-0x000000013FBC1000-memory.dmp

memory/2944-85-0x000000013FA90000-0x000000013FDE1000-memory.dmp

memory/2760-84-0x000000013FA70000-0x000000013FDC1000-memory.dmp

memory/2568-83-0x000000013FDD0000-0x0000000140121000-memory.dmp

memory/2944-82-0x0000000001E90000-0x00000000021E1000-memory.dmp

memory/2868-81-0x000000013FA60000-0x000000013FDB1000-memory.dmp

memory/2944-77-0x000000013FB20000-0x000000013FE71000-memory.dmp

memory/2688-76-0x000000013F870000-0x000000013FBC1000-memory.dmp

memory/2560-63-0x000000013FC30000-0x000000013FF81000-memory.dmp

C:\Windows\system\pgPYcWq.exe

MD5	602964c98eb5f463dda691e0894f7843
SHA1	d4a1ef375e2e985d1d5e13dd30c1fd35da17231b
SHA256	92149eb265a88bc43180b94a4195ea621df158af671ed1c3d3baff4caf13e589
SHA512	fec12e6eee5873ae79157a6ad8304d5e2308e820e2fc0099c4a3a3dbabb74cb04512b2bc7278a8fb028cb9faf34c2e269b085b0e1106b33ba773d5f9a9981532

memory/2944-47-0x000000013F3E0000-0x000000013F731000-memory.dmp

memory/3032-100-0x000000013F920000-0x000000013FC71000-memory.dmp

C:\Windows\system\ezDhEgX.exe

MD5	fd8cf78a0e03c3c5e1484625b663ccee
SHA1	c3e29b3fab5a32b093dab71dfe6eec47904e2484
SHA256	34ea418652678beec6af105d3c10878e695ccf243aaec2cbef5a07d2eaeaeafd
SHA512	1c15e4d10ebd3c243d12d55ba5e627aabf462ccd438fb10898a49396f2a844c9701dae66b9f46d65dd312e6497c22b7e51950bbda1740d03c320eb7d8624f084

memory/2944-35-0x000000013FA60000-0x000000013FDB1000-memory.dmp

memory/2812-1165-0x000000013F720000-0x000000013FA71000-memory.dmp

memory/2944-1161-0x0000000001E90000-0x00000000021E1000-memory.dmp

memory/2688-1450-0x000000013F870000-0x000000013FBC1000-memory.dmp

memory/2560-1449-0x000000013FC30000-0x000000013FF81000-memory.dmp

memory/2944-1764-0x0000000001E90000-0x00000000021E1000-memory.dmp

memory/2944-2041-0x0000000001E90000-0x00000000021E1000-memory.dmp

memory/2944-2036-0x000000013F870000-0x000000013FBC1000-memory.dmp

memory/2944-2030-0x000000013FA90000-0x000000013FDE1000-memory.dmp

memory/2860-2283-0x000000013FCB0000-0x0000000140001000-memory.dmp

memory/2944-3273-0x000000013F920000-0x000000013FC71000-memory.dmp

memory/2196-3272-0x000000013FA90000-0x000000013FDE1000-memory.dmp

memory/3032-3657-0x000000013F920000-0x000000013FC71000-memory.dmp

memory/3016-3783-0x000000013FF00000-0x0000000140251000-memory.dmp

memory/2136-3797-0x000000013F850000-0x000000013FBA1000-memory.dmp

memory/2648-3816-0x000000013FB70000-0x000000013FEC1000-memory.dmp

memory/2812-3824-0x000000013F720000-0x000000013FA71000-memory.dmp

memory/2688-3813-0x000000013F870000-0x000000013FBC1000-memory.dmp

memory/2560-3829-0x000000013FC30000-0x000000013FF81000-memory.dmp

memory/2868-3834-0x000000013FA60000-0x000000013FDB1000-memory.dmp

memory/2760-3838-0x000000013FA70000-0x000000013FDC1000-memory.dmp

memory/3032-3847-0x000000013F920000-0x000000013FC71000-memory.dmp

memory/2568-3836-0x000000013FDD0000-0x0000000140121000-memory.dmp

memory/2356-3835-0x000000013F620000-0x000000013F971000-memory.dmp

memory/2860-3886-0x000000013FCB0000-0x0000000140001000-memory.dmp

memory/2196-3869-0x000000013FA90000-0x000000013FDE1000-memory.dmp

Analysis: behavioral2

Detonation Overview

Submitted

2024-06-13 13:10

Reported

2024-06-13 13:12

Platform

win10v2004-20240611-en

Max time kernel

93s

Max time network

136s

Command Line

"C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe"

Signatures

xmrig

miner xmrig

XMRig Miner payload

miner

Description	Indicator	Process	Target
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A

Executes dropped EXE

Description	Indicator	Process	Target
N/A	N/A	C:\Windows\System\fFUxvFE.exe	N/A
N/A	N/A	C:\Windows\System\yBlYnfz.exe	N/A
N/A	N/A	C:\Windows\System\TzhXGFC.exe	N/A
N/A	N/A	C:\Windows\System\DcuazeJ.exe	N/A
N/A	N/A	C:\Windows\System\hhmJNvm.exe	N/A
N/A	N/A	C:\Windows\System\XxyGbky.exe	N/A
N/A	N/A	C:\Windows\System\HWHhwZx.exe	N/A
N/A	N/A	C:\Windows\System\aCmPeip.exe	N/A
N/A	N/A	C:\Windows\System\LEbilwU.exe	N/A
N/A	N/A	C:\Windows\System\yjYsEDA.exe	N/A
N/A	N/A	C:\Windows\System\FIYJBdP.exe	N/A
N/A	N/A	C:\Windows\System\lCgcHve.exe	N/A
N/A	N/A	C:\Windows\System\URLFYGw.exe	N/A
N/A	N/A	C:\Windows\System\jJIHHsH.exe	N/A
N/A	N/A	C:\Windows\System\QtEJVZQ.exe	N/A
N/A	N/A	C:\Windows\System\xuYpbrU.exe	N/A
N/A	N/A	C:\Windows\System\DIZzYwU.exe	N/A
N/A	N/A	C:\Windows\System\XnHYXTU.exe	N/A
N/A	N/A	C:\Windows\System\mHbemTs.exe	N/A
N/A	N/A	C:\Windows\System\uTpCOJI.exe	N/A
N/A	N/A	C:\Windows\System\DKHRNTt.exe	N/A
N/A	N/A	C:\Windows\System\PHyFlel.exe	N/A
N/A	N/A	C:\Windows\System\ekSZwQJ.exe	N/A
N/A	N/A	C:\Windows\System\MPQUHIX.exe	N/A
N/A	N/A	C:\Windows\System\sFUshJf.exe	N/A
N/A	N/A	C:\Windows\System\rqzVEUB.exe	N/A
N/A	N/A	C:\Windows\System\dsKWpKv.exe	N/A
N/A	N/A	C:\Windows\System\phehMIc.exe	N/A
N/A	N/A	C:\Windows\System\iHVfdnZ.exe	N/A
N/A	N/A	C:\Windows\System\qcFfBXd.exe	N/A
N/A	N/A	C:\Windows\System\BkhYjIf.exe	N/A
N/A	N/A	C:\Windows\System\NhUhFGz.exe	N/A
N/A	N/A	C:\Windows\System\nKBqueP.exe	N/A
N/A	N/A	C:\Windows\System\zBNNrih.exe	N/A
N/A	N/A	C:\Windows\System\XoXTGKs.exe	N/A
N/A	N/A	C:\Windows\System\JaZUpGL.exe	N/A
N/A	N/A	C:\Windows\System\obBaeTZ.exe	N/A
N/A	N/A	C:\Windows\System\iPLTrbc.exe	N/A
N/A	N/A	C:\Windows\System\PQZaTDt.exe	N/A
N/A	N/A	C:\Windows\System\ICqrgyj.exe	N/A
N/A	N/A	C:\Windows\System\odprppn.exe	N/A
N/A	N/A	C:\Windows\System\vaKmvbx.exe	N/A
N/A	N/A	C:\Windows\System\JrHRHaE.exe	N/A
N/A	N/A	C:\Windows\System\DQTfkgd.exe	N/A
N/A	N/A	C:\Windows\System\beyWiZJ.exe	N/A
N/A	N/A	C:\Windows\System\QwGQTnf.exe	N/A
N/A	N/A	C:\Windows\System\kLFUYss.exe	N/A
N/A	N/A	C:\Windows\System\uIabZAW.exe	N/A
N/A	N/A	C:\Windows\System\hDbaJMv.exe	N/A
N/A	N/A	C:\Windows\System\qgxBWRE.exe	N/A
N/A	N/A	C:\Windows\System\zvlCclb.exe	N/A
N/A	N/A	C:\Windows\System\iODICLe.exe	N/A
N/A	N/A	C:\Windows\System\RxJiinX.exe	N/A
N/A	N/A	C:\Windows\System\jGQyXam.exe	N/A
N/A	N/A	C:\Windows\System\ZcatfPb.exe	N/A
N/A	N/A	C:\Windows\System\DmFRMci.exe	N/A
N/A	N/A	C:\Windows\System\zgSOMDL.exe	N/A
N/A	N/A	C:\Windows\System\ADXfSBO.exe	N/A
N/A	N/A	C:\Windows\System\DbWRAAe.exe	N/A
N/A	N/A	C:\Windows\System\cIqBXcd.exe	N/A
N/A	N/A	C:\Windows\System\HKPQSOG.exe	N/A
N/A	N/A	C:\Windows\System\UDNAGQf.exe	N/A
N/A	N/A	C:\Windows\System\GMwaGyO.exe	N/A
N/A	N/A	C:\Windows\System\CblevNs.exe	N/A

UPX packed file

upx

Description	Indicator	Process	Target
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A

Drops file in Windows directory

Description	Indicator	Process	Target
File created	C:\Windows\System\EdfLkmm.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\OwkeRFX.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\jPWQlBv.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\UqjsHHn.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\aTTFcao.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\XoXTGKs.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\dUUlolF.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\bnWwHdB.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\AikrCFh.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\FMwATpw.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\izIUSHV.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\PHyFlel.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\uIabZAW.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\RoIzEuF.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\cMUUeba.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\pnejLAZ.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\bNAejIs.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\ByhPtdp.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\CnvRHSW.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\lhuVrpf.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\geHvncP.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\MCfpgGQ.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\ccKXGHP.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\BkhYjIf.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\QIScmbt.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\HhfDbuf.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\IqouKtI.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\nWoDKOL.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\hyRZzjY.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\VmUTKRE.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\xMqpBOw.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\YeUcdQl.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\ZyHCzsy.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\wXDBYbj.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\pyphlAT.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\MvGETYS.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\nZRxPbF.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\bimPYgZ.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\IsRDzGp.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\sSvvmzm.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\FJLdoZx.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\bgEJBAV.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\ZsGdpyp.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\WLrGHfb.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\oPTKmeO.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\nYimcrD.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\lCgcHve.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\qcFfBXd.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\kQJXNeb.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\xtoebeU.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\MTBwhzF.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\XwTiCHZ.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\gyTxtpc.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\CKVriAp.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\mNcBBKb.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\MRmCJMe.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\QNwBECd.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\JAZtVyv.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\kpYsBPM.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\ZUHKAIy.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\wDEFeyn.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\tNjJpCk.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\JCWqaEf.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A
File created	C:\Windows\System\TFHUDdY.exe	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	N/A

Suspicious use of WriteProcessMemory

Description	Indicator	Process	Target
PID 1528 wrote to memory of 1376	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\fFUxvFE.exe
PID 1528 wrote to memory of 1376	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\fFUxvFE.exe
PID 1528 wrote to memory of 1936	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\yBlYnfz.exe
PID 1528 wrote to memory of 1936	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\yBlYnfz.exe
PID 1528 wrote to memory of 3100	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\TzhXGFC.exe
PID 1528 wrote to memory of 3100	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\TzhXGFC.exe
PID 1528 wrote to memory of 3040	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\DcuazeJ.exe
PID 1528 wrote to memory of 3040	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\DcuazeJ.exe
PID 1528 wrote to memory of 3600	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\hhmJNvm.exe
PID 1528 wrote to memory of 3600	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\hhmJNvm.exe
PID 1528 wrote to memory of 3472	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\XxyGbky.exe
PID 1528 wrote to memory of 3472	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\XxyGbky.exe
PID 1528 wrote to memory of 4848	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\HWHhwZx.exe
PID 1528 wrote to memory of 4848	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\HWHhwZx.exe
PID 1528 wrote to memory of 4136	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\aCmPeip.exe
PID 1528 wrote to memory of 4136	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\aCmPeip.exe
PID 1528 wrote to memory of 4868	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\LEbilwU.exe
PID 1528 wrote to memory of 4868	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\LEbilwU.exe
PID 1528 wrote to memory of 3648	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\yjYsEDA.exe
PID 1528 wrote to memory of 3648	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\yjYsEDA.exe
PID 1528 wrote to memory of 2180	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\FIYJBdP.exe
PID 1528 wrote to memory of 2180	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\FIYJBdP.exe
PID 1528 wrote to memory of 3520	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\lCgcHve.exe
PID 1528 wrote to memory of 3520	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\lCgcHve.exe
PID 1528 wrote to memory of 3804	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\URLFYGw.exe
PID 1528 wrote to memory of 3804	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\URLFYGw.exe
PID 1528 wrote to memory of 4944	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\jJIHHsH.exe
PID 1528 wrote to memory of 4944	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\jJIHHsH.exe
PID 1528 wrote to memory of 2376	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\QtEJVZQ.exe
PID 1528 wrote to memory of 2376	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\QtEJVZQ.exe
PID 1528 wrote to memory of 4936	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\xuYpbrU.exe
PID 1528 wrote to memory of 4936	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\xuYpbrU.exe
PID 1528 wrote to memory of 4964	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\DIZzYwU.exe
PID 1528 wrote to memory of 4964	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\DIZzYwU.exe
PID 1528 wrote to memory of 4492	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\XnHYXTU.exe
PID 1528 wrote to memory of 4492	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\XnHYXTU.exe
PID 1528 wrote to memory of 3904	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\mHbemTs.exe
PID 1528 wrote to memory of 3904	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\mHbemTs.exe
PID 1528 wrote to memory of 5008	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\uTpCOJI.exe
PID 1528 wrote to memory of 5008	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\uTpCOJI.exe
PID 1528 wrote to memory of 4156	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\DKHRNTt.exe
PID 1528 wrote to memory of 4156	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\DKHRNTt.exe
PID 1528 wrote to memory of 5028	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\PHyFlel.exe
PID 1528 wrote to memory of 5028	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\PHyFlel.exe
PID 1528 wrote to memory of 2708	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\dsKWpKv.exe
PID 1528 wrote to memory of 2708	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\dsKWpKv.exe
PID 1528 wrote to memory of 1188	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\ekSZwQJ.exe
PID 1528 wrote to memory of 1188	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\ekSZwQJ.exe
PID 1528 wrote to memory of 660	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\MPQUHIX.exe
PID 1528 wrote to memory of 660	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\MPQUHIX.exe
PID 1528 wrote to memory of 2092	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\sFUshJf.exe
PID 1528 wrote to memory of 2092	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\sFUshJf.exe
PID 1528 wrote to memory of 3064	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\JaZUpGL.exe
PID 1528 wrote to memory of 3064	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\JaZUpGL.exe
PID 1528 wrote to memory of 1940	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\rqzVEUB.exe
PID 1528 wrote to memory of 1940	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\rqzVEUB.exe
PID 1528 wrote to memory of 732	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\obBaeTZ.exe
PID 1528 wrote to memory of 732	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\obBaeTZ.exe
PID 1528 wrote to memory of 3860	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\iPLTrbc.exe
PID 1528 wrote to memory of 3860	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\iPLTrbc.exe
PID 1528 wrote to memory of 5084	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\phehMIc.exe
PID 1528 wrote to memory of 5084	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\phehMIc.exe
PID 1528 wrote to memory of 2572	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\iHVfdnZ.exe
PID 1528 wrote to memory of 2572	N/A	C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe	C:\Windows\System\iHVfdnZ.exe

Processes

C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe

"C:\Users\Admin\AppData\Local\Temp\7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe"

C:\Windows\System\fFUxvFE.exe

C:\Windows\System\fFUxvFE.exe

C:\Windows\System\yBlYnfz.exe

C:\Windows\System\yBlYnfz.exe

C:\Windows\System\TzhXGFC.exe

C:\Windows\System\TzhXGFC.exe

C:\Windows\System\DcuazeJ.exe

C:\Windows\System\DcuazeJ.exe

C:\Windows\System\hhmJNvm.exe

C:\Windows\System\hhmJNvm.exe

C:\Windows\System\XxyGbky.exe

C:\Windows\System\XxyGbky.exe

C:\Windows\System\HWHhwZx.exe

C:\Windows\System\HWHhwZx.exe

C:\Windows\System\aCmPeip.exe

C:\Windows\System\aCmPeip.exe

C:\Windows\System\LEbilwU.exe

C:\Windows\System\LEbilwU.exe

C:\Windows\System\yjYsEDA.exe

C:\Windows\System\yjYsEDA.exe

C:\Windows\System\FIYJBdP.exe

C:\Windows\System\FIYJBdP.exe

C:\Windows\System\lCgcHve.exe

C:\Windows\System\lCgcHve.exe

C:\Windows\System\URLFYGw.exe

C:\Windows\System\URLFYGw.exe

C:\Windows\System\jJIHHsH.exe

C:\Windows\System\jJIHHsH.exe

C:\Windows\System\QtEJVZQ.exe

C:\Windows\System\QtEJVZQ.exe

C:\Windows\System\xuYpbrU.exe

C:\Windows\System\xuYpbrU.exe

C:\Windows\System\DIZzYwU.exe

C:\Windows\System\DIZzYwU.exe

C:\Windows\System\XnHYXTU.exe

C:\Windows\System\XnHYXTU.exe

C:\Windows\System\mHbemTs.exe

C:\Windows\System\mHbemTs.exe

C:\Windows\System\uTpCOJI.exe

C:\Windows\System\uTpCOJI.exe

C:\Windows\System\DKHRNTt.exe

C:\Windows\System\DKHRNTt.exe

C:\Windows\System\PHyFlel.exe

C:\Windows\System\PHyFlel.exe

C:\Windows\System\dsKWpKv.exe

C:\Windows\System\dsKWpKv.exe

C:\Windows\System\ekSZwQJ.exe

C:\Windows\System\ekSZwQJ.exe

C:\Windows\System\MPQUHIX.exe

C:\Windows\System\MPQUHIX.exe

C:\Windows\System\sFUshJf.exe

C:\Windows\System\sFUshJf.exe

C:\Windows\System\JaZUpGL.exe

C:\Windows\System\JaZUpGL.exe

C:\Windows\System\rqzVEUB.exe

C:\Windows\System\rqzVEUB.exe

C:\Windows\System\obBaeTZ.exe

C:\Windows\System\obBaeTZ.exe

C:\Windows\System\iPLTrbc.exe

C:\Windows\System\iPLTrbc.exe

C:\Windows\System\phehMIc.exe

C:\Windows\System\phehMIc.exe

C:\Windows\System\iHVfdnZ.exe

C:\Windows\System\iHVfdnZ.exe

C:\Windows\System\qcFfBXd.exe

C:\Windows\System\qcFfBXd.exe

C:\Windows\System\BkhYjIf.exe

C:\Windows\System\BkhYjIf.exe

C:\Windows\System\NhUhFGz.exe

C:\Windows\System\NhUhFGz.exe

C:\Windows\System\nKBqueP.exe

C:\Windows\System\nKBqueP.exe

C:\Windows\System\zBNNrih.exe

C:\Windows\System\zBNNrih.exe

C:\Windows\System\XoXTGKs.exe

C:\Windows\System\XoXTGKs.exe

C:\Windows\System\PQZaTDt.exe

C:\Windows\System\PQZaTDt.exe

C:\Windows\System\ICqrgyj.exe

C:\Windows\System\ICqrgyj.exe

C:\Windows\System\odprppn.exe

C:\Windows\System\odprppn.exe

C:\Windows\System\vaKmvbx.exe

C:\Windows\System\vaKmvbx.exe

C:\Windows\System\JrHRHaE.exe

C:\Windows\System\JrHRHaE.exe

C:\Windows\System\DQTfkgd.exe

C:\Windows\System\DQTfkgd.exe

C:\Windows\System\beyWiZJ.exe

C:\Windows\System\beyWiZJ.exe

C:\Windows\System\QwGQTnf.exe

C:\Windows\System\QwGQTnf.exe

C:\Windows\System\kLFUYss.exe

C:\Windows\System\kLFUYss.exe

C:\Windows\System\uIabZAW.exe

C:\Windows\System\uIabZAW.exe

C:\Windows\System\hDbaJMv.exe

C:\Windows\System\hDbaJMv.exe

C:\Windows\System\qgxBWRE.exe

C:\Windows\System\qgxBWRE.exe

C:\Windows\System\zvlCclb.exe

C:\Windows\System\zvlCclb.exe

C:\Windows\System\iODICLe.exe

C:\Windows\System\iODICLe.exe

C:\Windows\System\RxJiinX.exe

C:\Windows\System\RxJiinX.exe

C:\Windows\System\jGQyXam.exe

C:\Windows\System\jGQyXam.exe

C:\Windows\System\ZcatfPb.exe

C:\Windows\System\ZcatfPb.exe

C:\Windows\System\DmFRMci.exe

C:\Windows\System\DmFRMci.exe

C:\Windows\System\zgSOMDL.exe

C:\Windows\System\zgSOMDL.exe

C:\Windows\System\ADXfSBO.exe

C:\Windows\System\ADXfSBO.exe

C:\Windows\System\DbWRAAe.exe

C:\Windows\System\DbWRAAe.exe

C:\Windows\System\cIqBXcd.exe

C:\Windows\System\cIqBXcd.exe

C:\Windows\System\HKPQSOG.exe

C:\Windows\System\HKPQSOG.exe

C:\Windows\System\YcTMjyz.exe

C:\Windows\System\YcTMjyz.exe

C:\Windows\System\UDNAGQf.exe

C:\Windows\System\UDNAGQf.exe

C:\Windows\System\GMwaGyO.exe

C:\Windows\System\GMwaGyO.exe

C:\Windows\System\CblevNs.exe

C:\Windows\System\CblevNs.exe

C:\Windows\System\NNHjars.exe

C:\Windows\System\NNHjars.exe

C:\Windows\System\qTZiOgt.exe

C:\Windows\System\qTZiOgt.exe

C:\Windows\System\kEAAJiA.exe

C:\Windows\System\kEAAJiA.exe

C:\Windows\System\tIZtcdj.exe

C:\Windows\System\tIZtcdj.exe

C:\Windows\System\YAAdxNk.exe

C:\Windows\System\YAAdxNk.exe

C:\Windows\System\nFaMwUa.exe

C:\Windows\System\nFaMwUa.exe

C:\Windows\System\wgVaaWD.exe

C:\Windows\System\wgVaaWD.exe

C:\Windows\System\bPwHZsd.exe

C:\Windows\System\bPwHZsd.exe

C:\Windows\System\BvIbeMf.exe

C:\Windows\System\BvIbeMf.exe

C:\Windows\System\bNAejIs.exe

C:\Windows\System\bNAejIs.exe

C:\Windows\System\FyCHIsR.exe

C:\Windows\System\FyCHIsR.exe

C:\Windows\System\yoWJpCC.exe

C:\Windows\System\yoWJpCC.exe

C:\Windows\System\oYdFILC.exe

C:\Windows\System\oYdFILC.exe

C:\Windows\System\jTJasVx.exe

C:\Windows\System\jTJasVx.exe

C:\Windows\System\MvGETYS.exe

C:\Windows\System\MvGETYS.exe

C:\Windows\System\kbTPseT.exe

C:\Windows\System\kbTPseT.exe

C:\Windows\System\TJERJdH.exe

C:\Windows\System\TJERJdH.exe

C:\Windows\System\XTYWnTX.exe

C:\Windows\System\XTYWnTX.exe

C:\Windows\System\mTapjwQ.exe

C:\Windows\System\mTapjwQ.exe

C:\Windows\System\bOpqGCT.exe

C:\Windows\System\bOpqGCT.exe

C:\Windows\System\ivgGvsu.exe

C:\Windows\System\ivgGvsu.exe

C:\Windows\System\AJeIizZ.exe

C:\Windows\System\AJeIizZ.exe

C:\Windows\System\oXZLqic.exe

C:\Windows\System\oXZLqic.exe

C:\Windows\System\zJflUiL.exe

C:\Windows\System\zJflUiL.exe

C:\Windows\System\RoIzEuF.exe

C:\Windows\System\RoIzEuF.exe

C:\Windows\System\NCCRDIG.exe

C:\Windows\System\NCCRDIG.exe

C:\Windows\System\rnmIXcJ.exe

C:\Windows\System\rnmIXcJ.exe

C:\Windows\System\UMoNmdN.exe

C:\Windows\System\UMoNmdN.exe

C:\Windows\System\yJeRSYj.exe

C:\Windows\System\yJeRSYj.exe

C:\Windows\System\xdnwTNs.exe

C:\Windows\System\xdnwTNs.exe

C:\Windows\System\VwxfDhH.exe

C:\Windows\System\VwxfDhH.exe

C:\Windows\System\LWdXgMk.exe

C:\Windows\System\LWdXgMk.exe

C:\Windows\System\MqnLXyJ.exe

C:\Windows\System\MqnLXyJ.exe

C:\Windows\System\mGoIhfg.exe

C:\Windows\System\mGoIhfg.exe

C:\Windows\System\GLLnnfG.exe

C:\Windows\System\GLLnnfG.exe

C:\Windows\System\NfDNRXp.exe

C:\Windows\System\NfDNRXp.exe

C:\Windows\System\GkohcUz.exe

C:\Windows\System\GkohcUz.exe

C:\Windows\System\HhJikMM.exe

C:\Windows\System\HhJikMM.exe

C:\Windows\System\FsZBkwx.exe

C:\Windows\System\FsZBkwx.exe

C:\Windows\System\wnceCsO.exe

C:\Windows\System\wnceCsO.exe

C:\Windows\System\gdAnNMj.exe

C:\Windows\System\gdAnNMj.exe

C:\Windows\System\QAqrttw.exe

C:\Windows\System\QAqrttw.exe

C:\Windows\System\sKzzHNn.exe

C:\Windows\System\sKzzHNn.exe

C:\Windows\System\hyRZzjY.exe

C:\Windows\System\hyRZzjY.exe

C:\Windows\System\VmUTKRE.exe

C:\Windows\System\VmUTKRE.exe

C:\Windows\System\ByhPtdp.exe

C:\Windows\System\ByhPtdp.exe

C:\Windows\System\uXebQtH.exe

C:\Windows\System\uXebQtH.exe

C:\Windows\System\ZOYRkPG.exe

C:\Windows\System\ZOYRkPG.exe

C:\Windows\System\NUfyVJI.exe

C:\Windows\System\NUfyVJI.exe

C:\Windows\System\UImaKDa.exe

C:\Windows\System\UImaKDa.exe

C:\Windows\System\OazxiMy.exe

C:\Windows\System\OazxiMy.exe

C:\Windows\System\WcBJWmM.exe

C:\Windows\System\WcBJWmM.exe

C:\Windows\System\RCyGJFf.exe

C:\Windows\System\RCyGJFf.exe

C:\Windows\System\xkjIvYe.exe

C:\Windows\System\xkjIvYe.exe

C:\Windows\System\ZyHCzsy.exe

C:\Windows\System\ZyHCzsy.exe

C:\Windows\System\bEHALxZ.exe

C:\Windows\System\bEHALxZ.exe

C:\Windows\System\yZNUEqH.exe

C:\Windows\System\yZNUEqH.exe

C:\Windows\System\YTlvCqZ.exe

C:\Windows\System\YTlvCqZ.exe

C:\Windows\System\wXDBYbj.exe

C:\Windows\System\wXDBYbj.exe

C:\Windows\System\OshinuK.exe

C:\Windows\System\OshinuK.exe

C:\Windows\System\sUXWXnz.exe

C:\Windows\System\sUXWXnz.exe

C:\Windows\System\QvJWoLf.exe

C:\Windows\System\QvJWoLf.exe

C:\Windows\System\yQfQHoj.exe

C:\Windows\System\yQfQHoj.exe

C:\Windows\System\qCFKZwL.exe

C:\Windows\System\qCFKZwL.exe

C:\Windows\System\PkGZnTj.exe

C:\Windows\System\PkGZnTj.exe

C:\Windows\System\TyBgnYm.exe

C:\Windows\System\TyBgnYm.exe

C:\Windows\System\xNdwqJr.exe

C:\Windows\System\xNdwqJr.exe

C:\Windows\System\IFBrEST.exe

C:\Windows\System\IFBrEST.exe

C:\Windows\System\pYEKOQT.exe

C:\Windows\System\pYEKOQT.exe

C:\Windows\System\wZPMPNs.exe

C:\Windows\System\wZPMPNs.exe

C:\Windows\System\UYhAKhX.exe

C:\Windows\System\UYhAKhX.exe

C:\Windows\System\QIEXTra.exe

C:\Windows\System\QIEXTra.exe

C:\Windows\System\ABDlyaB.exe

C:\Windows\System\ABDlyaB.exe

C:\Windows\System\AFlSffA.exe

C:\Windows\System\AFlSffA.exe

C:\Windows\System\HJmQpoF.exe

C:\Windows\System\HJmQpoF.exe

C:\Windows\System\gGKcfSa.exe

C:\Windows\System\gGKcfSa.exe

C:\Windows\System\dUUlolF.exe

C:\Windows\System\dUUlolF.exe

C:\Windows\System\nXTMZsu.exe

C:\Windows\System\nXTMZsu.exe

C:\Windows\System\OCNesFq.exe

C:\Windows\System\OCNesFq.exe

C:\Windows\System\GzTBXnZ.exe

C:\Windows\System\GzTBXnZ.exe

C:\Windows\System\NRlTZDE.exe

C:\Windows\System\NRlTZDE.exe

C:\Windows\System\PhlpFzE.exe

C:\Windows\System\PhlpFzE.exe

C:\Windows\System\wXVpijA.exe

C:\Windows\System\wXVpijA.exe

C:\Windows\System\FErOVhf.exe

C:\Windows\System\FErOVhf.exe

C:\Windows\System\LkdedRU.exe

C:\Windows\System\LkdedRU.exe

C:\Windows\System\IMVcbCu.exe

C:\Windows\System\IMVcbCu.exe

C:\Windows\System\BhQkOYN.exe

C:\Windows\System\BhQkOYN.exe

C:\Windows\System\bXsIUUA.exe

C:\Windows\System\bXsIUUA.exe

C:\Windows\System\tprNlnB.exe

C:\Windows\System\tprNlnB.exe

C:\Windows\System\opahomM.exe

C:\Windows\System\opahomM.exe

C:\Windows\System\kpYsBPM.exe

C:\Windows\System\kpYsBPM.exe

C:\Windows\System\SfrrYHn.exe

C:\Windows\System\SfrrYHn.exe

C:\Windows\System\bnWwHdB.exe

C:\Windows\System\bnWwHdB.exe

C:\Windows\System\rxmVhmE.exe

C:\Windows\System\rxmVhmE.exe

C:\Windows\System\PAWLDHD.exe

C:\Windows\System\PAWLDHD.exe

C:\Windows\System\qOsKuNY.exe

C:\Windows\System\qOsKuNY.exe

C:\Windows\System\GPutUFi.exe

C:\Windows\System\GPutUFi.exe

C:\Windows\System\brYuXNy.exe

C:\Windows\System\brYuXNy.exe

C:\Windows\System\CMWWQXt.exe

C:\Windows\System\CMWWQXt.exe

C:\Windows\System\RQdOYJv.exe

C:\Windows\System\RQdOYJv.exe

C:\Windows\System\uUPVsgF.exe

C:\Windows\System\uUPVsgF.exe

C:\Windows\System\ALXjptI.exe

C:\Windows\System\ALXjptI.exe

C:\Windows\System\tWpsROy.exe

C:\Windows\System\tWpsROy.exe

C:\Windows\System\GuZmieZ.exe

C:\Windows\System\GuZmieZ.exe

C:\Windows\System\oTWrDKs.exe

C:\Windows\System\oTWrDKs.exe

C:\Windows\System\azRCXQu.exe

C:\Windows\System\azRCXQu.exe

C:\Windows\System\bgEJBAV.exe

C:\Windows\System\bgEJBAV.exe

C:\Windows\System\SZtFKmR.exe

C:\Windows\System\SZtFKmR.exe

C:\Windows\System\QIYszil.exe

C:\Windows\System\QIYszil.exe

C:\Windows\System\PazhmRS.exe

C:\Windows\System\PazhmRS.exe

C:\Windows\System\meXnUXi.exe

C:\Windows\System\meXnUXi.exe

C:\Windows\System\yHYtXRU.exe

C:\Windows\System\yHYtXRU.exe

C:\Windows\System\wugnhhe.exe

C:\Windows\System\wugnhhe.exe

C:\Windows\System\zYzxsZo.exe

C:\Windows\System\zYzxsZo.exe

C:\Windows\System\GyVstMW.exe

C:\Windows\System\GyVstMW.exe

C:\Windows\System\qRhrftL.exe

C:\Windows\System\qRhrftL.exe

C:\Windows\System\QIScmbt.exe

C:\Windows\System\QIScmbt.exe

C:\Windows\System\SAPVRLa.exe

C:\Windows\System\SAPVRLa.exe

C:\Windows\System\BRuzQIo.exe

C:\Windows\System\BRuzQIo.exe

C:\Windows\System\AJFsBWE.exe

C:\Windows\System\AJFsBWE.exe

C:\Windows\System\EFzkbMi.exe

C:\Windows\System\EFzkbMi.exe

C:\Windows\System\kRTlZId.exe

C:\Windows\System\kRTlZId.exe

C:\Windows\System\SIVWwtR.exe

C:\Windows\System\SIVWwtR.exe

C:\Windows\System\YhANJHF.exe

C:\Windows\System\YhANJHF.exe

C:\Windows\System\iVweSOQ.exe

C:\Windows\System\iVweSOQ.exe

C:\Windows\System\AwvOCVj.exe

C:\Windows\System\AwvOCVj.exe

C:\Windows\System\uXyadzD.exe

C:\Windows\System\uXyadzD.exe

C:\Windows\System\HhfDbuf.exe

C:\Windows\System\HhfDbuf.exe

C:\Windows\System\kKoDAAE.exe

C:\Windows\System\kKoDAAE.exe

C:\Windows\System\fQZqJUy.exe

C:\Windows\System\fQZqJUy.exe

C:\Windows\System\sjYxmWe.exe

C:\Windows\System\sjYxmWe.exe

C:\Windows\System\aGhGxxU.exe

C:\Windows\System\aGhGxxU.exe

C:\Windows\System\twWBCBe.exe

C:\Windows\System\twWBCBe.exe

C:\Windows\System\GlxatER.exe

C:\Windows\System\GlxatER.exe

C:\Windows\System\UOZKsCY.exe

C:\Windows\System\UOZKsCY.exe

C:\Windows\System\CZqEFIj.exe

C:\Windows\System\CZqEFIj.exe

C:\Windows\System\ZmjjDdQ.exe

C:\Windows\System\ZmjjDdQ.exe

C:\Windows\System\swuesix.exe

C:\Windows\System\swuesix.exe

C:\Windows\System\miQnNHp.exe

C:\Windows\System\miQnNHp.exe

C:\Windows\System\NaerbDR.exe

C:\Windows\System\NaerbDR.exe

C:\Windows\System\cxhSflM.exe

C:\Windows\System\cxhSflM.exe

C:\Windows\System\cPokNJj.exe

C:\Windows\System\cPokNJj.exe

C:\Windows\System\DPsHPXf.exe

C:\Windows\System\DPsHPXf.exe

C:\Windows\System\xMqpBOw.exe

C:\Windows\System\xMqpBOw.exe

C:\Windows\System\QdTTySi.exe

C:\Windows\System\QdTTySi.exe

C:\Windows\System\WeWwUPr.exe

C:\Windows\System\WeWwUPr.exe

C:\Windows\System\bzmeVsA.exe

C:\Windows\System\bzmeVsA.exe

C:\Windows\System\zhdvBEl.exe

C:\Windows\System\zhdvBEl.exe

C:\Windows\System\YWcmCUe.exe

C:\Windows\System\YWcmCUe.exe

C:\Windows\System\dudtztE.exe

C:\Windows\System\dudtztE.exe

C:\Windows\System\qlHJrWY.exe

C:\Windows\System\qlHJrWY.exe

C:\Windows\System\EKMMILV.exe

C:\Windows\System\EKMMILV.exe

C:\Windows\System\NhboWJP.exe

C:\Windows\System\NhboWJP.exe

C:\Windows\System\leztZpM.exe

C:\Windows\System\leztZpM.exe

C:\Windows\System\HMsujUw.exe

C:\Windows\System\HMsujUw.exe

C:\Windows\System\IthNmWv.exe

C:\Windows\System\IthNmWv.exe

C:\Windows\System\BKxlgXo.exe

C:\Windows\System\BKxlgXo.exe

C:\Windows\System\nKXMqgs.exe

C:\Windows\System\nKXMqgs.exe

C:\Windows\System\oeaesuJ.exe

C:\Windows\System\oeaesuJ.exe

C:\Windows\System\RZdRnQs.exe

C:\Windows\System\RZdRnQs.exe

C:\Windows\System\yKwTaQg.exe

C:\Windows\System\yKwTaQg.exe

C:\Windows\System\HRMwtki.exe

C:\Windows\System\HRMwtki.exe

C:\Windows\System\rKYZPSx.exe

C:\Windows\System\rKYZPSx.exe

C:\Windows\System\RrHqowo.exe

C:\Windows\System\RrHqowo.exe

C:\Windows\System\sQpekLQ.exe

C:\Windows\System\sQpekLQ.exe

C:\Windows\System\XqTepvc.exe

C:\Windows\System\XqTepvc.exe

C:\Windows\System\cZZhDNB.exe

C:\Windows\System\cZZhDNB.exe

C:\Windows\System\kBQQpnT.exe

C:\Windows\System\kBQQpnT.exe

C:\Windows\System\vnnfHBn.exe

C:\Windows\System\vnnfHBn.exe

C:\Windows\System\kBIDqVH.exe

C:\Windows\System\kBIDqVH.exe

C:\Windows\System\CnvRHSW.exe

C:\Windows\System\CnvRHSW.exe

C:\Windows\System\XThsWZt.exe

C:\Windows\System\XThsWZt.exe

C:\Windows\System\bTPacGO.exe

C:\Windows\System\bTPacGO.exe

C:\Windows\System\jGnnuHT.exe

C:\Windows\System\jGnnuHT.exe

C:\Windows\System\xDzXJBj.exe

C:\Windows\System\xDzXJBj.exe

C:\Windows\System\kQJXNeb.exe

C:\Windows\System\kQJXNeb.exe

C:\Windows\System\RCWsDCq.exe

C:\Windows\System\RCWsDCq.exe

C:\Windows\System\aTlEYwA.exe

C:\Windows\System\aTlEYwA.exe

C:\Windows\System\ITFoPfu.exe

C:\Windows\System\ITFoPfu.exe

C:\Windows\System\KJVZdJk.exe

C:\Windows\System\KJVZdJk.exe

C:\Windows\System\fugYvgL.exe

C:\Windows\System\fugYvgL.exe

C:\Windows\System\vtMvrcm.exe

C:\Windows\System\vtMvrcm.exe

C:\Windows\System\hCxUxBp.exe

C:\Windows\System\hCxUxBp.exe

C:\Windows\System\RKdxqlX.exe

C:\Windows\System\RKdxqlX.exe

C:\Windows\System\kEtkGCs.exe

C:\Windows\System\kEtkGCs.exe

C:\Windows\System\bxibIXY.exe

C:\Windows\System\bxibIXY.exe

C:\Windows\System\lhuVrpf.exe

C:\Windows\System\lhuVrpf.exe

C:\Windows\System\ZUHKAIy.exe

C:\Windows\System\ZUHKAIy.exe

C:\Windows\System\hioMdgV.exe

C:\Windows\System\hioMdgV.exe

C:\Windows\System\GtfnTVv.exe

C:\Windows\System\GtfnTVv.exe

C:\Windows\System\MVgYsaA.exe

C:\Windows\System\MVgYsaA.exe

C:\Windows\System\xyblkSe.exe

C:\Windows\System\xyblkSe.exe

C:\Windows\System\ouXZbxI.exe

C:\Windows\System\ouXZbxI.exe

C:\Windows\System\XoOYMlf.exe

C:\Windows\System\XoOYMlf.exe

C:\Windows\System\stRohvN.exe

C:\Windows\System\stRohvN.exe

C:\Windows\System\TsxgIIT.exe

C:\Windows\System\TsxgIIT.exe

C:\Windows\System\tNjJpCk.exe

C:\Windows\System\tNjJpCk.exe

C:\Windows\System\FTaKzGX.exe

C:\Windows\System\FTaKzGX.exe

C:\Windows\System\vHdgbbU.exe

C:\Windows\System\vHdgbbU.exe

C:\Windows\System\JCWqaEf.exe

C:\Windows\System\JCWqaEf.exe

C:\Windows\System\iCnpRwm.exe

C:\Windows\System\iCnpRwm.exe

C:\Windows\System\nhXNCzc.exe

C:\Windows\System\nhXNCzc.exe

C:\Windows\System\inhTfct.exe

C:\Windows\System\inhTfct.exe

C:\Windows\System\FhiiDUR.exe

C:\Windows\System\FhiiDUR.exe

C:\Windows\System\wCRptsv.exe

C:\Windows\System\wCRptsv.exe

C:\Windows\System\uXzSNtU.exe

C:\Windows\System\uXzSNtU.exe

C:\Windows\System\bwmNfVr.exe

C:\Windows\System\bwmNfVr.exe

C:\Windows\System\xlKOLgu.exe

C:\Windows\System\xlKOLgu.exe

C:\Windows\System\lbAAYmb.exe

C:\Windows\System\lbAAYmb.exe

C:\Windows\System\oiTzJwE.exe

C:\Windows\System\oiTzJwE.exe

C:\Windows\System\ztOhPMQ.exe

C:\Windows\System\ztOhPMQ.exe

C:\Windows\System\EAfmpYl.exe

C:\Windows\System\EAfmpYl.exe

C:\Windows\System\eUVRJio.exe

C:\Windows\System\eUVRJio.exe

C:\Windows\System\ESwoziC.exe

C:\Windows\System\ESwoziC.exe

C:\Windows\System\ZsGdpyp.exe

C:\Windows\System\ZsGdpyp.exe

C:\Windows\System\TGFWGeG.exe

C:\Windows\System\TGFWGeG.exe

C:\Windows\System\HgfZEHQ.exe

C:\Windows\System\HgfZEHQ.exe

C:\Windows\System\aqkAvEi.exe

C:\Windows\System\aqkAvEi.exe

C:\Windows\System\ObuuvEs.exe

C:\Windows\System\ObuuvEs.exe

C:\Windows\System\AikrCFh.exe

C:\Windows\System\AikrCFh.exe

C:\Windows\System\hRiLYFE.exe

C:\Windows\System\hRiLYFE.exe

C:\Windows\System\XAXcXOA.exe

C:\Windows\System\XAXcXOA.exe

C:\Windows\System\oPTKmeO.exe

C:\Windows\System\oPTKmeO.exe

C:\Windows\System\CuMPstn.exe

C:\Windows\System\CuMPstn.exe

C:\Windows\System\qHfwyrQ.exe

C:\Windows\System\qHfwyrQ.exe

C:\Windows\System\mzVGdLh.exe

C:\Windows\System\mzVGdLh.exe

C:\Windows\System\pgATaYo.exe

C:\Windows\System\pgATaYo.exe

C:\Windows\System\UBZmtPi.exe

C:\Windows\System\UBZmtPi.exe

C:\Windows\System\bmsVqND.exe

C:\Windows\System\bmsVqND.exe

C:\Windows\System\nOlCItk.exe

C:\Windows\System\nOlCItk.exe

C:\Windows\System\PoZHSRe.exe

C:\Windows\System\PoZHSRe.exe

C:\Windows\System\MBNzsOe.exe

C:\Windows\System\MBNzsOe.exe

C:\Windows\System\hXFGTJk.exe

C:\Windows\System\hXFGTJk.exe

C:\Windows\System\BBTYzxt.exe

C:\Windows\System\BBTYzxt.exe

C:\Windows\System\zKhGrKc.exe

C:\Windows\System\zKhGrKc.exe

C:\Windows\System\uvdqXsi.exe

C:\Windows\System\uvdqXsi.exe

C:\Windows\System\knPeMUv.exe

C:\Windows\System\knPeMUv.exe

C:\Windows\System\XTdopgA.exe

C:\Windows\System\XTdopgA.exe

C:\Windows\System\rqAOLIN.exe

C:\Windows\System\rqAOLIN.exe

C:\Windows\System\GNdPalC.exe

C:\Windows\System\GNdPalC.exe

C:\Windows\System\mabIVso.exe

C:\Windows\System\mabIVso.exe

C:\Windows\System\kUuSZQe.exe

C:\Windows\System\kUuSZQe.exe

C:\Windows\System\ylMSdQr.exe

C:\Windows\System\ylMSdQr.exe

C:\Windows\System\kctrJSb.exe

C:\Windows\System\kctrJSb.exe

C:\Windows\System\MwopWfB.exe

C:\Windows\System\MwopWfB.exe

C:\Windows\System\WvQzPEp.exe

C:\Windows\System\WvQzPEp.exe

C:\Windows\System\JmQYoDT.exe

C:\Windows\System\JmQYoDT.exe

C:\Windows\System\cMUUeba.exe

C:\Windows\System\cMUUeba.exe

C:\Windows\System\geHvncP.exe

C:\Windows\System\geHvncP.exe

C:\Windows\System\yoxspjO.exe

C:\Windows\System\yoxspjO.exe

C:\Windows\System\hmNRdUJ.exe

C:\Windows\System\hmNRdUJ.exe

C:\Windows\System\lSKYcKZ.exe

C:\Windows\System\lSKYcKZ.exe

C:\Windows\System\RAzfWFb.exe

C:\Windows\System\RAzfWFb.exe

C:\Windows\System\NPGODAv.exe

C:\Windows\System\NPGODAv.exe

C:\Windows\System\yhjdFqP.exe

C:\Windows\System\yhjdFqP.exe

C:\Windows\System\gCxqLBG.exe

C:\Windows\System\gCxqLBG.exe

C:\Windows\System\wJuePzV.exe

C:\Windows\System\wJuePzV.exe

C:\Windows\System\luaCIff.exe

C:\Windows\System\luaCIff.exe

C:\Windows\System\FMwATpw.exe

C:\Windows\System\FMwATpw.exe

C:\Windows\System\fuONnLh.exe

C:\Windows\System\fuONnLh.exe

C:\Windows\System\aTpbzAH.exe

C:\Windows\System\aTpbzAH.exe

C:\Windows\System\NcZrbTR.exe

C:\Windows\System\NcZrbTR.exe

C:\Windows\System\MjpdLFu.exe

C:\Windows\System\MjpdLFu.exe

C:\Windows\System\JoIqOaR.exe

C:\Windows\System\JoIqOaR.exe

C:\Windows\System\tRTzFIi.exe

C:\Windows\System\tRTzFIi.exe

C:\Windows\System\ZRQslQq.exe

C:\Windows\System\ZRQslQq.exe

C:\Windows\System\sgPRxwN.exe

C:\Windows\System\sgPRxwN.exe

C:\Windows\System\geaUcOc.exe

C:\Windows\System\geaUcOc.exe

C:\Windows\System\OwSqPJO.exe

C:\Windows\System\OwSqPJO.exe

C:\Windows\System\NssRIrR.exe

C:\Windows\System\NssRIrR.exe

C:\Windows\System\TrxanJl.exe

C:\Windows\System\TrxanJl.exe

C:\Windows\System\XntcHMN.exe

C:\Windows\System\XntcHMN.exe

C:\Windows\System\VvmwDqm.exe

C:\Windows\System\VvmwDqm.exe

C:\Windows\System\FIZliqj.exe

C:\Windows\System\FIZliqj.exe

C:\Windows\System\wbvWQmN.exe

C:\Windows\System\wbvWQmN.exe

C:\Windows\System\FqyebhX.exe

C:\Windows\System\FqyebhX.exe

C:\Windows\System\eKkhISy.exe

C:\Windows\System\eKkhISy.exe

C:\Windows\System\PiUVllA.exe

C:\Windows\System\PiUVllA.exe

C:\Windows\System\MNdlMSd.exe

C:\Windows\System\MNdlMSd.exe

C:\Windows\System\eKReIfn.exe

C:\Windows\System\eKReIfn.exe

C:\Windows\System\EdfLkmm.exe

C:\Windows\System\EdfLkmm.exe

C:\Windows\System\SASrHMq.exe

C:\Windows\System\SASrHMq.exe

C:\Windows\System\jfOPPuE.exe

C:\Windows\System\jfOPPuE.exe

C:\Windows\System\ghfgLVl.exe

C:\Windows\System\ghfgLVl.exe

C:\Windows\System\xZZjztz.exe

C:\Windows\System\xZZjztz.exe

C:\Windows\System\keNhKOg.exe

C:\Windows\System\keNhKOg.exe

C:\Windows\System\PPcgdOE.exe

C:\Windows\System\PPcgdOE.exe

C:\Windows\System\ArhSHmv.exe

C:\Windows\System\ArhSHmv.exe

C:\Windows\System\dvmtaYf.exe

C:\Windows\System\dvmtaYf.exe

C:\Windows\System\YDRLSzO.exe

C:\Windows\System\YDRLSzO.exe

C:\Windows\System\xLaSUwn.exe

C:\Windows\System\xLaSUwn.exe

C:\Windows\System\eibJHrD.exe

C:\Windows\System\eibJHrD.exe

C:\Windows\System\vYCioBC.exe

C:\Windows\System\vYCioBC.exe

C:\Windows\System\DKpEixY.exe

C:\Windows\System\DKpEixY.exe

C:\Windows\System\sJNonZx.exe

C:\Windows\System\sJNonZx.exe

C:\Windows\System\wtkURsq.exe

C:\Windows\System\wtkURsq.exe

C:\Windows\System\OwkeRFX.exe

C:\Windows\System\OwkeRFX.exe

C:\Windows\System\YwCVRSK.exe

C:\Windows\System\YwCVRSK.exe

C:\Windows\System\JCIYuhL.exe

C:\Windows\System\JCIYuhL.exe

C:\Windows\System\ZilUVZq.exe

C:\Windows\System\ZilUVZq.exe

C:\Windows\System\OPKcvVQ.exe

C:\Windows\System\OPKcvVQ.exe

C:\Windows\System\xEpmUYu.exe

C:\Windows\System\xEpmUYu.exe

C:\Windows\System\YYVwrnT.exe

C:\Windows\System\YYVwrnT.exe

C:\Windows\System\vwWRePN.exe

C:\Windows\System\vwWRePN.exe

C:\Windows\System\eIxAdTc.exe

C:\Windows\System\eIxAdTc.exe

C:\Windows\System\tnbIfMa.exe

C:\Windows\System\tnbIfMa.exe

C:\Windows\System\KXUONrz.exe

C:\Windows\System\KXUONrz.exe

C:\Windows\System\mCFQxjU.exe

C:\Windows\System\mCFQxjU.exe

C:\Windows\System\jPWQlBv.exe

C:\Windows\System\jPWQlBv.exe

C:\Windows\System\nZRxPbF.exe

C:\Windows\System\nZRxPbF.exe

C:\Windows\System\TFHUDdY.exe

C:\Windows\System\TFHUDdY.exe

C:\Windows\System\MTBwhzF.exe

C:\Windows\System\MTBwhzF.exe

C:\Windows\System\TnFrhUx.exe

C:\Windows\System\TnFrhUx.exe

C:\Windows\System\jSNBzER.exe

C:\Windows\System\jSNBzER.exe

C:\Windows\System\CQKHaar.exe

C:\Windows\System\CQKHaar.exe

C:\Windows\System\pyphlAT.exe

C:\Windows\System\pyphlAT.exe

C:\Windows\System\OSLEngk.exe

C:\Windows\System\OSLEngk.exe

C:\Windows\System\pJLeCNb.exe

C:\Windows\System\pJLeCNb.exe

C:\Windows\System\PAexWfd.exe

C:\Windows\System\PAexWfd.exe

C:\Windows\System\oQtfqni.exe

C:\Windows\System\oQtfqni.exe

C:\Windows\System\fuAzYuV.exe

C:\Windows\System\fuAzYuV.exe

C:\Windows\System\XoKfmZh.exe

C:\Windows\System\XoKfmZh.exe

C:\Windows\System\XvVqYbI.exe

C:\Windows\System\XvVqYbI.exe

C:\Windows\System\bimPYgZ.exe

C:\Windows\System\bimPYgZ.exe

C:\Windows\System\EZCKpWK.exe

C:\Windows\System\EZCKpWK.exe

C:\Windows\System\WLrGHfb.exe

C:\Windows\System\WLrGHfb.exe

C:\Windows\System\xWZKcYm.exe

C:\Windows\System\xWZKcYm.exe

C:\Windows\System\KnIYhHC.exe

C:\Windows\System\KnIYhHC.exe

C:\Windows\System\EODYlgE.exe

C:\Windows\System\EODYlgE.exe

C:\Windows\System\bvtDGFS.exe

C:\Windows\System\bvtDGFS.exe

C:\Windows\System\mHcYKaF.exe

C:\Windows\System\mHcYKaF.exe

C:\Windows\System\uimWTcR.exe

C:\Windows\System\uimWTcR.exe

C:\Windows\System\EbKITRV.exe

C:\Windows\System\EbKITRV.exe

C:\Windows\System\duvSxUC.exe

C:\Windows\System\duvSxUC.exe

C:\Windows\System\KAsqVUJ.exe

C:\Windows\System\KAsqVUJ.exe

C:\Windows\System\uWlMXMw.exe

C:\Windows\System\uWlMXMw.exe

C:\Windows\System\cfogTfT.exe

C:\Windows\System\cfogTfT.exe

C:\Windows\System\OVGHJcg.exe

C:\Windows\System\OVGHJcg.exe

C:\Windows\System\zVHJkDR.exe

C:\Windows\System\zVHJkDR.exe

C:\Windows\System\wDEFeyn.exe

C:\Windows\System\wDEFeyn.exe

C:\Windows\System\jmtTfqk.exe

C:\Windows\System\jmtTfqk.exe

C:\Windows\System\sSvvmzm.exe

C:\Windows\System\sSvvmzm.exe

C:\Windows\System\WWYZJmn.exe

C:\Windows\System\WWYZJmn.exe

C:\Windows\System\qvrTNPU.exe

C:\Windows\System\qvrTNPU.exe

C:\Windows\System\dgrgkSf.exe

C:\Windows\System\dgrgkSf.exe

C:\Windows\System\FVvSflR.exe

C:\Windows\System\FVvSflR.exe

C:\Windows\System\kjsSCrx.exe

C:\Windows\System\kjsSCrx.exe

C:\Windows\System\LCjdkif.exe

C:\Windows\System\LCjdkif.exe

C:\Windows\System\vmnJaUO.exe

C:\Windows\System\vmnJaUO.exe

C:\Windows\System\DZgNxpQ.exe

C:\Windows\System\DZgNxpQ.exe

C:\Windows\System\GFdHxPF.exe

C:\Windows\System\GFdHxPF.exe

C:\Windows\System\qdsiOEv.exe

C:\Windows\System\qdsiOEv.exe

C:\Windows\System\kOheghQ.exe

C:\Windows\System\kOheghQ.exe

C:\Windows\System\dlWYYAU.exe

C:\Windows\System\dlWYYAU.exe

C:\Windows\System\GPTHdKD.exe

C:\Windows\System\GPTHdKD.exe

C:\Windows\System\nJipmMG.exe

C:\Windows\System\nJipmMG.exe

C:\Windows\System\XueMxIZ.exe

C:\Windows\System\XueMxIZ.exe

C:\Windows\System\ZzzwjYw.exe

C:\Windows\System\ZzzwjYw.exe

C:\Windows\System\NRNsMxy.exe

C:\Windows\System\NRNsMxy.exe

C:\Windows\System\CKVriAp.exe

C:\Windows\System\CKVriAp.exe

C:\Windows\System\TpKdUGE.exe

C:\Windows\System\TpKdUGE.exe

C:\Windows\System\zatyoQx.exe

C:\Windows\System\zatyoQx.exe

C:\Windows\System\IjatNLp.exe

C:\Windows\System\IjatNLp.exe

C:\Windows\System\mrdGwtg.exe

C:\Windows\System\mrdGwtg.exe

C:\Windows\System\RwDHVkd.exe

C:\Windows\System\RwDHVkd.exe

C:\Windows\System\USTmlHf.exe

C:\Windows\System\USTmlHf.exe

C:\Windows\System\ItanLHS.exe

C:\Windows\System\ItanLHS.exe

C:\Windows\System\QLGAmvc.exe

C:\Windows\System\QLGAmvc.exe

C:\Windows\System\dQHIumy.exe

C:\Windows\System\dQHIumy.exe

C:\Windows\System\deVyLIx.exe

C:\Windows\System\deVyLIx.exe

C:\Windows\System\zaHvtqU.exe

C:\Windows\System\zaHvtqU.exe

C:\Windows\System\PKKdfYI.exe

C:\Windows\System\PKKdfYI.exe

C:\Windows\System\GbapuZt.exe

C:\Windows\System\GbapuZt.exe

C:\Windows\System\kodgiZq.exe

C:\Windows\System\kodgiZq.exe

C:\Windows\System\grPAccW.exe

C:\Windows\System\grPAccW.exe

C:\Windows\System\NGbmcWI.exe

C:\Windows\System\NGbmcWI.exe

C:\Windows\System\qWvRNcs.exe

C:\Windows\System\qWvRNcs.exe

C:\Windows\System\gucNCRS.exe

C:\Windows\System\gucNCRS.exe

C:\Windows\System\EzaHLXN.exe

C:\Windows\System\EzaHLXN.exe

C:\Windows\System\DFwVkvO.exe

C:\Windows\System\DFwVkvO.exe

C:\Windows\System\oVdnzDN.exe

C:\Windows\System\oVdnzDN.exe

C:\Windows\System\OFRwchI.exe

C:\Windows\System\OFRwchI.exe

C:\Windows\System\blFppMN.exe

C:\Windows\System\blFppMN.exe

C:\Windows\System\KOvrVjG.exe

C:\Windows\System\KOvrVjG.exe

C:\Windows\System\MfbbqNf.exe

C:\Windows\System\MfbbqNf.exe

C:\Windows\System\UYPHwEd.exe

C:\Windows\System\UYPHwEd.exe

C:\Windows\System\mLUuJvc.exe

C:\Windows\System\mLUuJvc.exe

C:\Windows\System\aATruQD.exe

C:\Windows\System\aATruQD.exe

C:\Windows\System\wMZfFiu.exe

C:\Windows\System\wMZfFiu.exe

C:\Windows\System\JaSfihp.exe

C:\Windows\System\JaSfihp.exe

C:\Windows\System\CnGPSbR.exe

C:\Windows\System\CnGPSbR.exe

C:\Windows\System\UqjsHHn.exe

C:\Windows\System\UqjsHHn.exe

C:\Windows\System\WGjsWdh.exe

C:\Windows\System\WGjsWdh.exe

C:\Windows\System\rAHazjE.exe

C:\Windows\System\rAHazjE.exe

C:\Windows\System\yuruGPK.exe

C:\Windows\System\yuruGPK.exe

C:\Windows\System\DtOojEc.exe

C:\Windows\System\DtOojEc.exe

C:\Windows\System\rCcQvMx.exe

C:\Windows\System\rCcQvMx.exe

C:\Windows\System\uIhlyYE.exe

C:\Windows\System\uIhlyYE.exe

C:\Windows\System\jIzuUJY.exe

C:\Windows\System\jIzuUJY.exe

C:\Windows\System\NFEaGFf.exe

C:\Windows\System\NFEaGFf.exe

C:\Windows\System\ToaXUEf.exe

C:\Windows\System\ToaXUEf.exe

C:\Windows\System\aNItdgk.exe

C:\Windows\System\aNItdgk.exe

C:\Windows\System\WZtpALC.exe

C:\Windows\System\WZtpALC.exe

C:\Windows\System\qyrAPVS.exe

C:\Windows\System\qyrAPVS.exe

C:\Windows\System\YmNCcDe.exe

C:\Windows\System\YmNCcDe.exe

C:\Windows\System\yLYHDgk.exe

C:\Windows\System\yLYHDgk.exe

C:\Windows\System\mgbQacb.exe

C:\Windows\System\mgbQacb.exe

C:\Windows\System\QtPGNVR.exe

C:\Windows\System\QtPGNVR.exe

C:\Windows\System\lbYQeSS.exe

C:\Windows\System\lbYQeSS.exe

C:\Windows\System\YVAIRiN.exe

C:\Windows\System\YVAIRiN.exe

C:\Windows\System\LYkOcDR.exe

C:\Windows\System\LYkOcDR.exe

C:\Windows\System\ZjmKDrv.exe

C:\Windows\System\ZjmKDrv.exe

C:\Windows\System\lLywvlq.exe

C:\Windows\System\lLywvlq.exe

C:\Windows\System\ShOaOGF.exe

C:\Windows\System\ShOaOGF.exe

C:\Windows\System\DZOVypo.exe

C:\Windows\System\DZOVypo.exe

C:\Windows\System\XDSRTKH.exe

C:\Windows\System\XDSRTKH.exe

C:\Windows\System\BUwuOym.exe

C:\Windows\System\BUwuOym.exe

C:\Windows\System\iHagjNB.exe

C:\Windows\System\iHagjNB.exe

C:\Windows\System\PYlOZUm.exe

C:\Windows\System\PYlOZUm.exe

C:\Windows\System\rzpPnpH.exe

C:\Windows\System\rzpPnpH.exe

C:\Windows\System\qegghpA.exe

C:\Windows\System\qegghpA.exe

C:\Windows\System\EEvNnpk.exe

C:\Windows\System\EEvNnpk.exe

C:\Windows\System\MLqZLby.exe

C:\Windows\System\MLqZLby.exe

C:\Windows\System\hoojSDw.exe

C:\Windows\System\hoojSDw.exe

C:\Windows\System\iMgLATP.exe

C:\Windows\System\iMgLATP.exe

C:\Windows\System\BatqgDG.exe

C:\Windows\System\BatqgDG.exe

C:\Windows\System\QgOHbnX.exe

C:\Windows\System\QgOHbnX.exe

C:\Windows\System\XvuXcPc.exe

C:\Windows\System\XvuXcPc.exe

C:\Windows\System\Niisiur.exe

C:\Windows\System\Niisiur.exe

C:\Windows\System\IJEbRIB.exe

C:\Windows\System\IJEbRIB.exe

C:\Windows\System\kFvJlIj.exe

C:\Windows\System\kFvJlIj.exe

C:\Windows\System\KqYsImL.exe

C:\Windows\System\KqYsImL.exe

C:\Windows\System\nflXsqm.exe

C:\Windows\System\nflXsqm.exe

C:\Windows\System\svXrXex.exe

C:\Windows\System\svXrXex.exe

C:\Windows\System\phEesPg.exe

C:\Windows\System\phEesPg.exe

C:\Windows\System\XwTiCHZ.exe

C:\Windows\System\XwTiCHZ.exe

C:\Windows\System\iPVrjkH.exe

C:\Windows\System\iPVrjkH.exe

C:\Windows\System\WsvJdJu.exe

C:\Windows\System\WsvJdJu.exe

C:\Windows\System\VbevagL.exe

C:\Windows\System\VbevagL.exe

C:\Windows\System\nSUuNgE.exe

C:\Windows\System\nSUuNgE.exe

C:\Windows\System\TQBYdIu.exe

C:\Windows\System\TQBYdIu.exe

C:\Windows\System\ERgtbai.exe

C:\Windows\System\ERgtbai.exe

C:\Windows\System\UiLkWaw.exe

C:\Windows\System\UiLkWaw.exe

C:\Windows\System\lXoSDPX.exe

C:\Windows\System\lXoSDPX.exe

C:\Windows\System\HZJTSPn.exe

C:\Windows\System\HZJTSPn.exe

C:\Windows\System\ktSoFMM.exe

C:\Windows\System\ktSoFMM.exe

C:\Windows\System\mNcBBKb.exe

C:\Windows\System\mNcBBKb.exe

C:\Windows\System\gNoUKua.exe

C:\Windows\System\gNoUKua.exe

C:\Windows\System\VhHjFdP.exe

C:\Windows\System\VhHjFdP.exe

C:\Windows\System\sKkXATr.exe

C:\Windows\System\sKkXATr.exe

C:\Windows\System\yElztFf.exe

C:\Windows\System\yElztFf.exe

C:\Windows\System\rSPoteb.exe

C:\Windows\System\rSPoteb.exe

C:\Windows\System\NjGWRBN.exe

C:\Windows\System\NjGWRBN.exe

C:\Windows\System\MCfpgGQ.exe

C:\Windows\System\MCfpgGQ.exe

C:\Windows\System\tOyDFmV.exe

C:\Windows\System\tOyDFmV.exe

C:\Windows\System\gyTxtpc.exe

C:\Windows\System\gyTxtpc.exe

C:\Windows\System\XEcFdvn.exe

C:\Windows\System\XEcFdvn.exe

C:\Windows\System\TUUUuaE.exe

C:\Windows\System\TUUUuaE.exe

C:\Windows\System\ixMAKzK.exe

C:\Windows\System\ixMAKzK.exe

C:\Windows\System\LyXtUXN.exe

C:\Windows\System\LyXtUXN.exe

C:\Windows\System\IqouKtI.exe

C:\Windows\System\IqouKtI.exe

C:\Windows\System\pnIxqmd.exe

C:\Windows\System\pnIxqmd.exe

C:\Windows\System\svvWJqA.exe

C:\Windows\System\svvWJqA.exe

C:\Windows\System\CRdOQeC.exe

C:\Windows\System\CRdOQeC.exe

C:\Windows\System\xtoebeU.exe

C:\Windows\System\xtoebeU.exe

C:\Windows\System\kzmeCPh.exe

C:\Windows\System\kzmeCPh.exe

C:\Windows\System\XExmOJP.exe

C:\Windows\System\XExmOJP.exe

C:\Windows\System\UQJmAvW.exe

C:\Windows\System\UQJmAvW.exe

C:\Windows\System\zXKTMIY.exe

C:\Windows\System\zXKTMIY.exe

C:\Windows\System\thPFPLH.exe

C:\Windows\System\thPFPLH.exe

C:\Windows\System\HGnrFRk.exe

C:\Windows\System\HGnrFRk.exe

C:\Windows\System\HPROkmr.exe

C:\Windows\System\HPROkmr.exe

C:\Windows\System\wEkstju.exe

C:\Windows\System\wEkstju.exe

C:\Windows\System\ZnOycck.exe

C:\Windows\System\ZnOycck.exe

C:\Windows\System\PyrElSO.exe

C:\Windows\System\PyrElSO.exe

C:\Windows\System\CaFaQBG.exe

C:\Windows\System\CaFaQBG.exe

C:\Windows\System\FJLdoZx.exe

C:\Windows\System\FJLdoZx.exe

C:\Windows\System\nFuEzGR.exe

C:\Windows\System\nFuEzGR.exe

C:\Windows\System\opnPFzN.exe

C:\Windows\System\opnPFzN.exe

C:\Windows\System\IqJxQSv.exe

C:\Windows\System\IqJxQSv.exe

C:\Windows\System\xsjuWEr.exe

C:\Windows\System\xsjuWEr.exe

C:\Windows\System\lHvwHnw.exe

C:\Windows\System\lHvwHnw.exe

C:\Windows\System\ChpKAsa.exe

C:\Windows\System\ChpKAsa.exe

C:\Windows\System\SQjWQrq.exe

C:\Windows\System\SQjWQrq.exe

C:\Windows\System\BNQdIVQ.exe

C:\Windows\System\BNQdIVQ.exe

C:\Windows\System\dmKQnxg.exe

C:\Windows\System\dmKQnxg.exe

C:\Windows\System\LwKAbJf.exe

C:\Windows\System\LwKAbJf.exe

C:\Windows\System\ZqOJJhU.exe

C:\Windows\System\ZqOJJhU.exe

C:\Windows\System\ZafBZtx.exe

C:\Windows\System\ZafBZtx.exe

C:\Windows\System\XVgCViB.exe

C:\Windows\System\XVgCViB.exe

C:\Windows\System\BSISPme.exe

C:\Windows\System\BSISPme.exe

C:\Windows\System\jeOkuRK.exe

C:\Windows\System\jeOkuRK.exe

C:\Windows\System\mwbyGax.exe

C:\Windows\System\mwbyGax.exe

C:\Windows\System\xAOmNrS.exe

C:\Windows\System\xAOmNrS.exe

C:\Windows\System\mnpewlP.exe

C:\Windows\System\mnpewlP.exe

C:\Windows\System\ueYjqIC.exe

C:\Windows\System\ueYjqIC.exe

C:\Windows\System\EJnSfmR.exe

C:\Windows\System\EJnSfmR.exe

C:\Windows\System\CikoZwg.exe

C:\Windows\System\CikoZwg.exe

C:\Windows\System\guXOCqd.exe

C:\Windows\System\guXOCqd.exe

C:\Windows\System\CdLyxeh.exe

C:\Windows\System\CdLyxeh.exe

C:\Windows\System\IsRDzGp.exe

C:\Windows\System\IsRDzGp.exe

C:\Windows\System\lkLPeDm.exe

C:\Windows\System\lkLPeDm.exe

C:\Windows\System\MRmCJMe.exe

C:\Windows\System\MRmCJMe.exe

C:\Windows\System\nbUfKgn.exe

C:\Windows\System\nbUfKgn.exe

C:\Windows\System\LMsGqdu.exe

C:\Windows\System\LMsGqdu.exe

C:\Windows\System\fnbhQlb.exe

C:\Windows\System\fnbhQlb.exe

C:\Windows\System\MWHDdnK.exe

C:\Windows\System\MWHDdnK.exe

C:\Windows\System\pHXWkLP.exe

C:\Windows\System\pHXWkLP.exe

C:\Windows\System\QNwBECd.exe

C:\Windows\System\QNwBECd.exe

C:\Windows\System\UdJCttx.exe

C:\Windows\System\UdJCttx.exe

C:\Windows\System\wQElmYr.exe

C:\Windows\System\wQElmYr.exe

C:\Windows\System\ccKXGHP.exe

C:\Windows\System\ccKXGHP.exe

C:\Windows\System\tPyjJNd.exe

C:\Windows\System\tPyjJNd.exe

C:\Windows\System\joxblDD.exe

C:\Windows\System\joxblDD.exe

C:\Windows\System\bdtOfej.exe

C:\Windows\System\bdtOfej.exe

C:\Windows\System\YeUcdQl.exe

C:\Windows\System\YeUcdQl.exe

C:\Windows\System\GQRKHeE.exe

C:\Windows\System\GQRKHeE.exe

C:\Windows\System\VirxJNe.exe

C:\Windows\System\VirxJNe.exe

C:\Windows\System\XlLCRrw.exe

C:\Windows\System\XlLCRrw.exe

C:\Windows\System\AbKfBmq.exe

C:\Windows\System\AbKfBmq.exe

C:\Windows\System\LdEZRls.exe

C:\Windows\System\LdEZRls.exe

C:\Windows\System\dKyBZeC.exe

C:\Windows\System\dKyBZeC.exe

C:\Windows\System\IdvlIZn.exe

C:\Windows\System\IdvlIZn.exe

C:\Windows\System\vujKiAs.exe

C:\Windows\System\vujKiAs.exe

C:\Windows\System\imSBQJI.exe

C:\Windows\System\imSBQJI.exe

C:\Windows\System\MHKfuHT.exe

C:\Windows\System\MHKfuHT.exe

C:\Windows\System\UcqlGPf.exe

C:\Windows\System\UcqlGPf.exe

C:\Windows\System\wVIftpi.exe

C:\Windows\System\wVIftpi.exe

C:\Windows\System\eMLxThM.exe

C:\Windows\System\eMLxThM.exe

C:\Windows\System\eIHfMvt.exe

C:\Windows\System\eIHfMvt.exe

C:\Windows\System\AxPWguM.exe

C:\Windows\System\AxPWguM.exe

C:\Windows\System\ANAoCCl.exe

C:\Windows\System\ANAoCCl.exe

C:\Windows\System\nYimcrD.exe

C:\Windows\System\nYimcrD.exe

C:\Windows\System\dUIgChF.exe

C:\Windows\System\dUIgChF.exe

C:\Windows\System\WqbOUAJ.exe

C:\Windows\System\WqbOUAJ.exe

C:\Windows\System\vmhEXil.exe

C:\Windows\System\vmhEXil.exe

C:\Windows\System\GrZUpES.exe

C:\Windows\System\GrZUpES.exe

C:\Windows\System\akvDATg.exe

C:\Windows\System\akvDATg.exe

C:\Windows\System\Agzohui.exe

C:\Windows\System\Agzohui.exe

C:\Windows\System\WghqhsL.exe

C:\Windows\System\WghqhsL.exe

C:\Windows\System\KIzIPYh.exe

C:\Windows\System\KIzIPYh.exe

C:\Windows\System\lqMUPxi.exe

C:\Windows\System\lqMUPxi.exe

C:\Windows\System\gTVwcSc.exe

C:\Windows\System\gTVwcSc.exe

C:\Windows\System\WOLqMVY.exe

C:\Windows\System\WOLqMVY.exe

C:\Windows\System\pjHOrza.exe

C:\Windows\System\pjHOrza.exe

C:\Windows\System\QdEcxBe.exe

C:\Windows\System\QdEcxBe.exe

C:\Windows\System\CuonWWW.exe

C:\Windows\System\CuonWWW.exe

C:\Windows\System\xfObTVH.exe

C:\Windows\System\xfObTVH.exe

C:\Windows\System\pamMOkn.exe

C:\Windows\System\pamMOkn.exe

C:\Windows\System\uNDRWcx.exe

C:\Windows\System\uNDRWcx.exe

C:\Windows\System\pMfQwPn.exe

C:\Windows\System\pMfQwPn.exe

C:\Windows\System\atGgThb.exe

C:\Windows\System\atGgThb.exe

C:\Windows\System\aatbwgQ.exe

C:\Windows\System\aatbwgQ.exe

C:\Windows\System\PjgJDSm.exe

C:\Windows\System\PjgJDSm.exe

C:\Windows\System\LIgzLgJ.exe

C:\Windows\System\LIgzLgJ.exe

C:\Windows\System\mTvpAAW.exe

C:\Windows\System\mTvpAAW.exe

C:\Windows\System\wWuyKmy.exe

C:\Windows\System\wWuyKmy.exe

C:\Windows\System\vkTHYFw.exe

C:\Windows\System\vkTHYFw.exe

C:\Windows\System\MjmErXw.exe

C:\Windows\System\MjmErXw.exe

C:\Windows\System\KjaDnMJ.exe

C:\Windows\System\KjaDnMJ.exe

C:\Windows\System\FJqcTDR.exe

C:\Windows\System\FJqcTDR.exe

C:\Windows\System\AYKljCI.exe

C:\Windows\System\AYKljCI.exe

C:\Windows\System\guUVnEi.exe

C:\Windows\System\guUVnEi.exe

C:\Windows\System\sFkKyFy.exe

C:\Windows\System\sFkKyFy.exe

C:\Windows\System\euEhWqs.exe

C:\Windows\System\euEhWqs.exe

C:\Windows\System\iNtjaxj.exe

C:\Windows\System\iNtjaxj.exe

C:\Windows\System\ziNwWNP.exe

C:\Windows\System\ziNwWNP.exe

C:\Windows\System\nMheCHP.exe

C:\Windows\System\nMheCHP.exe

C:\Windows\System\vXWHFPY.exe

C:\Windows\System\vXWHFPY.exe

C:\Windows\System\NDjkvQD.exe

C:\Windows\System\NDjkvQD.exe

C:\Windows\System\izIUSHV.exe

C:\Windows\System\izIUSHV.exe

C:\Windows\System\ZibNCkB.exe

C:\Windows\System\ZibNCkB.exe

C:\Windows\System\hCtYJYq.exe

C:\Windows\System\hCtYJYq.exe

C:\Windows\System\EKPBRhi.exe

C:\Windows\System\EKPBRhi.exe

C:\Windows\System\KVHMYIJ.exe

C:\Windows\System\KVHMYIJ.exe

C:\Windows\System\NMXzyzX.exe

C:\Windows\System\NMXzyzX.exe

C:\Windows\System\FfpqPSp.exe

C:\Windows\System\FfpqPSp.exe

C:\Windows\System\pnejLAZ.exe

C:\Windows\System\pnejLAZ.exe

C:\Windows\System\qDTmZOz.exe

C:\Windows\System\qDTmZOz.exe

C:\Windows\System\ccBUaLZ.exe

C:\Windows\System\ccBUaLZ.exe

C:\Windows\System\NsKANSU.exe

C:\Windows\System\NsKANSU.exe

C:\Windows\System\fzByFjl.exe

C:\Windows\System\fzByFjl.exe

C:\Windows\System\ddrODAQ.exe

C:\Windows\System\ddrODAQ.exe

C:\Windows\System\GUqoVSY.exe

C:\Windows\System\GUqoVSY.exe

C:\Windows\System\DJdwOwy.exe

C:\Windows\System\DJdwOwy.exe

C:\Windows\System\XDviGuy.exe

C:\Windows\System\XDviGuy.exe

C:\Windows\System\nWoDKOL.exe

C:\Windows\System\nWoDKOL.exe

C:\Windows\System\BRgGNNl.exe

C:\Windows\System\BRgGNNl.exe

C:\Windows\System\AQOKwsA.exe

C:\Windows\System\AQOKwsA.exe

C:\Windows\System\dDJSULB.exe

C:\Windows\System\dDJSULB.exe

C:\Windows\System\AopEcez.exe

C:\Windows\System\AopEcez.exe

C:\Windows\System\nbaKqbl.exe

C:\Windows\System\nbaKqbl.exe

C:\Windows\System\pqNrLwB.exe

C:\Windows\System\pqNrLwB.exe

C:\Windows\System\rfRfHYD.exe

C:\Windows\System\rfRfHYD.exe

C:\Windows\System\HSfvUFx.exe

C:\Windows\System\HSfvUFx.exe

C:\Windows\System\sszKSuN.exe

C:\Windows\System\sszKSuN.exe

C:\Windows\System\FunaOwF.exe

C:\Windows\System\FunaOwF.exe

C:\Windows\System\aTTFcao.exe

C:\Windows\System\aTTFcao.exe

C:\Windows\System\EkaIFTX.exe

C:\Windows\System\EkaIFTX.exe

C:\Windows\System\ctTgcAu.exe

C:\Windows\System\ctTgcAu.exe

C:\Windows\System\PShQaiL.exe

C:\Windows\System\PShQaiL.exe

C:\Windows\System\JAZtVyv.exe

C:\Windows\System\JAZtVyv.exe

C:\Windows\System\mLmGMyD.exe

C:\Windows\System\mLmGMyD.exe

C:\Windows\System\OEBlLHh.exe

C:\Windows\System\OEBlLHh.exe

C:\Windows\System\QDxIqht.exe

C:\Windows\System\QDxIqht.exe

C:\Windows\System\QjYyeOL.exe

C:\Windows\System\QjYyeOL.exe

C:\Windows\System\DYGFBtx.exe

C:\Windows\System\DYGFBtx.exe

C:\Windows\System\tiTBjOw.exe

C:\Windows\System\tiTBjOw.exe

C:\Windows\System\sAGpZHQ.exe

C:\Windows\System\sAGpZHQ.exe

C:\Windows\System\CGxcPgh.exe

C:\Windows\System\CGxcPgh.exe

C:\Windows\System\bUNTozC.exe

C:\Windows\System\bUNTozC.exe

C:\Windows\System\ydRxXQy.exe

C:\Windows\System\ydRxXQy.exe

C:\Windows\System\bDSxUxP.exe

C:\Windows\System\bDSxUxP.exe

C:\Windows\System\EUlbDlF.exe

C:\Windows\System\EUlbDlF.exe

C:\Windows\System\KGkDGjE.exe

C:\Windows\System\KGkDGjE.exe

C:\Windows\System\QxIVsQL.exe

C:\Windows\System\QxIVsQL.exe

C:\Windows\System\rRkIDHC.exe

C:\Windows\System\rRkIDHC.exe

C:\Windows\System\KXMsuuS.exe

C:\Windows\System\KXMsuuS.exe

C:\Windows\System\HrCCOYz.exe

C:\Windows\System\HrCCOYz.exe

C:\Windows\System\AXLxcbk.exe

C:\Windows\System\AXLxcbk.exe

C:\Windows\System\XqjsUoM.exe

C:\Windows\System\XqjsUoM.exe

Network

Country	Destination	Domain	Proto
US	8.8.8.8:53	g.bing.com	udp
US	131.253.33.237:443	g.bing.com	tcp
US	8.8.8.8:53	8.8.8.8.in-addr.arpa	udp
US	8.8.8.8:53	73.159.190.20.in-addr.arpa	udp
US	8.8.8.8:53	237.33.253.131.in-addr.arpa	udp
US	8.8.8.8:53	105.77.117.104.in-addr.arpa	udp
NL	23.62.61.106:443	www.bing.com	tcp
US	8.8.8.8:53	205.47.74.20.in-addr.arpa	udp
US	8.8.8.8:53	106.61.62.23.in-addr.arpa	udp
US	8.8.8.8:53	18.31.95.13.in-addr.arpa	udp
US	8.8.8.8:53	103.169.127.40.in-addr.arpa	udp
US	8.8.8.8:53	155.77.117.104.in-addr.arpa	udp
US	8.8.8.8:53	13.227.111.52.in-addr.arpa	udp

Files

memory/1528-0-0x00007FF7AE460000-0x00007FF7AE7B1000-memory.dmp

C:\Windows\System\fFUxvFE.exe

MD5	7886de5ff1cf77323142f8d1251c4a00
SHA1	bf669b60e1112cd1d6502a271b0f378b9105f376
SHA256	d242330daae2d884bcba8babf3719ee2595e3da3c8adccd05ac568b828230a65
SHA512	22bb8324887b0b9f013d57042a634719ba7a900640f9402ce0c50dfb40820cc5e1fc2336e62de2be69b3c194bc439f6ef5062b263a0067b7001ba1e1fd73ad8e

memory/1528-1-0x000001E886710000-0x000001E886720000-memory.dmp

C:\Windows\System\TzhXGFC.exe

MD5	500bb15575cc79fac3c7880a568de4b6
SHA1	d8e4341ff2a61b3e851dbfd0f0946df965c861ab
SHA256	a39e4cbaaec906b8bec0064ebf3f8c8e87c017f445b7806fe870aae4feea1c48
SHA512	0688b8dc4a4209d81ffb20780ce7dcddf52cdff4dc63258721d4343cd37ecc522ef993dfd8d974ef382fd8e2ef648c2ccca0efb1b33966b014892e17ab7b0697

C:\Windows\System\yBlYnfz.exe

MD5	47578ac39c336c5c14a2749ccb772eed
SHA1	19e919d76042bba450665da224841b17503eaa6e
SHA256	ef2e1f6b9c81ef06bacf7a4b6da20282315e984eb527cd4bc06be5833f0d666c
SHA512	5961ef3c14c875cf9f69d9d805f0c72c625e42b2e1e76515c73fe4b6b91221fbe7c50f3055894187d1350bbc5601e1c25a3a3a15ce173f1ebf2fb370ef6c3f5a

C:\Windows\System\hhmJNvm.exe

MD5	8e971336cff3371a97202f18b7892012
SHA1	b444c28780ba6073f11cc11b24d47c58a2b6fd5e
SHA256	ba11af73946458462743ae29f05ed72df5fd0e144acd0c20c1e2f324a3c3d858
SHA512	8c2670832b6df971c7ea7394a23ec1089682766e866adc055d27fc249bae89c0d08f6cc4234e1eba840207d4f6a329fe868e92a0211819a25efbc34df032fdb2

C:\Windows\System\LEbilwU.exe

MD5	61dcd6d125610c30ff4c99999a1e64d9
SHA1	ec4665c699e56321d8d1b71f4f498a25aaf9c663
SHA256	2c4cac892dad10f40fd9375ee7d1dcb2dcd13d93fb4a72763640e0f37843473c
SHA512	98ad68cee63149c7536f14148e730d7680edeb724760ff069ccf4ff8f952bc0eaa8e9573f54eefddb8607b77dc4ef934cd0a1f9a606e787a3ef1afb31bc25d0c

C:\Windows\System\uTpCOJI.exe

MD5	675c68dd0ad53ccf87ddfa053622c8fe
SHA1	4cca271825821d2be6ce8c17f23b33c504144ed7
SHA256	1ae785c663974793b3289fd5ce32d5edfa9257cfe556db0446d4cfb2e76bde13
SHA512	6e3c191b8a14bb85fa70c2878b5e40b2b0f4ae0aae23e540d913598a42497af6635272437a92cac57fd65649a09d2675c1012554f429073808208b305bd656a6

memory/2376-199-0x00007FF7F6740000-0x00007FF7F6A91000-memory.dmp

memory/4156-206-0x00007FF6577B0000-0x00007FF657B01000-memory.dmp

memory/2708-224-0x00007FF6075B0000-0x00007FF607901000-memory.dmp

memory/5084-244-0x00007FF6FBE20000-0x00007FF6FC171000-memory.dmp

memory/2572-248-0x00007FF717E50000-0x00007FF7181A1000-memory.dmp

memory/3804-257-0x00007FF7209D0000-0x00007FF720D21000-memory.dmp

memory/1940-260-0x00007FF6D6BE0000-0x00007FF6D6F31000-memory.dmp

memory/3904-259-0x00007FF6C29D0000-0x00007FF6C2D21000-memory.dmp

memory/4944-258-0x00007FF7BCCC0000-0x00007FF7BD011000-memory.dmp

memory/4136-250-0x00007FF6B5160000-0x00007FF6B54B1000-memory.dmp

memory/3600-249-0x00007FF6604C0000-0x00007FF660811000-memory.dmp

memory/2092-218-0x00007FF613710000-0x00007FF613A61000-memory.dmp

memory/660-217-0x00007FF695C80000-0x00007FF695FD1000-memory.dmp

memory/1188-208-0x00007FF671690000-0x00007FF6719E1000-memory.dmp

memory/5028-207-0x00007FF7B9BB0000-0x00007FF7B9F01000-memory.dmp

memory/5008-205-0x00007FF6A5B60000-0x00007FF6A5EB1000-memory.dmp

memory/4492-204-0x00007FF7CB8A0000-0x00007FF7CBBF1000-memory.dmp

memory/4964-203-0x00007FF70D9B0000-0x00007FF70DD01000-memory.dmp

memory/4936-202-0x00007FF75BD20000-0x00007FF75C071000-memory.dmp

memory/3520-196-0x00007FF6CA690000-0x00007FF6CA9E1000-memory.dmp

C:\Windows\System\qcFfBXd.exe

MD5	edc949daf089025b10ff436961f02af9
SHA1	f3910c0d0595b2b7ceaf9b8c853596b064de4e35
SHA256	012593d44d4ff87814d8c76976f15898ddeee2be46018f163863a3681b5ca981
SHA512	a1d15829cb636613ae7513dfb59a56562a030b08be1bf3b54481c220168680a7c678d9f1a15d6cd7b7c379a322c456de223480a27ce1e244688603e77bc40bee

C:\Windows\System\ekSZwQJ.exe

MD5	4d73fc7d917ac07bba51a84342f8a7cb
SHA1	bd759de4726c003fba14493ae620cd3d48f0711a
SHA256	49c269edf58020b7619e827aaecfb8dffef56686fafa8c5468e971b82ad1399f
SHA512	95aaa3b781b62a37125b5f10567a58bdb4fc60079232f1fed167eba9b4c949b65c18d9a07021fe1872ea769feb26ea27aa8eb30aa9daeb2ddd51b3ec9cd3eb93

C:\Windows\System\PQZaTDt.exe

MD5	d43b759319f6d655b1727e28ed5e7ae2
SHA1	5547f3c1caad3025d4133bdd70b5fffb30c49352
SHA256	37fdd652e385627cfb521cc2c16b475b21b4304dbb0e5a5ea23911f9538dbc0b
SHA512	a269ae2c0fed93462887c045bd1da57d25d3889b8e6960a3053fb4b10f4f6c82fbd9d735b2e5e86d5f4bb04b98617713a13e53c0619d3ca31becfb764ee74cae

C:\Windows\System\iPLTrbc.exe

MD5	7c1c17e7ae6b82abd15be01f6c23919c
SHA1	88cc3cc646722762f37af3f706ab925bc5fdcf06
SHA256	a29252378022d45de4c57c94ff6a4690c0f08d53fac2225fbd605a72e079c7ec
SHA512	d4d98a4d0fc0cb4bff0c45fdac66736119c02b61129204acfef78860355414b0bb83dc6ba7ba0abc2b57703e192fd3aa425194a1a186735f52c3622ed9a1c9fa

C:\Windows\System\PHyFlel.exe

MD5	3ad6a3008cd84e27321382c51aa9eb7a
SHA1	9c7cf5e14b41d057d96cf8060e4454b797629094
SHA256	3e7cbec7ee190d3a3f6f3905a51531cdda1b72d5c65257710297f419afc33a41
SHA512	4624882f445b083edc4f9c6b2f23eaaf11d6829483c7deac2869dbeeefb18175cb28e2e653213c4f1ffd5bda0b35b5399af404d991ad7af59caaa1eb0afdcebe

C:\Windows\System\obBaeTZ.exe

MD5	0305be00f4d978c831b81d6a94f17358
SHA1	c5c06ca9ca4d92c27795b6684649b5dbfc585aac
SHA256	fe87903b550078e4939b2f48ec531b149a8bbdf9820ffe9b84c107810b9c6020
SHA512	de35dbd402576e28244a67de55364dda734f1d34338e357e032d91d675c911e9dea072b7b859f018ffc1dd912d9c0376213d0bb4fe70f01f4ba56b16f3538130

C:\Windows\System\DKHRNTt.exe

MD5	d66b3db2fae04ad4c74a874010086763
SHA1	c3016710d97e7ee11230a83205d0df2bc67e98f1
SHA256	3dc797fa93d57bfa5fa42c57ee0ea60c1e6e57960eea4a4e37032520fac8811b
SHA512	323880df5d4648387a8891d6b8457fe01aa16b871f86c117426ec85218700c1adbb4ecc0c9de8abc36fbc748d39c2656db2c84cae5957c0ff1cc9cca2a61336a

memory/2180-165-0x00007FF6AEE90000-0x00007FF6AF1E1000-memory.dmp

memory/3648-164-0x00007FF704A80000-0x00007FF704DD1000-memory.dmp

C:\Windows\System\JaZUpGL.exe

MD5	3c7db84956211ae4fffdabf5d80ff65e
SHA1	3ef7e07b5b7da555c6de128a3b66072856359d61
SHA256	810b87dc64024ab78e0910e38c8f02794f799b8a83816e5bf001ba8d0572bb67
SHA512	a7602d5487e69cc7ea6d33e326f74c2c6b825f5806b1556777c55cc1f8808fee1d6c60641a9416496b79ea79f206e17972c796fe7137b065bb374393302516ac

C:\Windows\System\XoXTGKs.exe

MD5	1a6e084a9afab3fc7d334af8fd0d2fae
SHA1	82d47b9e63c302712356d8a4ba302b4a7b271c5d
SHA256	942b65615fa7e83226beae85b7b4ef418001143dcfcb3258046aa21ec9183694
SHA512	6174638b46e27e22f84613fa5c491bdd97b7ae349733c77e7fcaeb736a3068b499fcf15d0f294d8346f1498c42945ee1d20e551eea170385fb546a99f02d866a

C:\Windows\System\XnHYXTU.exe

MD5	5a13eae4e56249513593ed5bc604cc5e
SHA1	4dfdb4d9fed6a135b7d1acc6239d0a077fbc9820
SHA256	85573db54463e57762742a9c229aebf766386492edd3dd0970d1dbcf64ca2317
SHA512	38cb4b872cbab0a890de242435c52050e9e85400a0c69e023d6b8431e1a71968fba2ae394884f064cf6c0402a22166bc6cf13347ad3f526db8078b52a8dbdd92

C:\Windows\System\nKBqueP.exe

MD5	89497e7d6bb3e4961564e2260c302920
SHA1	ecc875f14e8d6f9e8399f107a8f11024685647b4
SHA256	9228584d3d332438ad01f8ce7678ead716ab1a41ec6bbfbe19a76955e002b234
SHA512	b09d883621024edf45f68882341dfa5409e441bf8f64357baf324d03334935a4be522096224ef568267772edacbf48de6dd1842581586342b8d0b151717ed232

C:\Windows\System\BkhYjIf.exe

MD5	d53f7ae009de5d1894dd5cd495b2407d
SHA1	4b16385d145e2f2523b4bec8cc265d9d5ae5365b
SHA256	e79429ce989346f2cd92382898e6f3c90b1db65a589a27004aedbc44c15e973c
SHA512	3ace7b4ec8ebf1f9f6f5c6393c51426d0aa19623954d7a62490210023673da5fd86062c346fd9834f34dc5ac863ebe994e2c2a5112bae83c7b211fcf5c88d429

C:\Windows\System\iHVfdnZ.exe

MD5	1b0677625a0e6121279f33168decf7be
SHA1	8c6ed6dcee29e66cf131c81f7608aa93b153afd3
SHA256	6162b34d68b74a2bbe5a12187f40471e8b01d0137ba61465e5cded1a7c415c02
SHA512	25620bf845d8f5bfefcd61a0cab895788b1c1e5b0d88de196c1dc44cd5082d54788ef653f382c76ad2e4e1eb4f81a65ce9b05c15a9b648488372b102e38a0ce6

C:\Windows\System\rqzVEUB.exe

MD5	fd0163d869032dbaf89d677ae7f76317
SHA1	ca910800bd5864119a0eb5d23e53ba293964e82d
SHA256	a40484c543cb44a3cba3bfaa25dae8d4dfb28f780b2470b466dffbfb11f754a9
SHA512	011121c63fc6aff99c6ef7a0b505cf954aa461b4dc484b6144da056c73a503fa7ea12b0162252c6766607cf475654ca6c303a2fe13547124bef00c89f912f770

memory/4868-144-0x00007FF788A20000-0x00007FF788D71000-memory.dmp

C:\Windows\System\mHbemTs.exe

MD5	0cab12151e5129d83459369b1ced48b7
SHA1	2265273050b8effc72458e9810f7811a72ed673a
SHA256	7dc3efb44d44ac1b01121945a1dd8870cb84f9925bd290076eebbfabe5e5cc01
SHA512	9a46239b7f2efbca198e0c11dbe9018fc63ec2ffeca9baa916cecfcd6484b26bb28b0b44d179e56775bf4b6b693c1565fb0396f9bc24929a0606e4787345cf0e

C:\Windows\System\sFUshJf.exe

MD5	1265744933b3bd1f4680e3f2a9452a80
SHA1	912b196b6f1eb091fb49a5a5deaab2ac3ddcf86c
SHA256	84c0045b1a8e8ad5728426d2f1400c7807c4472b5b8a86fe190b069a20f3199f
SHA512	e4953c306c7996cac8bee993637f1900de8466bf041c27538ccb660525084269a5ea5787ab296a040178257896288e9d0e4b1b4c4595b845e458cc0c1d7dfb33

C:\Windows\System\MPQUHIX.exe

MD5	7aa80cb946bc4a9701b882ad514aa9d2
SHA1	85eabf22fd2fa61144bde8b7b2b7749057f13504
SHA256	8f12da333f181ba50ee359c21c5a9c54d9e78815efbfc72e795fbdb24d1256ec
SHA512	65b814559e60c8e80581af492d03cc59682240843a8ccba3640b1145b4cf5c3e00fc5e158ff5f1dbb55bfc721361f2922bf982a6f6d18f296e210fc4d5cd7221

C:\Windows\System\zBNNrih.exe

MD5	db22d8869008527e660a14b5424be154
SHA1	63aba20943c58f559ef42893aa257b9e93548396
SHA256	e61fd45fcd613148b46d75b944867383f6ab0b14ebb4d2e1fba9e8c59c5d8e5c
SHA512	548a6f8021e1e17943e7077d53df572990764dd3f92268489cd7f18c87109a113635396cb6654c755a04b082029cef781c4b1aedaa23d7d1f4f1717c09e603e7

C:\Windows\System\NhUhFGz.exe

MD5	d89fe6ff892a5116b63a59679c0d5511
SHA1	c7ec6a157dadd0e0729f62b8ff6c0659b930cfbf
SHA256	0a2c32034704ff84b72c8cf77e490b16849669167d9715681f9736296f4f6f06
SHA512	04fc14945a94729a7f631adc0f0398176f0dd1756bdc8f2fefa03a66c3156654caad09b6b9250a14184ffc1fbfeec7cbcda1a747d7af05b9f077d9d314c28331

C:\Windows\System\phehMIc.exe

MD5	179b71f17e77db49276aff529b6309cd
SHA1	e2a67e5eee90cfd7e1d222a3fc87b0480f747cd7
SHA256	41d7832c91c292e0bd012d52348a12d607548672a052fbb64bbdfa934ce91c20
SHA512	19724f582897995d8f7ff69b8068d8c503bd8d5122295153522e9ee73be9c4c124c18b8a63b2648b5bcd249e1710eb6a7b34defd7903f22a38257e592342d17a

C:\Windows\System\DIZzYwU.exe

MD5	899aff5594e2d2c710e540e677c24fe7
SHA1	11c27e3e6fcdc437fb2944d134f0f73097dee13d
SHA256	4e7163c5dd9f7dcdaed3179ae20ec42ff0711d699771eab3a4a497af2c2b4b75
SHA512	a9d5c42a0a645c6f9f507318962fb40b30ebc5f92b0a41e256c90c52a80c795c383a6d3db03b85cb97b378c5ca351d401ed2e404ef6efce92f7a26e61b839a8f

C:\Windows\System\dsKWpKv.exe

MD5	f9fe6a16953627eb2f9c40fdb33fc30f
SHA1	e8890e5197b9a4cbf19ea279c2bf11492a7b90ab
SHA256	0d334875c1bbbdb875151db621d18315be9e4468f9cf7bb75f1d15bda2b16947
SHA512	335518b1de523139884eba024ecbfc5ac62c151d9f799fb77a3fe5c9a15978fe920b5fb9ee4646aebfb9d9d7942d08943893b911f58596f65593d5e82bc51e34

C:\Windows\System\QtEJVZQ.exe

MD5	1fd9307a806c5eba224c3fd3b2bb67ff
SHA1	f0b7290cde7fbddb5cc40838992f93ea00a221ab
SHA256	37af8b338c585479324b261678b7b1a12474d79ab8dbb427d4b8a0f842eb612a
SHA512	e85a711f634fa56ea06e38ee92a58fed931d8a79e53b855ec3c1361cde4008a55034fe06807c67eb358f38ade26022afdbbeff33740ba8b7e6d538b5e96c6ba5

C:\Windows\System\jJIHHsH.exe

MD5	2ae2247bc22798b7833ff84fae00e255
SHA1	64dc9dea6e46301d74b11e7a83c7c098302f69e6
SHA256	5ca29ac7616c09e88a199e1f246a7b6fb6737d0293ed8736290f8ee98f9db942
SHA512	aad49d83bb4afc7504dda8f880c71a9ed8c949cf2ad99fc6d17d41a24c009da876543b7371609ac6dcb0126189359b2177addd070b70faaf824c0c15e57e1d6a

memory/4848-103-0x00007FF6A5D20000-0x00007FF6A6071000-memory.dmp

C:\Windows\System\xuYpbrU.exe

MD5	43156d0aac7bff2ed70081c3f3621a80
SHA1	f0057e999cc364d70662f24fdf19a66c309d8e2e
SHA256	ec85d3036e4dd5cc01285aecc220c4a012e847a449a5e51f7b3c9d887b53486a
SHA512	9c228a5acefa1fa75468fbaca2dc7c8bdd94fb2eb39759686bb30aa53542f3c501e820a598cf81b72b1e0b4380a389fef7d3b97f204e00ff1fa8893e5aa41941

C:\Windows\System\yjYsEDA.exe

MD5	5d38f990045d3906d1e920699c821eb4
SHA1	33abdbbec83b51ab73ed4ffbc5995e391f47c2b7
SHA256	15444ccef48fc0a389f146e26febee3d4043d8f94ce924c613428647c7ac6790
SHA512	61c36f1584898fbc245e8fa74440bf5a91fc9949acb120d3d84a3fff45298194d25ffbe5137524dbb93ee4487162d7c33dc9d7da771c3d07a7e4cd684740998f

memory/3472-81-0x00007FF67D210000-0x00007FF67D561000-memory.dmp

C:\Windows\System\URLFYGw.exe

MD5	81bd5cad2a7ecc7a76b56405ef5f9002
SHA1	add9d04a9b6977240898db1a52429b471da56f3b
SHA256	31706c4f3bb3ce77ed91880fe7bd1253918a629c9835d9d35a5b89649fa07e6d
SHA512	435a2854ae33545aa6116651bb67969c6330601aa63ac50d5644c978aca321ca77d9df2a7846c64cabe39664d48b30afdd015049aa8945c0cf67b2de1de8db5a

C:\Windows\System\lCgcHve.exe

MD5	b7435208dcbda063ff37baafec9068e7
SHA1	857c7ab2d24cacaf507760679ed8e0d27308b3a8
SHA256	b907a318d5c8b99fb29cf19fa2c9b188baa258661d98fee195963a13d1014a94
SHA512	ffc9552862b5a847911787689900005cf473f20519cf464f913995ac88eb8dc451358c44334870c9024179c4e08fd66911786c9c26350760952be19b3b5ff488

C:\Windows\System\aCmPeip.exe

MD5	3489ecdd56acfbd9df460512b2db0a13
SHA1	b3eb54da9f9cc52f0e74569a939a747d12f478a8
SHA256	afade93c2da29428207b9357e7a0e4dde2bb0bf5d61e468cfc775981707385ff
SHA512	bdb2dd05fa0ead3b4e18ec42658f8611059783a8b496652c006dcfad749cd107911a3b876989d926d6eca094065a3e2a02f728a0d30676f44bd0e60d17d08233

memory/3040-68-0x00007FF62E230000-0x00007FF62E581000-memory.dmp

C:\Windows\System\FIYJBdP.exe

MD5	ad0a36a82ef37dd66570b1760f9e5907
SHA1	ed6826a733dc9ccd529a01e31b2da2adc6039a6e
SHA256	5b942a5a1e7034b927f30dc2680a3ca19f235d67abc0568795e9f09a32c9105e
SHA512	f4ef523d58fe8c9015804a8105c38267a1aa6c1cf0ca17046772d351730f828936f0b756813010d794fcf90a52f996291924e4aaf7a3dbff7171823949bfe28f

C:\Windows\System\HWHhwZx.exe

MD5	89e5335960d3adc54510c57f52787ed0
SHA1	ab91cdd3a4fc067b479326887a580e442a5bc82f
SHA256	430e34ea9d8e730fc31287588def4550b4ac8b848d91456e6753c1d792e8f564
SHA512	08db7ac384354481ad49e58bcc023767773a72d2cdc6d896c9931a6cec44064f9e0f7be8f30c0c77d2df7210754babefaef6dc4f48e717e006a35256a009302b

memory/3100-45-0x00007FF71AAE0000-0x00007FF71AE31000-memory.dmp

memory/1936-42-0x00007FF714AA0000-0x00007FF714DF1000-memory.dmp

C:\Windows\System\XxyGbky.exe

MD5	ddc28dc1f224b6625d49025bbc288053
SHA1	d40c9737f4f22b377a34a5c778cec6337c628094
SHA256	0a106003813dd5206d3eac8f409564f994e076c89af9074c1d8a312bca53f8ed
SHA512	750db1b8752584de9d51e05f94970be5a3d4187ddbbdaf561241aa70dc3aed621ab6d3661a962e43c291eb92de533b8a1baa9c30813518b3bb3f16b0bf0989e5

C:\Windows\System\DcuazeJ.exe

MD5	358718a8b2a062debf3ea2e8bdbf5479
SHA1	f361c87a05f257409697743e32cfa387d53f926b
SHA256	10f8b4f0e10d20d2549f820fa1e9e7048d489707978d783fca20dd366e7eb512
SHA512	f1e8541b578185b2a85b1d0ddf64b1ad3786fa80c20476b204cd05529407d32d0f4ad39aa85cb501e3d47dc67197263af5795a35001ded2738e852b315741af1

memory/1376-12-0x00007FF633BC0000-0x00007FF633F11000-memory.dmp

memory/1528-2142-0x00007FF7AE460000-0x00007FF7AE7B1000-memory.dmp

memory/1376-2242-0x00007FF633BC0000-0x00007FF633F11000-memory.dmp

memory/1936-2245-0x00007FF714AA0000-0x00007FF714DF1000-memory.dmp

memory/3100-2246-0x00007FF71AAE0000-0x00007FF71AE31000-memory.dmp

memory/3600-2250-0x00007FF6604C0000-0x00007FF660811000-memory.dmp

memory/3040-2249-0x00007FF62E230000-0x00007FF62E581000-memory.dmp

memory/4136-2255-0x00007FF6B5160000-0x00007FF6B54B1000-memory.dmp

memory/4848-2258-0x00007FF6A5D20000-0x00007FF6A6071000-memory.dmp

memory/2180-2260-0x00007FF6AEE90000-0x00007FF6AF1E1000-memory.dmp

memory/3648-2264-0x00007FF704A80000-0x00007FF704DD1000-memory.dmp

memory/4868-2266-0x00007FF788A20000-0x00007FF788D71000-memory.dmp

memory/4944-2268-0x00007FF7BCCC0000-0x00007FF7BD011000-memory.dmp

memory/3520-2263-0x00007FF6CA690000-0x00007FF6CA9E1000-memory.dmp

memory/3472-2257-0x00007FF67D210000-0x00007FF67D561000-memory.dmp

memory/3804-2253-0x00007FF7209D0000-0x00007FF720D21000-memory.dmp

memory/5028-2277-0x00007FF7B9BB0000-0x00007FF7B9F01000-memory.dmp

memory/4936-2291-0x00007FF75BD20000-0x00007FF75C071000-memory.dmp

memory/2376-2286-0x00007FF7F6740000-0x00007FF7F6A91000-memory.dmp

memory/4156-2281-0x00007FF6577B0000-0x00007FF657B01000-memory.dmp

memory/1188-2280-0x00007FF671690000-0x00007FF6719E1000-memory.dmp

memory/4964-2290-0x00007FF70D9B0000-0x00007FF70DD01000-memory.dmp

memory/5008-2276-0x00007FF6A5B60000-0x00007FF6A5EB1000-memory.dmp

memory/3904-2287-0x00007FF6C29D0000-0x00007FF6C2D21000-memory.dmp

memory/1940-2283-0x00007FF6D6BE0000-0x00007FF6D6F31000-memory.dmp

memory/2092-2270-0x00007FF613710000-0x00007FF613A61000-memory.dmp

memory/4492-2274-0x00007FF7CB8A0000-0x00007FF7CBBF1000-memory.dmp

memory/2708-2295-0x00007FF6075B0000-0x00007FF607901000-memory.dmp

memory/5084-2293-0x00007FF6FBE20000-0x00007FF6FC171000-memory.dmp

memory/2572-2315-0x00007FF717E50000-0x00007FF7181A1000-memory.dmp

memory/660-2314-0x00007FF695C80000-0x00007FF695FD1000-memory.dmp

Sample ID	240613-qed22azfjc
Target	7eb2bcc95231c544ae35cb430ab53fd0_NeikiAnalytics.exe
SHA256	290af2c3fdb5292e8985f6df60e35a82e1a18d6d0837151912a268432f70a4be
Tags	xmrig miner upx

Malware Analysis Report

2024-07-28 20:01

Table of Contents

Analysis Overview

Threat Level: Known bad

Malicious Activity Summary

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files