Analysis Overview
SHA256
bd98292b03e32d2823900b389158a95409a42cbeb6a67703a156bcc7a6e0b19a
Threat Level: Known bad
The file bd98292b03e32d2823900b389158a95409a42cbeb6a67703a156bcc7a6e0b19aN was found to be: Known bad.
Malicious Activity Summary
Blackmoon, KrBanker
Detect Blackmoon payload
Executes dropped EXE
UPX packed file
System Location Discovery: System Language Discovery
Unsigned PE
Suspicious use of WriteProcessMemory
MITRE ATT&CK
Enterprise Matrix V15
Analysis: static1
Detonation Overview
Reported
2024-10-18 17:55
Signatures
Unsigned PE
| Description | Indicator | Process | Target |
| N/A | N/A | N/A | N/A |
Analysis: behavioral1
Detonation Overview
Submitted
2024-10-18 17:55
Reported
2024-10-18 17:57
Platform
win7-20240903-en
Max time kernel
120s
Max time network
118s
Command Line
Signatures
Blackmoon, KrBanker
Detect Blackmoon payload
| Description | Indicator | Process | Target |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
Executes dropped EXE
UPX packed file
| Description | Indicator | Process | Target |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
System Location Discovery: System Language Discovery
| Description | Indicator | Process | Target |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | \??\c:\tbthbn.exe | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | \??\c:\nnbthn.exe | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | \??\c:\ddvpd.exe | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | \??\c:\5nhbnt.exe | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | \??\c:\tnbtbn.exe | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | \??\c:\5ffxllr.exe | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | \??\c:\dvjvd.exe | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | \??\c:\rrfrflx.exe | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | \??\c:\fxlfrfr.exe | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
Suspicious use of WriteProcessMemory
| Description | Indicator | Process | Target |
| PID 3004 wrote to memory of 1728 | N/A | C:\Users\Admin\AppData\Local\Temp\bd98292b03e32d2823900b389158a95409a42cbeb6a67703a156bcc7a6e0b19aN.exe | \??\c:\pjdjd.exe |
| PID 3004 wrote to memory of 1728 | N/A | C:\Users\Admin\AppData\Local\Temp\bd98292b03e32d2823900b389158a95409a42cbeb6a67703a156bcc7a6e0b19aN.exe | \??\c:\pjdjd.exe |
| PID 3004 wrote to memory of 1728 | N/A | C:\Users\Admin\AppData\Local\Temp\bd98292b03e32d2823900b389158a95409a42cbeb6a67703a156bcc7a6e0b19aN.exe | \??\c:\pjdjd.exe |
| PID 3004 wrote to memory of 1728 | N/A | C:\Users\Admin\AppData\Local\Temp\bd98292b03e32d2823900b389158a95409a42cbeb6a67703a156bcc7a6e0b19aN.exe | \??\c:\pjdjd.exe |
| PID 1728 wrote to memory of 2376 | N/A | \??\c:\pjdjd.exe | \??\c:\rxxlxfx.exe |
| PID 1728 wrote to memory of 2376 | N/A | \??\c:\pjdjd.exe | \??\c:\rxxlxfx.exe |
| PID 1728 wrote to memory of 2376 | N/A | \??\c:\pjdjd.exe | \??\c:\rxxlxfx.exe |
| PID 1728 wrote to memory of 2376 | N/A | \??\c:\pjdjd.exe | \??\c:\rxxlxfx.exe |
| PID 2376 wrote to memory of 2296 | N/A | \??\c:\rxxlxfx.exe | \??\c:\nhbthn.exe |
| PID 2376 wrote to memory of 2296 | N/A | \??\c:\rxxlxfx.exe | \??\c:\nhbthn.exe |
| PID 2376 wrote to memory of 2296 | N/A | \??\c:\rxxlxfx.exe | \??\c:\nhbthn.exe |
| PID 2376 wrote to memory of 2296 | N/A | \??\c:\rxxlxfx.exe | \??\c:\nhbthn.exe |
| PID 2296 wrote to memory of 2732 | N/A | \??\c:\nhbthn.exe | \??\c:\hbbbnb.exe |
| PID 2296 wrote to memory of 2732 | N/A | \??\c:\nhbthn.exe | \??\c:\hbbbnb.exe |
| PID 2296 wrote to memory of 2732 | N/A | \??\c:\nhbthn.exe | \??\c:\hbbbnb.exe |
| PID 2296 wrote to memory of 2732 | N/A | \??\c:\nhbthn.exe | \??\c:\hbbbnb.exe |
| PID 2732 wrote to memory of 2792 | N/A | \??\c:\hbbbnb.exe | \??\c:\rrxxlrf.exe |
| PID 2732 wrote to memory of 2792 | N/A | \??\c:\hbbbnb.exe | \??\c:\rrxxlrf.exe |
| PID 2732 wrote to memory of 2792 | N/A | \??\c:\hbbbnb.exe | \??\c:\rrxxlrf.exe |
| PID 2732 wrote to memory of 2792 | N/A | \??\c:\hbbbnb.exe | \??\c:\rrxxlrf.exe |
| PID 2792 wrote to memory of 2216 | N/A | \??\c:\rrxxlrf.exe | \??\c:\bhntnn.exe |
| PID 2792 wrote to memory of 2216 | N/A | \??\c:\rrxxlrf.exe | \??\c:\bhntnn.exe |
| PID 2792 wrote to memory of 2216 | N/A | \??\c:\rrxxlrf.exe | \??\c:\bhntnn.exe |
| PID 2792 wrote to memory of 2216 | N/A | \??\c:\rrxxlrf.exe | \??\c:\bhntnn.exe |
| PID 2216 wrote to memory of 2864 | N/A | \??\c:\bhntnn.exe | \??\c:\dddvp.exe |
| PID 2216 wrote to memory of 2864 | N/A | \??\c:\bhntnn.exe | \??\c:\dddvp.exe |
| PID 2216 wrote to memory of 2864 | N/A | \??\c:\bhntnn.exe | \??\c:\dddvp.exe |
| PID 2216 wrote to memory of 2864 | N/A | \??\c:\bhntnn.exe | \??\c:\dddvp.exe |
| PID 2864 wrote to memory of 2596 | N/A | \??\c:\dddvp.exe | \??\c:\1pppv.exe |
| PID 2864 wrote to memory of 2596 | N/A | \??\c:\dddvp.exe | \??\c:\1pppv.exe |
| PID 2864 wrote to memory of 2596 | N/A | \??\c:\dddvp.exe | \??\c:\1pppv.exe |
| PID 2864 wrote to memory of 2596 | N/A | \??\c:\dddvp.exe | \??\c:\1pppv.exe |
| PID 2596 wrote to memory of 3032 | N/A | \??\c:\1pppv.exe | \??\c:\7tnthb.exe |
| PID 2596 wrote to memory of 3032 | N/A | \??\c:\1pppv.exe | \??\c:\7tnthb.exe |
| PID 2596 wrote to memory of 3032 | N/A | \??\c:\1pppv.exe | \??\c:\7tnthb.exe |
| PID 2596 wrote to memory of 3032 | N/A | \??\c:\1pppv.exe | \??\c:\7tnthb.exe |
| PID 3032 wrote to memory of 1720 | N/A | \??\c:\7tnthb.exe | \??\c:\bbtntb.exe |
| PID 3032 wrote to memory of 1720 | N/A | \??\c:\7tnthb.exe | \??\c:\bbtntb.exe |
| PID 3032 wrote to memory of 1720 | N/A | \??\c:\7tnthb.exe | \??\c:\bbtntb.exe |
| PID 3032 wrote to memory of 1720 | N/A | \??\c:\7tnthb.exe | \??\c:\bbtntb.exe |
| PID 1720 wrote to memory of 1036 | N/A | \??\c:\bbtntb.exe | \??\c:\dpppd.exe |
| PID 1720 wrote to memory of 1036 | N/A | \??\c:\bbtntb.exe | \??\c:\dpppd.exe |
| PID 1720 wrote to memory of 1036 | N/A | \??\c:\bbtntb.exe | \??\c:\dpppd.exe |
| PID 1720 wrote to memory of 1036 | N/A | \??\c:\bbtntb.exe | \??\c:\dpppd.exe |
| PID 1036 wrote to memory of 2116 | N/A | \??\c:\dpppd.exe | \??\c:\xrrlflf.exe |
| PID 1036 wrote to memory of 2116 | N/A | \??\c:\dpppd.exe | \??\c:\xrrlflf.exe |
| PID 1036 wrote to memory of 2116 | N/A | \??\c:\dpppd.exe | \??\c:\xrrlflf.exe |
| PID 1036 wrote to memory of 2116 | N/A | \??\c:\dpppd.exe | \??\c:\xrrlflf.exe |
| PID 2116 wrote to memory of 1620 | N/A | \??\c:\xrrlflf.exe | \??\c:\7xrfrrf.exe |
| PID 2116 wrote to memory of 1620 | N/A | \??\c:\xrrlflf.exe | \??\c:\7xrfrrf.exe |
| PID 2116 wrote to memory of 1620 | N/A | \??\c:\xrrlflf.exe | \??\c:\7xrfrrf.exe |
| PID 2116 wrote to memory of 1620 | N/A | \??\c:\xrrlflf.exe | \??\c:\7xrfrrf.exe |
| PID 1620 wrote to memory of 732 | N/A | \??\c:\7xrfrrf.exe | \??\c:\tnhntb.exe |
| PID 1620 wrote to memory of 732 | N/A | \??\c:\7xrfrrf.exe | \??\c:\tnhntb.exe |
| PID 1620 wrote to memory of 732 | N/A | \??\c:\7xrfrrf.exe | \??\c:\tnhntb.exe |
| PID 1620 wrote to memory of 732 | N/A | \??\c:\7xrfrrf.exe | \??\c:\tnhntb.exe |
| PID 732 wrote to memory of 2076 | N/A | \??\c:\tnhntb.exe | \??\c:\jjvjd.exe |
| PID 732 wrote to memory of 2076 | N/A | \??\c:\tnhntb.exe | \??\c:\jjvjd.exe |
| PID 732 wrote to memory of 2076 | N/A | \??\c:\tnhntb.exe | \??\c:\jjvjd.exe |
| PID 732 wrote to memory of 2076 | N/A | \??\c:\tnhntb.exe | \??\c:\jjvjd.exe |
| PID 2076 wrote to memory of 1556 | N/A | \??\c:\jjvjd.exe | \??\c:\ddvdv.exe |
| PID 2076 wrote to memory of 1556 | N/A | \??\c:\jjvjd.exe | \??\c:\ddvdv.exe |
| PID 2076 wrote to memory of 1556 | N/A | \??\c:\jjvjd.exe | \??\c:\ddvdv.exe |
| PID 2076 wrote to memory of 1556 | N/A | \??\c:\jjvjd.exe | \??\c:\ddvdv.exe |
Processes
C:\Users\Admin\AppData\Local\Temp\bd98292b03e32d2823900b389158a95409a42cbeb6a67703a156bcc7a6e0b19aN.exe
"C:\Users\Admin\AppData\Local\Temp\bd98292b03e32d2823900b389158a95409a42cbeb6a67703a156bcc7a6e0b19aN.exe"
\??\c:\pjdjd.exe
c:\pjdjd.exe
\??\c:\rxxlxfx.exe
c:\rxxlxfx.exe
\??\c:\nhbthn.exe
c:\nhbthn.exe
\??\c:\hbbbnb.exe
c:\hbbbnb.exe
\??\c:\rrxxlrf.exe
c:\rrxxlrf.exe
\??\c:\bhntnn.exe
c:\bhntnn.exe
\??\c:\dddvp.exe
c:\dddvp.exe
\??\c:\1pppv.exe
c:\1pppv.exe
\??\c:\7tnthb.exe
c:\7tnthb.exe
\??\c:\bbtntb.exe
c:\bbtntb.exe
\??\c:\dpppd.exe
c:\dpppd.exe
\??\c:\xrrlflf.exe
c:\xrrlflf.exe
\??\c:\7xrfrrf.exe
c:\7xrfrrf.exe
\??\c:\tnhntb.exe
c:\tnhntb.exe
\??\c:\jjvjd.exe
c:\jjvjd.exe
\??\c:\ddvdv.exe
c:\ddvdv.exe
\??\c:\llxlflf.exe
c:\llxlflf.exe
\??\c:\ffxxlfr.exe
c:\ffxxlfr.exe
\??\c:\hhtbhh.exe
c:\hhtbhh.exe
\??\c:\9ddpd.exe
c:\9ddpd.exe
\??\c:\7pvdj.exe
c:\7pvdj.exe
\??\c:\llxrlxl.exe
c:\llxrlxl.exe
\??\c:\ttbnbb.exe
c:\ttbnbb.exe
\??\c:\bbbtnt.exe
c:\bbbtnt.exe
\??\c:\vvvpj.exe
c:\vvvpj.exe
\??\c:\jjvjj.exe
c:\jjvjj.exe
\??\c:\xrlrffr.exe
c:\xrlrffr.exe
\??\c:\tnbnbn.exe
c:\tnbnbn.exe
\??\c:\hhthtb.exe
c:\hhthtb.exe
\??\c:\9vvdv.exe
c:\9vvdv.exe
\??\c:\jjjdj.exe
c:\jjjdj.exe
\??\c:\lfxlllx.exe
c:\lfxlllx.exe
\??\c:\ddvjv.exe
c:\ddvjv.exe
\??\c:\vppdj.exe
c:\vppdj.exe
\??\c:\ffxflrf.exe
c:\ffxflrf.exe
\??\c:\9fxflrx.exe
c:\9fxflrx.exe
\??\c:\bhbbnb.exe
c:\bhbbnb.exe
\??\c:\hhbnhh.exe
c:\hhbnhh.exe
\??\c:\9dpdp.exe
c:\9dpdp.exe
\??\c:\7vjpv.exe
c:\7vjpv.exe
\??\c:\3xxfflx.exe
c:\3xxfflx.exe
\??\c:\rrlfrrx.exe
c:\rrlfrrx.exe
\??\c:\ttbhth.exe
c:\ttbhth.exe
\??\c:\bbhnbh.exe
c:\bbhnbh.exe
\??\c:\vvvpd.exe
c:\vvvpd.exe
\??\c:\vvdjv.exe
c:\vvdjv.exe
\??\c:\xxflffr.exe
c:\xxflffr.exe
\??\c:\frfrlrf.exe
c:\frfrlrf.exe
\??\c:\tbtbtb.exe
c:\tbtbtb.exe
\??\c:\hbnhnt.exe
c:\hbnhnt.exe
\??\c:\hhthth.exe
c:\hhthth.exe
\??\c:\1jjdj.exe
c:\1jjdj.exe
\??\c:\7rxrrfr.exe
c:\7rxrrfr.exe
\??\c:\llxrfrf.exe
c:\llxrfrf.exe
\??\c:\nnhttb.exe
c:\nnhttb.exe
\??\c:\bthbbh.exe
c:\bthbbh.exe
\??\c:\ppvjv.exe
c:\ppvjv.exe
\??\c:\ddpjj.exe
c:\ddpjj.exe
\??\c:\rrlxlrf.exe
c:\rrlxlrf.exe
\??\c:\xrfxrxl.exe
c:\xrfxrxl.exe
\??\c:\1nnbhh.exe
c:\1nnbhh.exe
\??\c:\hbhnhn.exe
c:\hbhnhn.exe
\??\c:\jdppp.exe
c:\jdppp.exe
\??\c:\vpdjv.exe
c:\vpdjv.exe
\??\c:\ffxxxfr.exe
c:\ffxxxfr.exe
\??\c:\9rllrxl.exe
c:\9rllrxl.exe
\??\c:\tnhtbh.exe
c:\tnhtbh.exe
\??\c:\3ttnbh.exe
c:\3ttnbh.exe
\??\c:\jjvdd.exe
c:\jjvdd.exe
\??\c:\pjpvv.exe
c:\pjpvv.exe
\??\c:\lllxffr.exe
c:\lllxffr.exe
\??\c:\1rfxrxr.exe
c:\1rfxrxr.exe
\??\c:\tnbtbn.exe
c:\tnbtbn.exe
\??\c:\ttttnb.exe
c:\ttttnb.exe
\??\c:\3dddj.exe
c:\3dddj.exe
\??\c:\pjpvp.exe
c:\pjpvp.exe
\??\c:\lfrxxfx.exe
c:\lfrxxfx.exe
\??\c:\llrfxlx.exe
c:\llrfxlx.exe
\??\c:\xrrrrfr.exe
c:\xrrrrfr.exe
\??\c:\ttbnbt.exe
c:\ttbnbt.exe
\??\c:\dvvdp.exe
c:\dvvdp.exe
\??\c:\dvjjj.exe
c:\dvjjj.exe
\??\c:\llllxlr.exe
c:\llllxlr.exe
\??\c:\rrlrxxr.exe
c:\rrlrxxr.exe
\??\c:\1ttbhb.exe
c:\1ttbhb.exe
\??\c:\hhttnt.exe
c:\hhttnt.exe
\??\c:\jjpdp.exe
c:\jjpdp.exe
\??\c:\dvvdv.exe
c:\dvvdv.exe
\??\c:\flrflrx.exe
c:\flrflrx.exe
\??\c:\rlffllf.exe
c:\rlffllf.exe
\??\c:\ntbttb.exe
c:\ntbttb.exe
\??\c:\3hthnt.exe
c:\3hthnt.exe
\??\c:\pvddv.exe
c:\pvddv.exe
\??\c:\vvvvj.exe
c:\vvvvj.exe
\??\c:\9lrxxlx.exe
c:\9lrxxlx.exe
\??\c:\1nnhbh.exe
c:\1nnhbh.exe
\??\c:\7nhbbh.exe
c:\7nhbbh.exe
\??\c:\nnttth.exe
c:\nnttth.exe
\??\c:\vpjpd.exe
c:\vpjpd.exe
\??\c:\rrrrxlx.exe
c:\rrrrxlx.exe
\??\c:\xxxlfll.exe
c:\xxxlfll.exe
\??\c:\nntthh.exe
c:\nntthh.exe
\??\c:\nnhnbb.exe
c:\nnhnbb.exe
\??\c:\jjvvd.exe
c:\jjvvd.exe
\??\c:\1pjpd.exe
c:\1pjpd.exe
\??\c:\7jvjj.exe
c:\7jvjj.exe
\??\c:\rxffxxf.exe
c:\rxffxxf.exe
\??\c:\flrfrxl.exe
c:\flrfrxl.exe
\??\c:\nnntht.exe
c:\nnntht.exe
\??\c:\nnhthn.exe
c:\nnhthn.exe
\??\c:\pjpjv.exe
c:\pjpjv.exe
\??\c:\rrllflx.exe
c:\rrllflx.exe
\??\c:\5ffxllr.exe
c:\5ffxllr.exe
\??\c:\tnhbhh.exe
c:\tnhbhh.exe
\??\c:\5nttbh.exe
c:\5nttbh.exe
\??\c:\dvjpp.exe
c:\dvjpp.exe
\??\c:\3vvdv.exe
c:\3vvdv.exe
\??\c:\3xxxfrx.exe
c:\3xxxfrx.exe
\??\c:\rllxfrx.exe
c:\rllxfrx.exe
\??\c:\hhhbnb.exe
c:\hhhbnb.exe
\??\c:\3hhnnt.exe
c:\3hhnnt.exe
\??\c:\vpjdj.exe
c:\vpjdj.exe
\??\c:\jjvvp.exe
c:\jjvvp.exe
\??\c:\fffrrlx.exe
c:\fffrrlx.exe
\??\c:\llxrlxf.exe
c:\llxrlxf.exe
\??\c:\nhbnhn.exe
c:\nhbnhn.exe
\??\c:\tttbhn.exe
c:\tttbhn.exe
\??\c:\ppjjp.exe
c:\ppjjp.exe
\??\c:\pvdpv.exe
c:\pvdpv.exe
\??\c:\1lxfrrl.exe
c:\1lxfrrl.exe
\??\c:\lfxlflx.exe
c:\lfxlflx.exe
\??\c:\tttntt.exe
c:\tttntt.exe
\??\c:\hbbhbh.exe
c:\hbbhbh.exe
\??\c:\jpdpv.exe
c:\jpdpv.exe
\??\c:\vvvdv.exe
c:\vvvdv.exe
\??\c:\lrxrlff.exe
c:\lrxrlff.exe
\??\c:\rxllflf.exe
c:\rxllflf.exe
\??\c:\tttnbn.exe
c:\tttnbn.exe
\??\c:\7nbhtb.exe
c:\7nbhtb.exe
\??\c:\dpdjv.exe
c:\dpdjv.exe
\??\c:\pvvdp.exe
c:\pvvdp.exe
\??\c:\xfxfrxl.exe
c:\xfxfrxl.exe
\??\c:\hnhbnt.exe
c:\hnhbnt.exe
\??\c:\ttntnn.exe
c:\ttntnn.exe
\??\c:\vpdvj.exe
c:\vpdvj.exe
\??\c:\dpddd.exe
c:\dpddd.exe
\??\c:\lfxxxlf.exe
c:\lfxxxlf.exe
\??\c:\xxrlrrf.exe
c:\xxrlrrf.exe
\??\c:\3xfxlfr.exe
c:\3xfxlfr.exe
\??\c:\tbnthb.exe
c:\tbnthb.exe
\??\c:\ddvdj.exe
c:\ddvdj.exe
\??\c:\jjddv.exe
c:\jjddv.exe
\??\c:\9ffrfrl.exe
c:\9ffrfrl.exe
\??\c:\ffflrxl.exe
c:\ffflrxl.exe
\??\c:\btbnbh.exe
c:\btbnbh.exe
\??\c:\jdpvd.exe
c:\jdpvd.exe
\??\c:\ddppv.exe
c:\ddppv.exe
\??\c:\rlflrxx.exe
c:\rlflrxx.exe
\??\c:\rxxlfxl.exe
c:\rxxlfxl.exe
\??\c:\bbbtbb.exe
c:\bbbtbb.exe
\??\c:\hhthbn.exe
c:\hhthbn.exe
\??\c:\vddpd.exe
c:\vddpd.exe
\??\c:\jdvdj.exe
c:\jdvdj.exe
\??\c:\llxfrrr.exe
c:\llxfrrr.exe
\??\c:\lxfxxxr.exe
c:\lxfxxxr.exe
\??\c:\nntbnt.exe
c:\nntbnt.exe
\??\c:\7bbnht.exe
c:\7bbnht.exe
\??\c:\ppvvp.exe
c:\ppvvp.exe
\??\c:\djjpp.exe
c:\djjpp.exe
\??\c:\ffrllfr.exe
c:\ffrllfr.exe
\??\c:\rrffxxl.exe
c:\rrffxxl.exe
\??\c:\bhhbbb.exe
c:\bhhbbb.exe
\??\c:\hbbbnt.exe
c:\hbbbnt.exe
\??\c:\ppdpp.exe
c:\ppdpp.exe
\??\c:\vvpdp.exe
c:\vvpdp.exe
\??\c:\5vpdp.exe
c:\5vpdp.exe
\??\c:\rrxxllf.exe
c:\rrxxllf.exe
\??\c:\fflrrfr.exe
c:\fflrrfr.exe
\??\c:\btbhtt.exe
c:\btbhtt.exe
\??\c:\hhhhtb.exe
c:\hhhhtb.exe
\??\c:\vpvdp.exe
c:\vpvdp.exe
\??\c:\vvdpd.exe
c:\vvdpd.exe
\??\c:\ddppd.exe
c:\ddppd.exe
\??\c:\fflfrxl.exe
c:\fflfrxl.exe
\??\c:\lxllffr.exe
c:\lxllffr.exe
\??\c:\ttthtb.exe
c:\ttthtb.exe
\??\c:\tbthbn.exe
c:\tbthbn.exe
\??\c:\5ddjj.exe
c:\5ddjj.exe
\??\c:\vpdpd.exe
c:\vpdpd.exe
\??\c:\5jjpv.exe
c:\5jjpv.exe
\??\c:\xxxxxrf.exe
c:\xxxxxrf.exe
\??\c:\fxllffl.exe
c:\fxllffl.exe
\??\c:\9nhhnb.exe
c:\9nhhnb.exe
\??\c:\7nnnnb.exe
c:\7nnnnb.exe
\??\c:\ppddj.exe
c:\ppddj.exe
\??\c:\vdddv.exe
c:\vdddv.exe
\??\c:\3dvpv.exe
c:\3dvpv.exe
\??\c:\rlflrxl.exe
c:\rlflrxl.exe
\??\c:\xxxlxxl.exe
c:\xxxlxxl.exe
\??\c:\tnhntb.exe
c:\tnhntb.exe
\??\c:\7tntht.exe
c:\7tntht.exe
\??\c:\jdvjd.exe
c:\jdvjd.exe
\??\c:\1jjpj.exe
c:\1jjpj.exe
\??\c:\dvjvd.exe
c:\dvjvd.exe
\??\c:\rrlrffr.exe
c:\rrlrffr.exe
\??\c:\pjppd.exe
c:\pjppd.exe
\??\c:\lfxxffr.exe
c:\lfxxffr.exe
\??\c:\ffrxfrf.exe
c:\ffrxfrf.exe
\??\c:\5hbhbn.exe
c:\5hbhbn.exe
\??\c:\hhnbtb.exe
c:\hhnbtb.exe
\??\c:\vvvdd.exe
c:\vvvdd.exe
\??\c:\vpjjp.exe
c:\vpjjp.exe
\??\c:\5rxfrlr.exe
c:\5rxfrlr.exe
\??\c:\llffxfr.exe
c:\llffxfr.exe
\??\c:\lfxrxfr.exe
c:\lfxrxfr.exe
\??\c:\bbhhnb.exe
c:\bbhhnb.exe
\??\c:\bbhbnt.exe
c:\bbhbnt.exe
\??\c:\dvpdd.exe
c:\dvpdd.exe
\??\c:\pvjpd.exe
c:\pvjpd.exe
\??\c:\ffrfxlf.exe
c:\ffrfxlf.exe
\??\c:\xrrxffl.exe
c:\xrrxffl.exe
\??\c:\ttntnh.exe
c:\ttntnh.exe
\??\c:\bhtbnt.exe
c:\bhtbnt.exe
\??\c:\jdpvp.exe
c:\jdpvp.exe
\??\c:\3pvvp.exe
c:\3pvvp.exe
\??\c:\9xlfrxl.exe
c:\9xlfrxl.exe
\??\c:\rflxrfx.exe
c:\rflxrfx.exe
\??\c:\1hnbtt.exe
c:\1hnbtt.exe
\??\c:\tnhtnt.exe
c:\tnhtnt.exe
\??\c:\bhthnh.exe
c:\bhthnh.exe
\??\c:\7jdpd.exe
c:\7jdpd.exe
\??\c:\9jjvd.exe
c:\9jjvd.exe
\??\c:\9rrfrxf.exe
c:\9rrfrxf.exe
\??\c:\llrfrfl.exe
c:\llrfrfl.exe
\??\c:\5nhbnt.exe
c:\5nhbnt.exe
\??\c:\hhtthh.exe
c:\hhtthh.exe
\??\c:\vvjpp.exe
c:\vvjpp.exe
\??\c:\jjvdv.exe
c:\jjvdv.exe
\??\c:\3pppd.exe
c:\3pppd.exe
\??\c:\llfrlxr.exe
c:\llfrlxr.exe
\??\c:\9rlxrrf.exe
c:\9rlxrrf.exe
\??\c:\hbhtht.exe
c:\hbhtht.exe
\??\c:\1bbnnt.exe
c:\1bbnnt.exe
\??\c:\ddddj.exe
c:\ddddj.exe
\??\c:\djdvd.exe
c:\djdvd.exe
\??\c:\vpvvj.exe
c:\vpvvj.exe
\??\c:\5llrflf.exe
c:\5llrflf.exe
\??\c:\ffrxxxl.exe
c:\ffrxxxl.exe
\??\c:\ttnhht.exe
c:\ttnhht.exe
\??\c:\nnhnbh.exe
c:\nnhnbh.exe
\??\c:\5jdpv.exe
c:\5jdpv.exe
\??\c:\vpjjj.exe
c:\vpjjj.exe
\??\c:\fxlrxff.exe
c:\fxlrxff.exe
\??\c:\lffxflx.exe
c:\lffxflx.exe
\??\c:\1lfxrxf.exe
c:\1lfxrxf.exe
\??\c:\thnthn.exe
c:\thnthn.exe
\??\c:\bbbnhn.exe
c:\bbbnhn.exe
\??\c:\dvjjv.exe
c:\dvjjv.exe
\??\c:\jjvvd.exe
c:\jjvvd.exe
\??\c:\lfrrxxr.exe
c:\lfrrxxr.exe
\??\c:\rlfrfff.exe
c:\rlfrfff.exe
\??\c:\nhhbtn.exe
c:\nhhbtn.exe
\??\c:\ttnntb.exe
c:\ttnntb.exe
\??\c:\ppdpv.exe
c:\ppdpv.exe
\??\c:\5jpvd.exe
c:\5jpvd.exe
\??\c:\rrflrxl.exe
c:\rrflrxl.exe
\??\c:\llxxlrl.exe
c:\llxxlrl.exe
\??\c:\nhbntb.exe
c:\nhbntb.exe
\??\c:\thhbbt.exe
c:\thhbbt.exe
\??\c:\vvpdj.exe
c:\vvpdj.exe
\??\c:\ppdjp.exe
c:\ppdjp.exe
\??\c:\ddvjd.exe
c:\ddvjd.exe
\??\c:\1flrflx.exe
c:\1flrflx.exe
\??\c:\rxrxfrx.exe
c:\rxrxfrx.exe
\??\c:\1nntbh.exe
c:\1nntbh.exe
\??\c:\hhthbh.exe
c:\hhthbh.exe
\??\c:\9dpvd.exe
c:\9dpvd.exe
\??\c:\ppjvj.exe
c:\ppjvj.exe
\??\c:\rrrflrf.exe
c:\rrrflrf.exe
\??\c:\3fxlrxx.exe
c:\3fxlrxx.exe
\??\c:\tbbnnb.exe
c:\tbbnnb.exe
\??\c:\5nnnnt.exe
c:\5nnnnt.exe
\??\c:\pjvvd.exe
c:\pjvvd.exe
\??\c:\jdvvj.exe
c:\jdvvj.exe
\??\c:\pjdpd.exe
c:\pjdpd.exe
\??\c:\3rxfxlr.exe
c:\3rxfxlr.exe
\??\c:\xxxlxll.exe
c:\xxxlxll.exe
\??\c:\tnbbhn.exe
c:\tnbbhn.exe
\??\c:\nnhbnn.exe
c:\nnhbnn.exe
\??\c:\9jdjv.exe
c:\9jdjv.exe
\??\c:\vdvdd.exe
c:\vdvdd.exe
\??\c:\lrrrllf.exe
c:\lrrrllf.exe
\??\c:\fllffxl.exe
c:\fllffxl.exe
\??\c:\bbttnn.exe
c:\bbttnn.exe
\??\c:\nhtbbb.exe
c:\nhtbbb.exe
\??\c:\hhbtnh.exe
c:\hhbtnh.exe
\??\c:\vvjdv.exe
c:\vvjdv.exe
\??\c:\vvjdp.exe
c:\vvjdp.exe
\??\c:\1fxlffx.exe
c:\1fxlffx.exe
\??\c:\lllxflr.exe
c:\lllxflr.exe
\??\c:\hbttbb.exe
c:\hbttbb.exe
\??\c:\hhtnhh.exe
c:\hhtnhh.exe
\??\c:\pppdj.exe
c:\pppdj.exe
\??\c:\dppdp.exe
c:\dppdp.exe
\??\c:\jdjvj.exe
c:\jdjvj.exe
\??\c:\llflflx.exe
c:\llflflx.exe
\??\c:\rlflrrf.exe
c:\rlflrrf.exe
\??\c:\btbthn.exe
c:\btbthn.exe
\??\c:\3tbthh.exe
c:\3tbthh.exe
\??\c:\pjjpv.exe
c:\pjjpv.exe
\??\c:\5jjdj.exe
c:\5jjdj.exe
\??\c:\5rffxxx.exe
c:\5rffxxx.exe
\??\c:\flrllxl.exe
c:\flrllxl.exe
\??\c:\btnhbb.exe
c:\btnhbb.exe
\??\c:\hbnhbb.exe
c:\hbnhbb.exe
\??\c:\djdpv.exe
c:\djdpv.exe
\??\c:\5ddvd.exe
c:\5ddvd.exe
\??\c:\rrrlxfx.exe
c:\rrrlxfx.exe
\??\c:\rrxlrfx.exe
c:\rrxlrfx.exe
\??\c:\ffxlxff.exe
c:\ffxlxff.exe
\??\c:\nnnhbn.exe
c:\nnnhbn.exe
\??\c:\7djvj.exe
c:\7djvj.exe
\??\c:\djddv.exe
c:\djddv.exe
\??\c:\ddppp.exe
c:\ddppp.exe
\??\c:\fffrrfr.exe
c:\fffrrfr.exe
\??\c:\rrrxlrf.exe
c:\rrrxlrf.exe
\??\c:\nhnnhh.exe
c:\nhnnhh.exe
\??\c:\3btbhh.exe
c:\3btbhh.exe
\??\c:\ddjvd.exe
c:\ddjvd.exe
\??\c:\pvpjj.exe
c:\pvpjj.exe
\??\c:\fxlrflr.exe
c:\fxlrflr.exe
\??\c:\bhbhnn.exe
c:\bhbhnn.exe
\??\c:\tntbhn.exe
c:\tntbhn.exe
\??\c:\jjvdj.exe
c:\jjvdj.exe
\??\c:\dvpjv.exe
c:\dvpjv.exe
\??\c:\llxxllf.exe
c:\llxxllf.exe
\??\c:\fxrlflx.exe
c:\fxrlflx.exe
\??\c:\hbnbtt.exe
c:\hbnbtt.exe
\??\c:\7hhtth.exe
c:\7hhtth.exe
\??\c:\jjdpd.exe
c:\jjdpd.exe
\??\c:\jdvdp.exe
c:\jdvdp.exe
\??\c:\rrrxxfl.exe
c:\rrrxxfl.exe
\??\c:\fflrlrl.exe
c:\fflrlrl.exe
\??\c:\ffflxfr.exe
c:\ffflxfr.exe
\??\c:\hnhhnt.exe
c:\hnhhnt.exe
\??\c:\nhtbhh.exe
c:\nhtbhh.exe
\??\c:\7jjvj.exe
c:\7jjvj.exe
\??\c:\5pvdj.exe
c:\5pvdj.exe
\??\c:\lfrrrxf.exe
c:\lfrrrxf.exe
\??\c:\fflrlrl.exe
c:\fflrlrl.exe
\??\c:\tnbhhb.exe
c:\tnbhhb.exe
\??\c:\tnnbbn.exe
c:\tnnbbn.exe
\??\c:\vvddd.exe
c:\vvddd.exe
\??\c:\vvddj.exe
c:\vvddj.exe
\??\c:\vjjpd.exe
c:\vjjpd.exe
\??\c:\flxfxfr.exe
c:\flxfxfr.exe
\??\c:\fxlxrfx.exe
c:\fxlxrfx.exe
\??\c:\tnbtht.exe
c:\tnbtht.exe
\??\c:\hbnttb.exe
c:\hbnttb.exe
\??\c:\ddddj.exe
c:\ddddj.exe
\??\c:\1vpjv.exe
c:\1vpjv.exe
\??\c:\5pvvp.exe
c:\5pvvp.exe
\??\c:\rxxfrrf.exe
c:\rxxfrrf.exe
\??\c:\nntbnt.exe
c:\nntbnt.exe
\??\c:\thntnn.exe
c:\thntnn.exe
\??\c:\nnbhnn.exe
c:\nnbhnn.exe
\??\c:\7jvdp.exe
c:\7jvdp.exe
\??\c:\pjvvp.exe
c:\pjvvp.exe
\??\c:\rllxlxf.exe
c:\rllxlxf.exe
\??\c:\5xllxll.exe
c:\5xllxll.exe
\??\c:\5nntbb.exe
c:\5nntbb.exe
\??\c:\tthhnn.exe
c:\tthhnn.exe
\??\c:\jjpjp.exe
c:\jjpjp.exe
\??\c:\ppdpd.exe
c:\ppdpd.exe
\??\c:\fxlxffr.exe
c:\fxlxffr.exe
\??\c:\flfxrrl.exe
c:\flfxrrl.exe
\??\c:\tnhbnt.exe
c:\tnhbnt.exe
\??\c:\ttbbbh.exe
c:\ttbbbh.exe
\??\c:\nhhtbt.exe
c:\nhhtbt.exe
\??\c:\djddp.exe
c:\djddp.exe
\??\c:\ppdjp.exe
c:\ppdjp.exe
\??\c:\llxrflx.exe
c:\llxrflx.exe
\??\c:\xrllxxl.exe
c:\xrllxxl.exe
\??\c:\1thnbt.exe
c:\1thnbt.exe
\??\c:\nnbhbh.exe
c:\nnbhbh.exe
\??\c:\jjpdp.exe
c:\jjpdp.exe
\??\c:\jjdjd.exe
c:\jjdjd.exe
\??\c:\lfrxflf.exe
c:\lfrxflf.exe
\??\c:\xrlfrrf.exe
c:\xrlfrrf.exe
\??\c:\ntbnnn.exe
c:\ntbnnn.exe
\??\c:\nbhbhb.exe
c:\nbhbhb.exe
\??\c:\vvdpd.exe
c:\vvdpd.exe
\??\c:\djjdp.exe
c:\djjdp.exe
\??\c:\fxfrrrr.exe
c:\fxfrrrr.exe
\??\c:\xxlrxlf.exe
c:\xxlrxlf.exe
\??\c:\bbnnhb.exe
c:\bbnnhb.exe
\??\c:\htbbnn.exe
c:\htbbnn.exe
\??\c:\pppvj.exe
c:\pppvj.exe
\??\c:\vvdvj.exe
c:\vvdvj.exe
\??\c:\lrlrxxx.exe
c:\lrlrxxx.exe
\??\c:\fllxxfr.exe
c:\fllxxfr.exe
\??\c:\hnhthh.exe
c:\hnhthh.exe
\??\c:\tnhnnb.exe
c:\tnhnnb.exe
\??\c:\1vvdj.exe
c:\1vvdj.exe
\??\c:\djdjv.exe
c:\djdjv.exe
\??\c:\xrllflx.exe
c:\xrllflx.exe
\??\c:\xrrlrxl.exe
c:\xrrlrxl.exe
\??\c:\bbtnht.exe
c:\bbtnht.exe
\??\c:\ttnnhn.exe
c:\ttnnhn.exe
\??\c:\jjvvj.exe
c:\jjvvj.exe
\??\c:\1jpjp.exe
c:\1jpjp.exe
\??\c:\1fflxfr.exe
c:\1fflxfr.exe
\??\c:\rrfrflx.exe
c:\rrfrflx.exe
\??\c:\bhnbnn.exe
c:\bhnbnn.exe
\??\c:\bthtbn.exe
c:\bthtbn.exe
\??\c:\ppjdv.exe
c:\ppjdv.exe
\??\c:\ddvjd.exe
c:\ddvjd.exe
\??\c:\ffxxllf.exe
c:\ffxxllf.exe
\??\c:\llfllxl.exe
c:\llfllxl.exe
\??\c:\nhtnbn.exe
c:\nhtnbn.exe
\??\c:\5nhhnn.exe
c:\5nhhnn.exe
\??\c:\pdjjp.exe
c:\pdjjp.exe
\??\c:\ppdpj.exe
c:\ppdpj.exe
\??\c:\5xxlfrf.exe
c:\5xxlfrf.exe
\??\c:\xxrfxfl.exe
c:\xxrfxfl.exe
\??\c:\tthtnn.exe
c:\tthtnn.exe
\??\c:\bbthbb.exe
c:\bbthbb.exe
\??\c:\jjdpj.exe
c:\jjdpj.exe
\??\c:\ddvdv.exe
c:\ddvdv.exe
\??\c:\llxlflf.exe
c:\llxlflf.exe
\??\c:\rlxxffr.exe
c:\rlxxffr.exe
\??\c:\rlflllx.exe
c:\rlflllx.exe
\??\c:\hhtbnt.exe
c:\hhtbnt.exe
\??\c:\jjddp.exe
c:\jjddp.exe
\??\c:\jjjdj.exe
c:\jjjdj.exe
\??\c:\pjdjj.exe
c:\pjdjj.exe
\??\c:\rrfrlrf.exe
c:\rrfrlrf.exe
\??\c:\rrfxlrf.exe
c:\rrfxlrf.exe
\??\c:\xxfrffx.exe
c:\xxfrffx.exe
\??\c:\nnbthn.exe
c:\nnbthn.exe
\??\c:\bbbtbn.exe
c:\bbbtbn.exe
\??\c:\5pvvp.exe
c:\5pvvp.exe
\??\c:\9pjdp.exe
c:\9pjdp.exe
\??\c:\rlflrxf.exe
c:\rlflrxf.exe
\??\c:\3rxfxfl.exe
c:\3rxfxfl.exe
\??\c:\hbbtbh.exe
c:\hbbtbh.exe
\??\c:\9vdvj.exe
c:\9vdvj.exe
\??\c:\pvjpj.exe
c:\pvjpj.exe
\??\c:\xxrfrxr.exe
c:\xxrfrxr.exe
\??\c:\hnnnhh.exe
c:\hnnnhh.exe
\??\c:\nnntnn.exe
c:\nnntnn.exe
\??\c:\9pppd.exe
c:\9pppd.exe
\??\c:\1dvvd.exe
c:\1dvvd.exe
\??\c:\rlflxfr.exe
c:\rlflxfr.exe
\??\c:\fxrfxfl.exe
c:\fxrfxfl.exe
\??\c:\bbnntb.exe
c:\bbnntb.exe
\??\c:\7nnhbt.exe
c:\7nnhbt.exe
\??\c:\9ttntb.exe
c:\9ttntb.exe
\??\c:\vvdvv.exe
c:\vvdvv.exe
\??\c:\9rlrfrr.exe
c:\9rlrfrr.exe
\??\c:\3lxlflf.exe
c:\3lxlflf.exe
\??\c:\rrrxlxl.exe
c:\rrrxlxl.exe
\??\c:\9hbtnb.exe
c:\9hbtnb.exe
\??\c:\tthnhh.exe
c:\tthnhh.exe
\??\c:\jjjvj.exe
c:\jjjvj.exe
\??\c:\ppjjd.exe
c:\ppjjd.exe
\??\c:\rrllxlx.exe
c:\rrllxlx.exe
\??\c:\9ffrfrf.exe
c:\9ffrfrf.exe
\??\c:\hhhtht.exe
c:\hhhtht.exe
\??\c:\nnbtbh.exe
c:\nnbtbh.exe
\??\c:\tthnbh.exe
c:\tthnbh.exe
\??\c:\pjjpv.exe
c:\pjjpv.exe
\??\c:\jdppj.exe
c:\jdppj.exe
\??\c:\1fxxrff.exe
c:\1fxxrff.exe
\??\c:\1xfrlxl.exe
c:\1xfrlxl.exe
\??\c:\ntnhtb.exe
c:\ntnhtb.exe
\??\c:\nhtthb.exe
c:\nhtthb.exe
\??\c:\3ddvv.exe
c:\3ddvv.exe
\??\c:\5ppvd.exe
c:\5ppvd.exe
\??\c:\1llxfxl.exe
c:\1llxfxl.exe
\??\c:\1xfrlrl.exe
c:\1xfrlrl.exe
\??\c:\lrfxlff.exe
c:\lrfxlff.exe
\??\c:\bhhbbh.exe
c:\bhhbbh.exe
\??\c:\5ppdj.exe
c:\5ppdj.exe
\??\c:\ddjdp.exe
c:\ddjdp.exe
\??\c:\llflxxl.exe
c:\llflxxl.exe
\??\c:\7flrlfx.exe
c:\7flrlfx.exe
\??\c:\bbnbbh.exe
c:\bbnbbh.exe
\??\c:\tnhtnb.exe
c:\tnhtnb.exe
\??\c:\nnbhth.exe
c:\nnbhth.exe
\??\c:\djjvj.exe
c:\djjvj.exe
\??\c:\jppdd.exe
c:\jppdd.exe
\??\c:\lllxflf.exe
c:\lllxflf.exe
\??\c:\rxrlrxl.exe
c:\rxrlrxl.exe
\??\c:\tbhthn.exe
c:\tbhthn.exe
\??\c:\bbbnhh.exe
c:\bbbnhh.exe
\??\c:\dddvj.exe
c:\dddvj.exe
\??\c:\dpppv.exe
c:\dpppv.exe
\??\c:\fxrxlrf.exe
c:\fxrxlrf.exe
\??\c:\5xxlrxl.exe
c:\5xxlrxl.exe
\??\c:\5nhtbh.exe
c:\5nhtbh.exe
\??\c:\hnhtnt.exe
c:\hnhtnt.exe
\??\c:\ppvjj.exe
c:\ppvjj.exe
\??\c:\5pjjp.exe
c:\5pjjp.exe
\??\c:\xrlrllf.exe
c:\xrlrllf.exe
\??\c:\lfxflrl.exe
c:\lfxflrl.exe
\??\c:\ffffxfx.exe
c:\ffffxfx.exe
\??\c:\bbthbn.exe
c:\bbthbn.exe
\??\c:\ntbhnt.exe
c:\ntbhnt.exe
\??\c:\jjdvj.exe
c:\jjdvj.exe
\??\c:\ppjvj.exe
c:\ppjvj.exe
\??\c:\9xrflrx.exe
c:\9xrflrx.exe
\??\c:\lrrfxll.exe
c:\lrrfxll.exe
\??\c:\hbhntb.exe
c:\hbhntb.exe
\??\c:\hhtbtb.exe
c:\hhtbtb.exe
\??\c:\9pjjp.exe
c:\9pjjp.exe
\??\c:\9dvjd.exe
c:\9dvjd.exe
\??\c:\7ffxlrf.exe
c:\7ffxlrf.exe
\??\c:\llxffrf.exe
c:\llxffrf.exe
\??\c:\5bbntn.exe
c:\5bbntn.exe
\??\c:\1hbntb.exe
c:\1hbntb.exe
\??\c:\pjjpv.exe
c:\pjjpv.exe
\??\c:\dppvd.exe
c:\dppvd.exe
\??\c:\jjjdj.exe
c:\jjjdj.exe
\??\c:\lrfrrff.exe
c:\lrfrrff.exe
\??\c:\1lxrfrf.exe
c:\1lxrfrf.exe
\??\c:\btnhtt.exe
c:\btnhtt.exe
\??\c:\5ttbtb.exe
c:\5ttbtb.exe
\??\c:\7dpdj.exe
c:\7dpdj.exe
\??\c:\jdppv.exe
c:\jdppv.exe
\??\c:\7ffllrf.exe
c:\7ffllrf.exe
\??\c:\rlllrrf.exe
c:\rlllrrf.exe
\??\c:\tbhthn.exe
c:\tbhthn.exe
\??\c:\tththh.exe
c:\tththh.exe
\??\c:\vvvpd.exe
c:\vvvpd.exe
\??\c:\7jjpv.exe
c:\7jjpv.exe
\??\c:\9rrlxlx.exe
c:\9rrlxlx.exe
\??\c:\llxlxrf.exe
c:\llxlxrf.exe
\??\c:\1htthh.exe
c:\1htthh.exe
\??\c:\9tntht.exe
c:\9tntht.exe
\??\c:\jjdpv.exe
c:\jjdpv.exe
\??\c:\5pdvp.exe
c:\5pdvp.exe
\??\c:\djpjp.exe
c:\djpjp.exe
\??\c:\xrxfxfr.exe
c:\xrxfxfr.exe
\??\c:\1ffrffr.exe
c:\1ffrffr.exe
\??\c:\9tnhhh.exe
c:\9tnhhh.exe
\??\c:\ntnbtb.exe
c:\ntnbtb.exe
\??\c:\vpdpv.exe
c:\vpdpv.exe
\??\c:\jjpvd.exe
c:\jjpvd.exe
\??\c:\xfxfrfx.exe
c:\xfxfrfx.exe
\??\c:\9rrflxf.exe
c:\9rrflxf.exe
\??\c:\tnhtbn.exe
c:\tnhtbn.exe
\??\c:\btbhhh.exe
c:\btbhhh.exe
\??\c:\9tnnnt.exe
c:\9tnnnt.exe
\??\c:\ddjdp.exe
c:\ddjdp.exe
\??\c:\jdlrf.exe
c:\jdlrf.exe
\??\c:\3xlfllr.exe
c:\3xlfllr.exe
\??\c:\rxlxflr.exe
c:\rxlxflr.exe
\??\c:\nhthtt.exe
c:\nhthtt.exe
\??\c:\nnthth.exe
c:\nnthth.exe
\??\c:\1pdvd.exe
c:\1pdvd.exe
\??\c:\dpjjj.exe
c:\dpjjj.exe
\??\c:\rlrxfll.exe
c:\rlrxfll.exe
\??\c:\7llrffr.exe
c:\7llrffr.exe
\??\c:\ttnbnt.exe
c:\ttnbnt.exe
\??\c:\ttnbnn.exe
c:\ttnbnn.exe
\??\c:\9dpdd.exe
c:\9dpdd.exe
\??\c:\dvpjv.exe
c:\dvpjv.exe
\??\c:\rrlfflf.exe
c:\rrlfflf.exe
\??\c:\7fflffr.exe
c:\7fflffr.exe
\??\c:\1nthtb.exe
c:\1nthtb.exe
\??\c:\nthbth.exe
c:\nthbth.exe
\??\c:\pjdjv.exe
c:\pjdjv.exe
\??\c:\7djvj.exe
c:\7djvj.exe
\??\c:\ddpvd.exe
c:\ddpvd.exe
\??\c:\xrflrrx.exe
c:\xrflrrx.exe
\??\c:\xrrflrf.exe
c:\xrrflrf.exe
\??\c:\hhbhtb.exe
c:\hhbhtb.exe
\??\c:\7nbnbb.exe
c:\7nbnbb.exe
\??\c:\dvjjv.exe
c:\dvjjv.exe
\??\c:\pvdpp.exe
c:\pvdpp.exe
\??\c:\xrrxrxf.exe
c:\xrrxrxf.exe
\??\c:\rlrlfxf.exe
c:\rlrlfxf.exe
\??\c:\1nnhbn.exe
c:\1nnhbn.exe
\??\c:\htbbhh.exe
c:\htbbhh.exe
\??\c:\vpdpp.exe
c:\vpdpp.exe
\??\c:\5dvvd.exe
c:\5dvvd.exe
\??\c:\rlffrxf.exe
c:\rlffrxf.exe
\??\c:\9lllffr.exe
c:\9lllffr.exe
\??\c:\7btbtt.exe
c:\7btbtt.exe
\??\c:\3tnthh.exe
c:\3tnthh.exe
\??\c:\tntbhh.exe
c:\tntbhh.exe
\??\c:\vjpjj.exe
c:\vjpjj.exe
\??\c:\vpvpv.exe
c:\vpvpv.exe
\??\c:\rfllrrr.exe
c:\rfllrrr.exe
\??\c:\lllrlrf.exe
c:\lllrlrf.exe
\??\c:\tnhhnn.exe
c:\tnhhnn.exe
\??\c:\hhntbn.exe
c:\hhntbn.exe
\??\c:\jjvdp.exe
c:\jjvdp.exe
\??\c:\vvjpd.exe
c:\vvjpd.exe
\??\c:\ffrrxxf.exe
c:\ffrrxxf.exe
\??\c:\flfxxxr.exe
c:\flfxxxr.exe
\??\c:\bbhhhh.exe
c:\bbhhhh.exe
\??\c:\nhbnth.exe
c:\nhbnth.exe
\??\c:\7jdpd.exe
c:\7jdpd.exe
\??\c:\5ddvd.exe
c:\5ddvd.exe
\??\c:\frlfffr.exe
c:\frlfffr.exe
\??\c:\rlxfxxl.exe
c:\rlxfxxl.exe
\??\c:\ttnhth.exe
c:\ttnhth.exe
\??\c:\tbbtth.exe
c:\tbbtth.exe
\??\c:\7jdpv.exe
c:\7jdpv.exe
\??\c:\djddv.exe
c:\djddv.exe
\??\c:\rrlfxxl.exe
c:\rrlfxxl.exe
\??\c:\fxlfrfr.exe
c:\fxlfrfr.exe
\??\c:\dvppp.exe
c:\dvppp.exe
\??\c:\dvpdd.exe
c:\dvpdd.exe
\??\c:\1ffrrfr.exe
c:\1ffrrfr.exe
\??\c:\xrlrxfr.exe
c:\xrlrxfr.exe
\??\c:\bbthhb.exe
c:\bbthhb.exe
\??\c:\1bttbn.exe
c:\1bttbn.exe
\??\c:\jvpvd.exe
c:\jvpvd.exe
\??\c:\dvjvv.exe
c:\dvjvv.exe
\??\c:\dvpdp.exe
c:\dvpdp.exe
\??\c:\9xrflrr.exe
c:\9xrflrr.exe
\??\c:\bnbnnt.exe
c:\bnbnnt.exe
\??\c:\bthntb.exe
c:\bthntb.exe
\??\c:\3dvdj.exe
c:\3dvdj.exe
\??\c:\pjdjd.exe
c:\pjdjd.exe
\??\c:\1jvdp.exe
c:\1jvdp.exe
\??\c:\rrxflrf.exe
c:\rrxflrf.exe
\??\c:\7lflrrf.exe
c:\7lflrrf.exe
\??\c:\hhthht.exe
c:\hhthht.exe
\??\c:\htnbnn.exe
c:\htnbnn.exe
\??\c:\3vddj.exe
c:\3vddj.exe
\??\c:\ddjdv.exe
c:\ddjdv.exe
\??\c:\lfxxllf.exe
c:\lfxxllf.exe
\??\c:\xfxrffx.exe
c:\xfxrffx.exe
\??\c:\nhtbtb.exe
c:\nhtbtb.exe
\??\c:\1btbnt.exe
c:\1btbnt.exe
\??\c:\jdpvd.exe
c:\jdpvd.exe
\??\c:\vjdjv.exe
c:\vjdjv.exe
\??\c:\3xxfflx.exe
c:\3xxfflx.exe
\??\c:\fxllxfr.exe
c:\fxllxfr.exe
\??\c:\thtbtb.exe
c:\thtbtb.exe
\??\c:\hhtnnt.exe
c:\hhtnnt.exe
\??\c:\ddvdv.exe
c:\ddvdv.exe
\??\c:\dvjpp.exe
c:\dvjpp.exe
\??\c:\lllrlll.exe
c:\lllrlll.exe
\??\c:\rrlxffr.exe
c:\rrlxffr.exe
\??\c:\3rrxlrx.exe
c:\3rrxlrx.exe
\??\c:\7bnntt.exe
c:\7bnntt.exe
\??\c:\5vjpv.exe
c:\5vjpv.exe
\??\c:\5jjpp.exe
c:\5jjpp.exe
\??\c:\rrrlrfx.exe
c:\rrrlrfx.exe
\??\c:\5lxlxlr.exe
c:\5lxlxlr.exe
\??\c:\ttnbhn.exe
c:\ttnbhn.exe
\??\c:\nnhtnb.exe
c:\nnhtnb.exe
\??\c:\hbbbnn.exe
c:\hbbbnn.exe
\??\c:\dvpjv.exe
c:\dvpjv.exe
\??\c:\dvppd.exe
c:\dvppd.exe
\??\c:\lxllxxx.exe
c:\lxllxxx.exe
\??\c:\xrfrrrf.exe
c:\xrfrrrf.exe
\??\c:\btntnt.exe
c:\btntnt.exe
\??\c:\hbbtbn.exe
c:\hbbtbn.exe
\??\c:\jdjdd.exe
c:\jdjdd.exe
\??\c:\ppddp.exe
c:\ppddp.exe
\??\c:\fxxxflr.exe
c:\fxxxflr.exe
\??\c:\lfxlrrf.exe
c:\lfxlrrf.exe
\??\c:\hhtnbn.exe
c:\hhtnbn.exe
\??\c:\bhbbnt.exe
c:\bhbbnt.exe
\??\c:\9vppv.exe
c:\9vppv.exe
\??\c:\5vvjv.exe
c:\5vvjv.exe
\??\c:\fxxrffl.exe
c:\fxxrffl.exe
\??\c:\rxflxfr.exe
c:\rxflxfr.exe
\??\c:\5lxfffl.exe
c:\5lxfffl.exe
\??\c:\7ttthn.exe
c:\7ttthn.exe
\??\c:\ddvdd.exe
c:\ddvdd.exe
\??\c:\3vpvp.exe
c:\3vpvp.exe
\??\c:\xlffllf.exe
c:\xlffllf.exe
\??\c:\fxlfrxl.exe
c:\fxlfrxl.exe
\??\c:\bbtnbb.exe
c:\bbtnbb.exe
\??\c:\nhbnth.exe
c:\nhbnth.exe
\??\c:\1vjpv.exe
c:\1vjpv.exe
\??\c:\5ppdj.exe
c:\5ppdj.exe
\??\c:\frxxffl.exe
c:\frxxffl.exe
\??\c:\7fxlflr.exe
c:\7fxlflr.exe
\??\c:\nbhhhn.exe
c:\nbhhhn.exe
\??\c:\bbnntt.exe
c:\bbnntt.exe
\??\c:\jdjpp.exe
c:\jdjpp.exe
\??\c:\7vpvv.exe
c:\7vpvv.exe
\??\c:\lxflxxf.exe
c:\lxflxxf.exe
\??\c:\lrffxff.exe
c:\lrffxff.exe
\??\c:\5nnnnn.exe
c:\5nnnnn.exe
\??\c:\thtnbh.exe
c:\thtnbh.exe
\??\c:\btnbnt.exe
c:\btnbnt.exe
\??\c:\vvjvp.exe
c:\vvjvp.exe
\??\c:\dvdjj.exe
c:\dvdjj.exe
\??\c:\rrfrflx.exe
c:\rrfrflx.exe
\??\c:\7frrfff.exe
c:\7frrfff.exe
\??\c:\ttnbnh.exe
c:\ttnbnh.exe
\??\c:\hbnnbb.exe
c:\hbnnbb.exe
\??\c:\vjjdj.exe
c:\vjjdj.exe
\??\c:\3dvpd.exe
c:\3dvpd.exe
\??\c:\lfxfrfr.exe
c:\lfxfrfr.exe
\??\c:\rllxxfx.exe
c:\rllxxfx.exe
\??\c:\nnhhnb.exe
c:\nnhhnb.exe
\??\c:\7bthtt.exe
c:\7bthtt.exe
\??\c:\vpdjp.exe
c:\vpdjp.exe
\??\c:\vjvjp.exe
c:\vjvjp.exe
\??\c:\fxllxlr.exe
c:\fxllxlr.exe
\??\c:\lxlxxxf.exe
c:\lxlxxxf.exe
\??\c:\hhhbnt.exe
c:\hhhbnt.exe
\??\c:\1bttnh.exe
c:\1bttnh.exe
\??\c:\vpdjd.exe
c:\vpdjd.exe
\??\c:\vjppv.exe
c:\vjppv.exe
\??\c:\jvdjp.exe
c:\jvdjp.exe
\??\c:\fxllxxl.exe
c:\fxllxxl.exe
\??\c:\lllxrxl.exe
c:\lllxrxl.exe
\??\c:\tthnnn.exe
c:\tthnnn.exe
\??\c:\nntbhn.exe
c:\nntbhn.exe
\??\c:\7pvvd.exe
c:\7pvvd.exe
\??\c:\1jjpd.exe
c:\1jjpd.exe
\??\c:\7lxfffl.exe
c:\7lxfffl.exe
\??\c:\3llrxlx.exe
c:\3llrxlx.exe
\??\c:\3hbhhh.exe
c:\3hbhhh.exe
\??\c:\nnhnth.exe
c:\nnhnth.exe
\??\c:\ddvdj.exe
c:\ddvdj.exe
\??\c:\pjddp.exe
c:\pjddp.exe
\??\c:\lfxflrl.exe
c:\lfxflrl.exe
\??\c:\xfrxlrf.exe
c:\xfrxlrf.exe
\??\c:\rrlffrr.exe
c:\rrlffrr.exe
\??\c:\hhtbhb.exe
c:\hhtbhb.exe
\??\c:\7tnntb.exe
c:\7tnntb.exe
\??\c:\vvpvd.exe
c:\vvpvd.exe
\??\c:\jdvpd.exe
c:\jdvpd.exe
\??\c:\fffrxxf.exe
c:\fffrxxf.exe
\??\c:\rlfrffr.exe
c:\rlfrffr.exe
\??\c:\nnhbhn.exe
c:\nnhbhn.exe
\??\c:\7hbnnt.exe
c:\7hbnnt.exe
\??\c:\dvjpv.exe
c:\dvjpv.exe
\??\c:\5vjjp.exe
c:\5vjjp.exe
\??\c:\9rxfrfr.exe
c:\9rxfrfr.exe
\??\c:\lxrfxxx.exe
c:\lxrfxxx.exe
\??\c:\btthtb.exe
c:\btthtb.exe
\??\c:\bthbhh.exe
c:\bthbhh.exe
\??\c:\pjvdp.exe
c:\pjvdp.exe
\??\c:\ppdpv.exe
c:\ppdpv.exe
\??\c:\1xxxffr.exe
c:\1xxxffr.exe
\??\c:\xrrxrxx.exe
c:\xrrxrxx.exe
\??\c:\tnhttn.exe
c:\tnhttn.exe
\??\c:\tnbnnn.exe
c:\tnbnnn.exe
\??\c:\ppjvj.exe
c:\ppjvj.exe
\??\c:\vppvp.exe
c:\vppvp.exe
\??\c:\rxlxrrf.exe
c:\rxlxrrf.exe
\??\c:\rllrflf.exe
c:\rllrflf.exe
\??\c:\ffrrflx.exe
c:\ffrrflx.exe
\??\c:\bbnthh.exe
c:\bbnthh.exe
\??\c:\nhhhnb.exe
c:\nhhhnb.exe
\??\c:\3jpvd.exe
c:\3jpvd.exe
\??\c:\vjddd.exe
c:\vjddd.exe
\??\c:\fxffxxl.exe
c:\fxffxxl.exe
\??\c:\rfrxfll.exe
c:\rfrxfll.exe
\??\c:\3bnthh.exe
c:\3bnthh.exe
\??\c:\tnbbtt.exe
c:\tnbbtt.exe
\??\c:\dvdjp.exe
c:\dvdjp.exe
\??\c:\vppdv.exe
c:\vppdv.exe
\??\c:\xlrxfxx.exe
c:\xlrxfxx.exe
\??\c:\llffrxx.exe
c:\llffrxx.exe
\??\c:\5rllxxx.exe
c:\5rllxxx.exe
\??\c:\thbtht.exe
c:\thbtht.exe
\??\c:\tnhntb.exe
c:\tnhntb.exe
\??\c:\9pvpv.exe
c:\9pvpv.exe
\??\c:\vvpvp.exe
c:\vvpvp.exe
\??\c:\7fxlrxl.exe
c:\7fxlrxl.exe
\??\c:\llrrlll.exe
c:\llrrlll.exe
\??\c:\5tnnhh.exe
c:\5tnnhh.exe
\??\c:\7thhtn.exe
c:\7thhtn.exe
\??\c:\tnhhbb.exe
c:\tnhhbb.exe
\??\c:\vpvvd.exe
c:\vpvvd.exe
\??\c:\dvppv.exe
c:\dvppv.exe
\??\c:\rrfrrrf.exe
c:\rrfrrrf.exe
\??\c:\1fxlxxf.exe
c:\1fxlxxf.exe
\??\c:\rlxflrf.exe
c:\rlxflrf.exe
\??\c:\ththnn.exe
c:\ththnn.exe
\??\c:\hbhhtt.exe
c:\hbhhtt.exe
\??\c:\ppdpv.exe
c:\ppdpv.exe
\??\c:\vpjpd.exe
c:\vpjpd.exe
\??\c:\lxffrrx.exe
c:\lxffrrx.exe
\??\c:\xlffllx.exe
c:\xlffllx.exe
\??\c:\hthnnt.exe
c:\hthnnt.exe
\??\c:\7hhnhb.exe
c:\7hhnhb.exe
\??\c:\3pdvd.exe
c:\3pdvd.exe
\??\c:\5jjjj.exe
c:\5jjjj.exe
\??\c:\9lxfflx.exe
c:\9lxfflx.exe
\??\c:\xfllfxx.exe
c:\xfllfxx.exe
\??\c:\xrxfllx.exe
c:\xrxfllx.exe
\??\c:\btbhnh.exe
c:\btbhnh.exe
\??\c:\nbhbbt.exe
c:\nbhbbt.exe
\??\c:\pjdvv.exe
c:\pjdvv.exe
\??\c:\pjvpp.exe
c:\pjvpp.exe
\??\c:\1rfllff.exe
c:\1rfllff.exe
\??\c:\rllrflf.exe
c:\rllrflf.exe
\??\c:\btnbhh.exe
c:\btnbhh.exe
\??\c:\thhnnn.exe
c:\thhnnn.exe
\??\c:\dvjvj.exe
c:\dvjvj.exe
\??\c:\jvdvd.exe
c:\jvdvd.exe
\??\c:\pdpvj.exe
c:\pdpvj.exe
\??\c:\xlflrxx.exe
c:\xlflrxx.exe
\??\c:\9rlrrxf.exe
c:\9rlrrxf.exe
\??\c:\nhnbtt.exe
c:\nhnbtt.exe
\??\c:\ttntnh.exe
c:\ttntnh.exe
\??\c:\vpdpv.exe
c:\vpdpv.exe
\??\c:\1pjjp.exe
c:\1pjjp.exe
\??\c:\fxlrrrx.exe
c:\fxlrrrx.exe
\??\c:\rlfrrlr.exe
c:\rlfrrlr.exe
\??\c:\7lrrxfr.exe
c:\7lrrxfr.exe
\??\c:\thbhhh.exe
c:\thbhhh.exe
\??\c:\1htbbb.exe
c:\1htbbb.exe
\??\c:\vpddp.exe
c:\vpddp.exe
\??\c:\vpjpd.exe
c:\vpjpd.exe
\??\c:\9fflxff.exe
c:\9fflxff.exe
\??\c:\rllxfrf.exe
c:\rllxfrf.exe
\??\c:\hbnntt.exe
c:\hbnntt.exe
\??\c:\hhttnn.exe
c:\hhttnn.exe
\??\c:\jdjjp.exe
c:\jdjjp.exe
\??\c:\3pvvd.exe
c:\3pvvd.exe
\??\c:\rffffff.exe
c:\rffffff.exe
\??\c:\rlxlrxf.exe
c:\rlxlrxf.exe
\??\c:\7xflrxl.exe
c:\7xflrxl.exe
\??\c:\ttnbbh.exe
c:\ttnbbh.exe
\??\c:\3httnn.exe
c:\3httnn.exe
\??\c:\3pjpp.exe
c:\3pjpp.exe
\??\c:\vjdjj.exe
c:\vjdjj.exe
\??\c:\7xxxfff.exe
c:\7xxxfff.exe
\??\c:\lxrxxrf.exe
c:\lxrxxrf.exe
\??\c:\thtnbh.exe
c:\thtnbh.exe
\??\c:\hbbbbt.exe
c:\hbbbbt.exe
\??\c:\1vjdp.exe
c:\1vjdp.exe
\??\c:\dppvd.exe
c:\dppvd.exe
\??\c:\jpdvd.exe
c:\jpdvd.exe
\??\c:\1xfxrfr.exe
c:\1xfxrfr.exe
\??\c:\7rlxxrr.exe
c:\7rlxxrr.exe
\??\c:\nbthtb.exe
c:\nbthtb.exe
\??\c:\ththhb.exe
c:\ththhb.exe
\??\c:\3jddd.exe
c:\3jddd.exe
\??\c:\9vvvv.exe
c:\9vvvv.exe
\??\c:\llxflrf.exe
c:\llxflrf.exe
\??\c:\rlfffll.exe
c:\rlfffll.exe
\??\c:\tnbhnn.exe
c:\tnbhnn.exe
\??\c:\bbthtb.exe
c:\bbthtb.exe
\??\c:\pjvdv.exe
c:\pjvdv.exe
\??\c:\5vppp.exe
c:\5vppp.exe
\??\c:\vpdjv.exe
c:\vpdjv.exe
\??\c:\fxrxffx.exe
c:\fxrxffx.exe
\??\c:\rrlrrrx.exe
c:\rrlrrrx.exe
\??\c:\nhntbn.exe
c:\nhntbn.exe
\??\c:\7nbnnt.exe
c:\7nbnnt.exe
\??\c:\jdvvj.exe
c:\jdvvj.exe
\??\c:\jjddd.exe
c:\jjddd.exe
\??\c:\xlfrfff.exe
c:\xlfrfff.exe
\??\c:\lrxfrxr.exe
c:\lrxfrxr.exe
\??\c:\rlrxlrx.exe
c:\rlrxlrx.exe
\??\c:\1nbnbh.exe
c:\1nbnbh.exe
\??\c:\nhbnnt.exe
c:\nhbnnt.exe
\??\c:\jdjjp.exe
c:\jdjjp.exe
\??\c:\jvjjp.exe
c:\jvjjp.exe
\??\c:\rfrrxxx.exe
c:\rfrrxxx.exe
\??\c:\xrllrxf.exe
c:\xrllrxf.exe
\??\c:\fxflxxf.exe
c:\fxflxxf.exe
\??\c:\bbtthn.exe
c:\bbtthn.exe
\??\c:\3bnttt.exe
c:\3bnttt.exe
\??\c:\pjdjd.exe
c:\pjdjd.exe
\??\c:\5dvpp.exe
c:\5dvpp.exe
\??\c:\lflrxff.exe
c:\lflrxff.exe
\??\c:\rfrxflr.exe
c:\rfrxflr.exe
\??\c:\hbtbnn.exe
c:\hbtbnn.exe
\??\c:\btnnnb.exe
c:\btnnnb.exe
\??\c:\vvpdp.exe
c:\vvpdp.exe
\??\c:\5pjpv.exe
c:\5pjpv.exe
\??\c:\vvvpp.exe
c:\vvvpp.exe
\??\c:\xrxxffr.exe
c:\xrxxffr.exe
\??\c:\xrflffl.exe
c:\xrflffl.exe
\??\c:\3bhntb.exe
c:\3bhntb.exe
\??\c:\9thnbb.exe
c:\9thnbb.exe
\??\c:\ddddp.exe
c:\ddddp.exe
\??\c:\1pdvp.exe
c:\1pdvp.exe
\??\c:\rrlrllx.exe
c:\rrlrllx.exe
\??\c:\3lfrlrx.exe
c:\3lfrlrx.exe
\??\c:\nhbbhn.exe
c:\nhbbhn.exe
\??\c:\nnnhnb.exe
c:\nnnhnb.exe
\??\c:\dvjpv.exe
c:\dvjpv.exe
\??\c:\jjddj.exe
c:\jjddj.exe
\??\c:\5vdvd.exe
c:\5vdvd.exe
\??\c:\5lffffx.exe
c:\5lffffx.exe
\??\c:\xrrxlrx.exe
c:\xrrxlrx.exe
\??\c:\hbtbht.exe
c:\hbtbht.exe
\??\c:\hthhhn.exe
c:\hthhhn.exe
\??\c:\bbtbnn.exe
c:\bbtbnn.exe
\??\c:\7jvvd.exe
c:\7jvvd.exe
\??\c:\7jjjj.exe
c:\7jjjj.exe
\??\c:\lfrrfxr.exe
c:\lfrrfxr.exe
\??\c:\ffxfrrx.exe
c:\ffxfrrx.exe
\??\c:\hhtbhn.exe
c:\hhtbhn.exe
\??\c:\nhhhnh.exe
c:\nhhhnh.exe
\??\c:\vvdpp.exe
c:\vvdpp.exe
\??\c:\dvjvd.exe
c:\dvjvd.exe
\??\c:\rlrxffl.exe
c:\rlrxffl.exe
\??\c:\lllfxfx.exe
c:\lllfxfx.exe
\??\c:\3ttbhb.exe
c:\3ttbhb.exe
\??\c:\btbhtb.exe
c:\btbhtb.exe
\??\c:\5bbbhb.exe
c:\5bbbhb.exe
\??\c:\5vppd.exe
c:\5vppd.exe
\??\c:\vpdvj.exe
c:\vpdvj.exe
\??\c:\xrrrxxf.exe
c:\xrrrxxf.exe
\??\c:\rfrllrx.exe
c:\rfrllrx.exe
\??\c:\nbhbnt.exe
c:\nbhbnt.exe
\??\c:\tnbhnn.exe
c:\tnbhnn.exe
\??\c:\ddjpv.exe
c:\ddjpv.exe
\??\c:\pjddp.exe
c:\pjddp.exe
\??\c:\7rllxrx.exe
c:\7rllxrx.exe
\??\c:\xrlrxxl.exe
c:\xrlrxxl.exe
\??\c:\ffxlrxf.exe
c:\ffxlrxf.exe
\??\c:\nnnbtn.exe
c:\nnnbtn.exe
\??\c:\7nnnnn.exe
c:\7nnnnn.exe
\??\c:\ddvdj.exe
c:\ddvdj.exe
\??\c:\jdppj.exe
c:\jdppj.exe
\??\c:\lrxrfxx.exe
c:\lrxrfxx.exe
\??\c:\lxlrrrx.exe
c:\lxlrrrx.exe
\??\c:\7hbnhn.exe
c:\7hbnhn.exe
\??\c:\3nbhbb.exe
c:\3nbhbb.exe
\??\c:\dvjvd.exe
c:\dvjvd.exe
\??\c:\dvvpp.exe
c:\dvvpp.exe
\??\c:\xrffffr.exe
c:\xrffffr.exe
\??\c:\rlxlffr.exe
c:\rlxlffr.exe
\??\c:\btbbtn.exe
c:\btbbtn.exe
\??\c:\bthnnt.exe
c:\bthnnt.exe
\??\c:\vvvjp.exe
c:\vvvjp.exe
\??\c:\pjddp.exe
c:\pjddp.exe
\??\c:\3ffxxrf.exe
c:\3ffxxrf.exe
\??\c:\lfxxffr.exe
c:\lfxxffr.exe
\??\c:\hbhtnn.exe
c:\hbhtnn.exe
\??\c:\hhthtb.exe
c:\hhthtb.exe
\??\c:\vjjjv.exe
c:\vjjjv.exe
\??\c:\7dpdp.exe
c:\7dpdp.exe
\??\c:\lfffflx.exe
c:\lfffflx.exe
\??\c:\rrfrxxl.exe
c:\rrfrxxl.exe
\??\c:\3hhtbh.exe
c:\3hhtbh.exe
\??\c:\5hbhnn.exe
c:\5hbhnn.exe
\??\c:\vpjpp.exe
c:\vpjpp.exe
\??\c:\3jdvv.exe
c:\3jdvv.exe
\??\c:\lxlrffr.exe
c:\lxlrffr.exe
\??\c:\lfffxrx.exe
c:\lfffxrx.exe
\??\c:\3thnbb.exe
c:\3thnbb.exe
\??\c:\hhtnbh.exe
c:\hhtnbh.exe
\??\c:\dpjpv.exe
c:\dpjpv.exe
\??\c:\ddvdj.exe
c:\ddvdj.exe
\??\c:\7lxxrrx.exe
c:\7lxxrrx.exe
\??\c:\xlrfrxf.exe
c:\xlrfrxf.exe
\??\c:\1nbhnt.exe
c:\1nbhnt.exe
\??\c:\tnhbhb.exe
c:\tnhbhb.exe
\??\c:\1vpvp.exe
c:\1vpvp.exe
\??\c:\7vvpv.exe
c:\7vvpv.exe
\??\c:\ddvpd.exe
c:\ddvpd.exe
\??\c:\lxlllrr.exe
c:\lxlllrr.exe
\??\c:\rlrlxfl.exe
c:\rlrlxfl.exe
\??\c:\tnhbbb.exe
c:\tnhbbb.exe
\??\c:\thhhnb.exe
c:\thhhnb.exe
\??\c:\jdjdd.exe
c:\jdjdd.exe
\??\c:\vvvdd.exe
c:\vvvdd.exe
\??\c:\5rflllr.exe
c:\5rflllr.exe
\??\c:\rllrflr.exe
c:\rllrflr.exe
\??\c:\tnnntb.exe
c:\tnnntb.exe
\??\c:\hbhntb.exe
c:\hbhntb.exe
\??\c:\1ppvj.exe
c:\1ppvj.exe
\??\c:\5jvdp.exe
c:\5jvdp.exe
\??\c:\xxfxxfx.exe
c:\xxfxxfx.exe
\??\c:\xrlfxfx.exe
c:\xrlfxfx.exe
\??\c:\nnbnbh.exe
c:\nnbnbh.exe
\??\c:\1hbtbn.exe
c:\1hbtbn.exe
\??\c:\ddjjv.exe
c:\ddjjv.exe
\??\c:\vdppj.exe
c:\vdppj.exe
\??\c:\rrllxfr.exe
c:\rrllxfr.exe
\??\c:\xrfflxr.exe
c:\xrfflxr.exe
\??\c:\ttbhtn.exe
c:\ttbhtn.exe
\??\c:\tthhnt.exe
c:\tthhnt.exe
\??\c:\5dvpd.exe
c:\5dvpd.exe
\??\c:\dvvjj.exe
c:\dvvjj.exe
\??\c:\lxllllf.exe
c:\lxllllf.exe
\??\c:\rrrfxfx.exe
c:\rrrfxfx.exe
\??\c:\7tnbhh.exe
c:\7tnbhh.exe
\??\c:\bbbthb.exe
c:\bbbthb.exe
\??\c:\vppjj.exe
c:\vppjj.exe
\??\c:\lfxxfll.exe
c:\lfxxfll.exe
\??\c:\1lfllrx.exe
c:\1lfllrx.exe
\??\c:\htnbnn.exe
c:\htnbnn.exe
\??\c:\1httbb.exe
c:\1httbb.exe
\??\c:\jpvjd.exe
c:\jpvjd.exe
\??\c:\pjvpp.exe
c:\pjvpp.exe
\??\c:\xllfxff.exe
c:\xllfxff.exe
\??\c:\xrxrfrf.exe
c:\xrxrfrf.exe
\??\c:\hbhnbn.exe
c:\hbhnbn.exe
\??\c:\tnbhhn.exe
c:\tnbhhn.exe
\??\c:\9vvdv.exe
c:\9vvdv.exe
\??\c:\ppjjp.exe
c:\ppjjp.exe
\??\c:\frffffr.exe
c:\frffffr.exe
\??\c:\xxrffll.exe
c:\xxrffll.exe
\??\c:\3ttbhh.exe
c:\3ttbhh.exe
\??\c:\5ttttb.exe
c:\5ttttb.exe
\??\c:\jjvpd.exe
c:\jjvpd.exe
\??\c:\jvppp.exe
c:\jvppp.exe
\??\c:\5xrllrr.exe
c:\5xrllrr.exe
\??\c:\xrxlrll.exe
c:\xrxlrll.exe
\??\c:\1thhhb.exe
c:\1thhhb.exe
\??\c:\hbnntn.exe
c:\hbnntn.exe
\??\c:\hhbntb.exe
c:\hhbntb.exe
\??\c:\vvdjv.exe
c:\vvdjv.exe
\??\c:\rfxlxrf.exe
c:\rfxlxrf.exe
\??\c:\xrllxfr.exe
c:\xrllxfr.exe
\??\c:\btntnt.exe
c:\btntnt.exe
\??\c:\nbhhhn.exe
c:\nbhhhn.exe
\??\c:\ppvvp.exe
c:\ppvvp.exe
\??\c:\3dvdv.exe
c:\3dvdv.exe
\??\c:\pjvdv.exe
c:\pjvdv.exe
Network
Files
memory/3004-3-0x0000000000400000-0x0000000000429000-memory.dmp
memory/3004-2-0x0000000000427000-0x0000000000428000-memory.dmp
C:\pjdjd.exe
| MD5 | 2379be1b4d54b1a3057600cb508370da |
| SHA1 | cf6f0b608c009242342be488a51099a4a19c0238 |
| SHA256 | d4139d9f5b099050e1f95f5818864b64cbb7e188583863f367baf1eb9c1c0ac7 |
| SHA512 | 8e2f6c9e299b1d3831684f9016d010f9676eba133c27961d3f12ef69e111c7843cdbc02c99acc98fbea04a2e0953244536349eb434f8c2ea3200a55ad3e9a914 |
memory/3004-10-0x0000000000400000-0x0000000000429000-memory.dmp
memory/3004-1-0x00000000001B0000-0x00000000001BC000-memory.dmp
memory/3004-0-0x0000000000400000-0x0000000000429000-memory.dmp
memory/1728-15-0x0000000000400000-0x0000000000429000-memory.dmp
C:\rxxlxfx.exe
| MD5 | 0500c1cc4ed2393051f45a8efb3f44c9 |
| SHA1 | b7ec7332ebb424f19b8602178c00988bc0e59a51 |
| SHA256 | 548a38bcfab7de0c3daec939002f0d74f1a71e04c2e4cb2fb6c23ad41f623e1b |
| SHA512 | 13c02c5501a4bc713e4a522341fdacfd58967984a665841a25ec9a715eb6164c1e18b99816f0a894bb641ee15d30f019c4a16295ce2f5b65f0923f794f848dd8 |
C:\nhbthn.exe
| MD5 | 660f6b5cbd448f5667ab3616ddcfe3b9 |
| SHA1 | bc9b4921b984295617175f6485b304524e33d89e |
| SHA256 | d0807662de85b3342ba66450997c9d5906931fe519cafd155817b6bac7887e0c |
| SHA512 | 1551f0e9ac63ffd14a85e8001bf657a838fc1fe3b7695d92be09faf234018981ff1fd4496a21ded5ac4907eecf6df637cb0d1e98fd5f62dad2ba681628a809f9 |
memory/2296-35-0x0000000000400000-0x0000000000429000-memory.dmp
memory/2376-29-0x0000000000400000-0x0000000000429000-memory.dmp
C:\hbbbnb.exe
| MD5 | 753c746fc39d95ca7a90dbb7664aaa4d |
| SHA1 | 021976098a0579a665a430e29b19be85ca6211c2 |
| SHA256 | abacfafb3e4caaf7730c48710ea2c7b1d4eb916ff9581c4a24afb67308d3ab5b |
| SHA512 | 185413dbf7158e704dd8c74ebafcbdeda0bbe3fb95a13a1b693b609f2ed775302a7ee1b212e6782f5e76d0c4743824a637799ab46b59f574cf84e1863c833ea0 |
memory/2376-30-0x0000000000401000-0x0000000000427000-memory.dmp
memory/2732-45-0x0000000000400000-0x0000000000429000-memory.dmp
memory/2732-44-0x0000000000400000-0x0000000000429000-memory.dmp
memory/2732-43-0x0000000000400000-0x0000000000429000-memory.dmp
C:\rrxxlrf.exe
| MD5 | b2edeae0867a06ee1fe3eb2c29be8f1f |
| SHA1 | 7a9b86a3376fac3f2a275df745acbad1f2d6a6ae |
| SHA256 | 5740ebb13dad9cea18f57179c3e2a7c0c5cf7d2f97b57f0c948d713ad6b6004a |
| SHA512 | bf8abe8754fa7b8eaf0bd953b4a5201cef90963004056a55400c3c148f6bfb9112874e1a1ff953a8209ff1f616cbee56dda9b0c23a6f9b581e62a18b2cd7ce5d |
memory/2732-54-0x0000000000400000-0x0000000000429000-memory.dmp
memory/2792-58-0x0000000000400000-0x0000000000429000-memory.dmp
C:\bhntnn.exe
| MD5 | df061c40108540be108e379f2caae581 |
| SHA1 | 4400e4a79a4fe0c61bc063a6ad00e8beb6604ccc |
| SHA256 | 92d8065f939774b263f5739306b1692a713c6492915e7bb0100537dcb0a9ac88 |
| SHA512 | 28362df337f0b7ac7d217d77547c0e1ea5630edf3d060c6eff14babe0f4d88f4274c75cf56e661bf31e1c81217c9032256e9f1663f64f3f52c7c12670e08a578 |
memory/2216-66-0x0000000000400000-0x0000000000429000-memory.dmp
memory/2216-68-0x0000000000400000-0x0000000000429000-memory.dmp
memory/2216-67-0x0000000000400000-0x0000000000429000-memory.dmp
memory/2216-76-0x0000000000400000-0x0000000000429000-memory.dmp
memory/2864-81-0x0000000000400000-0x0000000000429000-memory.dmp
\??\c:\dddvp.exe
| MD5 | fe80b561d87c4ef0e62d29951c333b07 |
| SHA1 | 8c4440221466490e75df36fb91c70e5f0657e62a |
| SHA256 | d5c4756999832fbd2f5c0be16dc33aa5c7574a53e1247da184e416ce0b1fce63 |
| SHA512 | 3a495700745cb2e1afa0e5c9ac0dde15b9c7f809563177c9da818f59eadce424880286259949ac99f99a12aec0dbaee5779c6ba0bf8147ca5eebc86f798ca8ea |
C:\1pppv.exe
| MD5 | 3d3e4eeb15251e722a2ec9d19dfca984 |
| SHA1 | be46e11ce587c79a9a985862bc50900a630091ad |
| SHA256 | 615de2bfead9434496813f3f03ae09d389aef81dbc705678ad547c2481d0f2b5 |
| SHA512 | fef1db51f5651aa8a67bbb4283a62d5b59a2d3c6cfacdfd029d918bf822950be13b10ba911762cca64cdfd5f4622d94cbf67667501ec61efd2204e067accd501 |
memory/2596-89-0x0000000000400000-0x0000000000429000-memory.dmp
memory/2596-91-0x0000000000400000-0x0000000000429000-memory.dmp
memory/2596-90-0x0000000000400000-0x0000000000429000-memory.dmp
C:\7tnthb.exe
| MD5 | 40a9c51db7fc4a7e05eeab387a3d5205 |
| SHA1 | be92c54187e666421e1e2e9450e6413465724637 |
| SHA256 | b0a81acc308f998bf73e352328ece73a073d0d0ce2a322d5f0703d7212b6c2c8 |
| SHA512 | cb94174978bde2de108138704339d5f35fcd1c8aaa14c67c9c2e00361fa0618a2473bd4bd9d72587d99d2f0855ce99cac31719ce4e2baece8d7277ade70fc9e3 |
memory/2596-99-0x0000000000400000-0x0000000000429000-memory.dmp
C:\bbtntb.exe
| MD5 | 7ffd312b06cef5e1e4f7f6760bd79dd5 |
| SHA1 | 38acbb01cd000f77f000c991bc7394830d3dceee |
| SHA256 | 9c63da2332ccaeac50e1b3345c660d94517a7c525d0438b697557a6d49a609e7 |
| SHA512 | 5f933d85d4e5b7f9a849daf9b923ec5177191adf47a0de952464b7691bb22a016e686d480f9f96ab04a268f6b4c6e93fcd0e35ffd1481de96b6834f1f0b0dd97 |
C:\dpppd.exe
| MD5 | 88e7ead0e7c14ea4bd16fd62da71a160 |
| SHA1 | 90d1bef4e16db8fb2714348f532648e28e163d42 |
| SHA256 | 03b315b555117cf5ecce14e6fd6471d859c08cdf28b0d300ce39b33316c4010c |
| SHA512 | 46533d1219097a4ad65f2d7b052954555be302ed2f9b1368d8288ce33e01b219ebc4282ef64c7aeaf0d4afcdd85b72f67632130a61d37fd658a7d23a36f8bb61 |
memory/1720-117-0x0000000000400000-0x0000000000429000-memory.dmp
C:\xrrlflf.exe
| MD5 | 489602670d3044bd047e5b7f54ce25f0 |
| SHA1 | 4791d0dcc64ca98abca4455d3c0541c0b8590467 |
| SHA256 | 9466cec8848a95d3118fd9e12b8f8ab03d8647a4733933b2569d8e367d21f34c |
| SHA512 | 8d7302bcf2f14ff096b8d1b223b62c6e443e2b0a14e491e88e5ad07d4c22e7a36cec2681620e2d5676ed3015737f8ad20b6a603e4b454a63d24aa836f5c9c03f |
memory/1036-125-0x0000000000400000-0x0000000000429000-memory.dmp
C:\7xrfrrf.exe
| MD5 | 5cae321bdf92b414b1e0638ff572366b |
| SHA1 | 5253182170cb4c56ae288ffd8bfb5dcf13900284 |
| SHA256 | f3ac0133736fba077968993a13fbfdc3e9171e0ed90b78e6365724886f512adc |
| SHA512 | 7e3066d9c0eed2a980ee99fd07d23216e40fee49aa6c46db91c5d135fa20c2ee26d2a09788d2eb7ed32a9f00d833d5c484184d0177aedcdbe1eb729c35a66ec6 |
memory/2116-135-0x0000000000400000-0x0000000000429000-memory.dmp
C:\tnhntb.exe
| MD5 | 5ddcd84eea84ab00d7842897c1ef7cda |
| SHA1 | 1c45c231ff6273d8724d360be43589e8021da007 |
| SHA256 | 4aff3d7f919511d0ca6cdeace10ab974b0ac9ba562daf8a37b8867b1c9cf1876 |
| SHA512 | 44431fb36fc92eada2f29e1909fd882651e49007cbd7c4bd9b37a740d08e396c0f9b08fc08e9ea944c6f6519adeb32ec29bd44547e9adc977b0fa64220e1fbd8 |
memory/1620-143-0x0000000000400000-0x0000000000429000-memory.dmp
C:\jjvjd.exe
| MD5 | be49d206f9fbb109a13627992b96b87f |
| SHA1 | cfd9b988d4915fb6059ef36a085c26ac8c78f23b |
| SHA256 | a549444d0749303c8f9b935913b151ad632fdde1bc97b50689d87f2c0689a0d5 |
| SHA512 | 39404cc477599136db3751468905479a9c4e1543adec0f57fe0071ba31ad93a052a8f3523028e241776eb18b53d333331bf0b49d14c95b3200205d69c643f6b4 |
C:\ddvdv.exe
| MD5 | a9996676e66f83f50198a9fdcfdfbda4 |
| SHA1 | f1e9a2291ba8fe51331a5783d858b86802795256 |
| SHA256 | c6e699b1e8eca1cd8c2303d99cde17de84663f19aa4411ddda54f86229a3e0cc |
| SHA512 | 96d8193a98c0e8fce7ef55a564e22b529d86fda8c2715ae7ea366f369e6d94bd9df1f89331b59329b74d2d31d5a6b313d29795ae0d6396d27b8829fa527754a8 |
C:\llxlflf.exe
| MD5 | 1d1bf4af9eb01d9ca57c459709fa8e8d |
| SHA1 | 44886ef83e7fa1358eaa6aecf73a28375d0fc5d0 |
| SHA256 | 0553ff891e5b1cd20a9b2324e87ab98dfe57164b0dec8a926ec8b3374f1ffd01 |
| SHA512 | 81c872f2584709f7b3eb41b98a12551069b429c72280fe01ce3e09245c13bb1bdf2f2fb2aee32e6e161232f25d3f69878567d7604213707414f6232de7b0e748 |
memory/1556-171-0x0000000000400000-0x0000000000429000-memory.dmp
C:\ffxxlfr.exe
| MD5 | d935c911cfa523928ae0902b8514c11d |
| SHA1 | 333db841e54017ffe21ce22982542c698a572941 |
| SHA256 | 4549260d63da78c4a9be7e34ee563e887f48b632a0aff3ff050a521fcdff1b5d |
| SHA512 | 6fa05a274d70fafb56624a81b63e227c013a14c87abdbd7c3cf5a17291d0e9d0cbcd8347527c29b20667a8485b0f5b862ca824405d0624cc2b1f1c1d701fa57d |
C:\hhtbhh.exe
| MD5 | 888e9cc7d6307c82ba36e3478e1905ab |
| SHA1 | a825896ab256ac1e13ecd337082bf400f5f9b0d0 |
| SHA256 | 290c5fa86cd072d2c9a5f50002e428c4b44cd2b69fb50392283cd72e3955035e |
| SHA512 | 70dd25679120b2d25574d25aab90664614f90021706c7dc2c7d4d980a75bbc50b89bfdf3a5a1bff909fd7d92dfbdf79c71b9232c8106b36ebb5c1e575ae8c95a |
memory/1004-189-0x0000000000400000-0x0000000000429000-memory.dmp
memory/2328-197-0x0000000000400000-0x0000000000429000-memory.dmp
C:\9ddpd.exe
| MD5 | 0014123ebba3a947146f55fa5f0b7a29 |
| SHA1 | 612d96cd15027f867cdbcb8912fbd9e9b85e84b9 |
| SHA256 | 0885d2e5b325ae894aece1d57c6a8140e4ee030e9f5a492cd0555185cfb7b10f |
| SHA512 | 2a38466b72af491c7abc4bce1749ed0350dc17f640dd11c7519d32f6fae63741a797649f71ecef6b39ce0ed6ce5494ce8fd431d969fd9d59511ac5cef2e9c539 |
C:\7pvdj.exe
| MD5 | 8f013d170ddc74006081830cecf68666 |
| SHA1 | 2d189937038fc83b474dc8eafac460eaebf959a4 |
| SHA256 | cf6adb27d27f89e2651db74f4332997f7a9b9fe658431a4a2f21a341b1e9e012 |
| SHA512 | 446fa3168d4fee87b8537fbdc4352e6927cf9e70fbd832786a6afd463e5c8d5e9fa89209bf103e446a6b941a1e26830e5298b15b9bf3662ee2539e417ce71946 |
memory/2156-207-0x0000000000400000-0x0000000000429000-memory.dmp
C:\llxrlxl.exe
| MD5 | 5062888bd2ecd6320bb960495e8b0550 |
| SHA1 | 3ad4fed9bb89e19ad2e0aeead6a004e131e85a3b |
| SHA256 | 73aaf0a0ba68101eb118e1fb062526070162f71d3dd99f68ef4412f599acec6c |
| SHA512 | 533558a6fc1324363f457068dacf728bb60743cee6327b6b8d060b978efffbeb34da0c694ebbbc66c7a5095da7ea60d59a3754185953f91f0b6446f69a767c84 |
C:\ttbnbb.exe
| MD5 | 0eb5c4e4c9be9696d3646ab43ed766ba |
| SHA1 | bf21ab220e836861ab3beb3a0de9ae6e197908f2 |
| SHA256 | a514669eef145c4063496da5c66d3c97b929e9b904f9b5fc25ec7cf8c2fe2dee |
| SHA512 | 9558e043467dd51fae62030a67bae72765d394fdf458a104acbf212e0524f749c6bdcd242933e95281bdbbe810958406ac881660781b3e7c31c8e1309d17cd02 |
C:\bbbtnt.exe
| MD5 | 130d47f26dc5eec63379f7200c6170b6 |
| SHA1 | 5304f6e7903759b55b92b331b54d2f00f376877f |
| SHA256 | af9780ea62ef77da31f1647c270bda28d16ece167b47205aba054436b3a8263d |
| SHA512 | 00684280e3d15ecde5d1af669ac9ccc9ff27337e2b3fd1c5299cd996afac812269167f8a3d1f3cca848d2017468089ba1164e7444b5be5e406cd45482192de7e |
memory/1068-233-0x0000000000400000-0x0000000000429000-memory.dmp
C:\vvvpj.exe
| MD5 | 61d0de5c53eacc9f8cbbf13c48b54989 |
| SHA1 | c36a0a4130e2c7d010d6f851ae1913a7cbf5184b |
| SHA256 | 1ac78459f30aa469f4843f5ed144f5933e609dcef34eee5aa1b407141747102e |
| SHA512 | 8ed403eef8191cb648c5647c158c17ba34c6420d506b18ee899f9bc709479cc6fd94ba64304322331122704be3348477ee2535935adc20fa123ef722b8334499 |
memory/1292-243-0x0000000000400000-0x0000000000429000-memory.dmp
C:\jjvjj.exe
| MD5 | 36f3c7bdad900963085a3a65afb37e0e |
| SHA1 | ba17fb997e2a91d3d80b26ed5654274a08dab903 |
| SHA256 | d12560dbeeb71cb0f532d488b7bfe3c03b63eb1175f09fbfa7dcf009c8445fd4 |
| SHA512 | 99d480039b6cf199616226583f5fec104614e959f52ca785be789a0920fc3eba21f67eb69dc58c63ecc871ed15d6c06dafea2cdaf2270070cff78f295e590186 |
C:\xrlrffr.exe
| MD5 | c625b5ef27ae5620134df928bf7d0900 |
| SHA1 | 81b6bd0c029079def516db2258ff1b7257e2acf2 |
| SHA256 | 32b3e471baead18ac1e59410eae941db25e9766191e4fc197d8e13c4ec5afa46 |
| SHA512 | a308f42ae8f9a9c261af48bc151a5b651c9be895b6f639027e613896c09791ecc1cfe4155fbad4f877c0da8ffe009e1d8bdcf662c554e335a73089e2adad9e36 |
C:\tnbnbn.exe
| MD5 | 3e4a04bbfa9b68ef63fd8c2b5482aae5 |
| SHA1 | 24de0cdf32da78fa6108f46ead1ff2e8342ad0dc |
| SHA256 | 95c6cb6a3d7d23d18ea60efa36117aa9f56dd97ea6f311dacc3079816ae03e68 |
| SHA512 | 979720ed2c65d11eea00d03613db062a8625b18c3b0c5c3111f8abdbda3d47df3540066c708145794fac07fa3353e8bf664babffef1b64a89f9a857379d2bef4 |
C:\hhthtb.exe
| MD5 | eccc3e106e5584be80ed90d40fccb50f |
| SHA1 | fef7c7a9de91288b12a398e4f4925311daec1fde |
| SHA256 | 290e8999cff61570d4319fe07c6c88302abcfcc31fad23e3a19dd7aaf1139006 |
| SHA512 | 575a21d4813c7f00289fd4d8f82feafcd61dc17c73d079a4e31b7f61c0421132a8294024e076920f6984fbce559e3866adeb47f0576fbfbf551d0c4df669c844 |
C:\9vvdv.exe
| MD5 | 6c118ed8fda6dc3f6aff62727b73deb3 |
| SHA1 | 33b7521765fa33e3718faaaf5df7ba702b2d2d08 |
| SHA256 | 17f19d7e52c910fd07d968ea358e9d743a1050688f13c0e52e1dccddde4c10cd |
| SHA512 | 84e6e8cfe6d44d7d00def74df1ec92096635f6fd4e1adc1b5d7f08d5c002874c1eafb44c54c5d6d512e28b8d257d5a815789962a9bd9109bbe4d76e499836dd9 |
memory/2176-291-0x00000000772F0000-0x00000000773EA000-memory.dmp
memory/2176-290-0x00000000773F0000-0x000000007750F000-memory.dmp
C:\lfxlllx.exe
| MD5 | 7210bf302042831aecea38463dae9ab1 |
| SHA1 | e476cc6970e25d5700713234d0278bf547c1e161 |
| SHA256 | fb144ac3c31e93d6e82b574e6b2ff3f71e972090258fa6010e8f41c496adf3ec |
| SHA512 | f582d0741564078adbbddcf27209164e3239230b50fc063f22c834392978771167ed7ce12612a1cf562da996a7f78e00034f2d9feca8017d53276e5427224ee1 |
C:\ddvjv.exe
| MD5 | 731429f0aeaab4903b110cfb57b50925 |
| SHA1 | af51c1b166de16413661942b7153413b5ba2c990 |
| SHA256 | 3b17b4e5bc9ee47202d8a3875d1b80971da5681d4f8b26b2b52d62fe70286f6c |
| SHA512 | c5d9aafdb14f27674f8c4af35f942d23365a3500027204cbfda222f33145bf3e4a6e83eb72fb6e83a04541307d1c5dc3f778b45adda40c8b1a88129094d870c4 |
C:\vppdj.exe
| MD5 | 53784575d79af5a3d3a6cbd2060add93 |
| SHA1 | c90e17a864da53d6f58f275268d53186c1d142b8 |
| SHA256 | 42e79bf1b1484e3cc9466fda8064a743856cc56c811d92b23aeb6ca06826014b |
| SHA512 | dced38289398a7fb998eabd472b5d55a259eba2bfbe9cd34f6541058a5df70e00e4e2a49e666ea754c34da29f8dcf2cad61472ec015fe04e60226d53dda5b829 |
Analysis: behavioral2
Detonation Overview
Submitted
2024-10-18 17:55
Reported
2024-10-18 17:57
Platform
win10v2004-20241007-en
Max time kernel
120s
Max time network
111s
Command Line
Signatures
Blackmoon, KrBanker
Detect Blackmoon payload
| Description | Indicator | Process | Target |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
Executes dropped EXE
UPX packed file
| Description | Indicator | Process | Target |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
System Location Discovery: System Language Discovery
| Description | Indicator | Process | Target |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | \??\c:\nbthtn.exe | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | \??\c:\htnttn.exe | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | \??\c:\rxrlffr.exe | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | \??\c:\lxrrrrr.exe | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | \??\c:\tbtbht.exe | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | \??\c:\dvjjj.exe | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | \??\c:\vjvpj.exe | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | \??\c:\lrfxxxx.exe | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | \??\c:\pdvpd.exe | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | \??\c:\ttbthb.exe | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | N/A | N/A |
Suspicious use of WriteProcessMemory
| Description | Indicator | Process | Target |
| PID 1980 wrote to memory of 2772 | N/A | C:\Users\Admin\AppData\Local\Temp\bd98292b03e32d2823900b389158a95409a42cbeb6a67703a156bcc7a6e0b19aN.exe | \??\c:\1flxrxl.exe |
| PID 1980 wrote to memory of 2772 | N/A | C:\Users\Admin\AppData\Local\Temp\bd98292b03e32d2823900b389158a95409a42cbeb6a67703a156bcc7a6e0b19aN.exe | \??\c:\1flxrxl.exe |
| PID 1980 wrote to memory of 2772 | N/A | C:\Users\Admin\AppData\Local\Temp\bd98292b03e32d2823900b389158a95409a42cbeb6a67703a156bcc7a6e0b19aN.exe | \??\c:\1flxrxl.exe |
| PID 2772 wrote to memory of 3948 | N/A | \??\c:\1flxrxl.exe | \??\c:\rllllll.exe |
| PID 2772 wrote to memory of 3948 | N/A | \??\c:\1flxrxl.exe | \??\c:\rllllll.exe |
| PID 2772 wrote to memory of 3948 | N/A | \??\c:\1flxrxl.exe | \??\c:\rllllll.exe |
| PID 3948 wrote to memory of 3680 | N/A | \??\c:\rllllll.exe | \??\c:\thhhbb.exe |
| PID 3948 wrote to memory of 3680 | N/A | \??\c:\rllllll.exe | \??\c:\thhhbb.exe |
| PID 3948 wrote to memory of 3680 | N/A | \??\c:\rllllll.exe | \??\c:\thhhbb.exe |
| PID 3680 wrote to memory of 756 | N/A | \??\c:\thhhbb.exe | \??\c:\jdddv.exe |
| PID 3680 wrote to memory of 756 | N/A | \??\c:\thhhbb.exe | \??\c:\jdddv.exe |
| PID 3680 wrote to memory of 756 | N/A | \??\c:\thhhbb.exe | \??\c:\jdddv.exe |
| PID 756 wrote to memory of 2740 | N/A | \??\c:\jdddv.exe | \??\c:\hnbttn.exe |
| PID 756 wrote to memory of 2740 | N/A | \??\c:\jdddv.exe | \??\c:\hnbttn.exe |
| PID 756 wrote to memory of 2740 | N/A | \??\c:\jdddv.exe | \??\c:\hnbttn.exe |
| PID 2740 wrote to memory of 2468 | N/A | \??\c:\hnbttn.exe | \??\c:\vdpvp.exe |
| PID 2740 wrote to memory of 2468 | N/A | \??\c:\hnbttn.exe | \??\c:\vdpvp.exe |
| PID 2740 wrote to memory of 2468 | N/A | \??\c:\hnbttn.exe | \??\c:\vdpvp.exe |
| PID 2468 wrote to memory of 5024 | N/A | \??\c:\vdpvp.exe | \??\c:\xfxrxxr.exe |
| PID 2468 wrote to memory of 5024 | N/A | \??\c:\vdpvp.exe | \??\c:\xfxrxxr.exe |
| PID 2468 wrote to memory of 5024 | N/A | \??\c:\vdpvp.exe | \??\c:\xfxrxxr.exe |
| PID 5024 wrote to memory of 432 | N/A | \??\c:\xfxrxxr.exe | \??\c:\nhbbht.exe |
| PID 5024 wrote to memory of 432 | N/A | \??\c:\xfxrxxr.exe | \??\c:\nhbbht.exe |
| PID 5024 wrote to memory of 432 | N/A | \??\c:\xfxrxxr.exe | \??\c:\nhbbht.exe |
| PID 432 wrote to memory of 5000 | N/A | \??\c:\nhbbht.exe | \??\c:\jvjjd.exe |
| PID 432 wrote to memory of 5000 | N/A | \??\c:\nhbbht.exe | \??\c:\jvjjd.exe |
| PID 432 wrote to memory of 5000 | N/A | \??\c:\nhbbht.exe | \??\c:\jvjjd.exe |
| PID 5000 wrote to memory of 2724 | N/A | \??\c:\jvjjd.exe | \??\c:\lrrrlll.exe |
| PID 5000 wrote to memory of 2724 | N/A | \??\c:\jvjjd.exe | \??\c:\lrrrlll.exe |
| PID 5000 wrote to memory of 2724 | N/A | \??\c:\jvjjd.exe | \??\c:\lrrrlll.exe |
| PID 2724 wrote to memory of 4988 | N/A | \??\c:\lrrrlll.exe | \??\c:\1tbtnn.exe |
| PID 2724 wrote to memory of 4988 | N/A | \??\c:\lrrrlll.exe | \??\c:\1tbtnn.exe |
| PID 2724 wrote to memory of 4988 | N/A | \??\c:\lrrrlll.exe | \??\c:\1tbtnn.exe |
| PID 4988 wrote to memory of 4612 | N/A | \??\c:\1tbtnn.exe | \??\c:\hnhbbb.exe |
| PID 4988 wrote to memory of 4612 | N/A | \??\c:\1tbtnn.exe | \??\c:\hnhbbb.exe |
| PID 4988 wrote to memory of 4612 | N/A | \??\c:\1tbtnn.exe | \??\c:\hnhbbb.exe |
| PID 4612 wrote to memory of 3152 | N/A | \??\c:\hnhbbb.exe | \??\c:\7vdjj.exe |
| PID 4612 wrote to memory of 3152 | N/A | \??\c:\hnhbbb.exe | \??\c:\7vdjj.exe |
| PID 4612 wrote to memory of 3152 | N/A | \??\c:\hnhbbb.exe | \??\c:\7vdjj.exe |
| PID 3152 wrote to memory of 3936 | N/A | \??\c:\7vdjj.exe | \??\c:\lllfrrr.exe |
| PID 3152 wrote to memory of 3936 | N/A | \??\c:\7vdjj.exe | \??\c:\lllfrrr.exe |
| PID 3152 wrote to memory of 3936 | N/A | \??\c:\7vdjj.exe | \??\c:\lllfrrr.exe |
| PID 3936 wrote to memory of 1144 | N/A | \??\c:\lllfrrr.exe | \??\c:\ttbbbb.exe |
| PID 3936 wrote to memory of 1144 | N/A | \??\c:\lllfrrr.exe | \??\c:\ttbbbb.exe |
| PID 3936 wrote to memory of 1144 | N/A | \??\c:\lllfrrr.exe | \??\c:\ttbbbb.exe |
| PID 1144 wrote to memory of 4652 | N/A | \??\c:\ttbbbb.exe | \??\c:\jvvpj.exe |
| PID 1144 wrote to memory of 4652 | N/A | \??\c:\ttbbbb.exe | \??\c:\jvvpj.exe |
| PID 1144 wrote to memory of 4652 | N/A | \??\c:\ttbbbb.exe | \??\c:\jvvpj.exe |
| PID 4652 wrote to memory of 3920 | N/A | \??\c:\jvvpj.exe | \??\c:\djdjj.exe |
| PID 4652 wrote to memory of 3920 | N/A | \??\c:\jvvpj.exe | \??\c:\djdjj.exe |
| PID 4652 wrote to memory of 3920 | N/A | \??\c:\jvvpj.exe | \??\c:\djdjj.exe |
| PID 3920 wrote to memory of 4608 | N/A | \??\c:\djdjj.exe | \??\c:\xrxxffr.exe |
| PID 3920 wrote to memory of 4608 | N/A | \??\c:\djdjj.exe | \??\c:\xrxxffr.exe |
| PID 3920 wrote to memory of 4608 | N/A | \??\c:\djdjj.exe | \??\c:\xrxxffr.exe |
| PID 4608 wrote to memory of 4352 | N/A | \??\c:\xrxxffr.exe | \??\c:\ttbtnb.exe |
| PID 4608 wrote to memory of 4352 | N/A | \??\c:\xrxxffr.exe | \??\c:\ttbtnb.exe |
| PID 4608 wrote to memory of 4352 | N/A | \??\c:\xrxxffr.exe | \??\c:\ttbtnb.exe |
| PID 4352 wrote to memory of 4884 | N/A | \??\c:\ttbtnb.exe | \??\c:\1bnnhh.exe |
| PID 4352 wrote to memory of 4884 | N/A | \??\c:\ttbtnb.exe | \??\c:\1bnnhh.exe |
| PID 4352 wrote to memory of 4884 | N/A | \??\c:\ttbtnb.exe | \??\c:\1bnnhh.exe |
| PID 4884 wrote to memory of 3872 | N/A | \??\c:\1bnnhh.exe | \??\c:\dpppp.exe |
| PID 4884 wrote to memory of 3872 | N/A | \??\c:\1bnnhh.exe | \??\c:\dpppp.exe |
| PID 4884 wrote to memory of 3872 | N/A | \??\c:\1bnnhh.exe | \??\c:\dpppp.exe |
| PID 3872 wrote to memory of 4084 | N/A | \??\c:\dpppp.exe | \??\c:\bntnnh.exe |
Processes
C:\Users\Admin\AppData\Local\Temp\bd98292b03e32d2823900b389158a95409a42cbeb6a67703a156bcc7a6e0b19aN.exe
"C:\Users\Admin\AppData\Local\Temp\bd98292b03e32d2823900b389158a95409a42cbeb6a67703a156bcc7a6e0b19aN.exe"
\??\c:\1flxrxl.exe
c:\1flxrxl.exe
\??\c:\rllllll.exe
c:\rllllll.exe
\??\c:\thhhbb.exe
c:\thhhbb.exe
\??\c:\jdddv.exe
c:\jdddv.exe
\??\c:\hnbttn.exe
c:\hnbttn.exe
\??\c:\vdpvp.exe
c:\vdpvp.exe
\??\c:\xfxrxxr.exe
c:\xfxrxxr.exe
\??\c:\nhbbht.exe
c:\nhbbht.exe
\??\c:\jvjjd.exe
c:\jvjjd.exe
\??\c:\lrrrlll.exe
c:\lrrrlll.exe
\??\c:\1tbtnn.exe
c:\1tbtnn.exe
\??\c:\hnhbbb.exe
c:\hnhbbb.exe
\??\c:\7vdjj.exe
c:\7vdjj.exe
\??\c:\lllfrrr.exe
c:\lllfrrr.exe
\??\c:\ttbbbb.exe
c:\ttbbbb.exe
\??\c:\jvvpj.exe
c:\jvvpj.exe
\??\c:\djdjj.exe
c:\djdjj.exe
\??\c:\xrxxffr.exe
c:\xrxxffr.exe
\??\c:\ttbtnb.exe
c:\ttbtnb.exe
\??\c:\1bnnhh.exe
c:\1bnnhh.exe
\??\c:\dpppp.exe
c:\dpppp.exe
\??\c:\bntnnh.exe
c:\bntnnh.exe
\??\c:\htbthh.exe
c:\htbthh.exe
\??\c:\jdvpv.exe
c:\jdvpv.exe
\??\c:\ppppj.exe
c:\ppppj.exe
\??\c:\xllfxxf.exe
c:\xllfxxf.exe
\??\c:\nhhhbb.exe
c:\nhhhbb.exe
\??\c:\jvdvp.exe
c:\jvdvp.exe
\??\c:\dddvj.exe
c:\dddvj.exe
\??\c:\llfxfxr.exe
c:\llfxfxr.exe
\??\c:\hnttbb.exe
c:\hnttbb.exe
\??\c:\dpddd.exe
c:\dpddd.exe
\??\c:\dpppd.exe
c:\dpppd.exe
\??\c:\xlrffxf.exe
c:\xlrffxf.exe
\??\c:\1tttnt.exe
c:\1tttnt.exe
\??\c:\nhhtnn.exe
c:\nhhtnn.exe
\??\c:\ppvvj.exe
c:\ppvvj.exe
\??\c:\9vdvv.exe
c:\9vdvv.exe
\??\c:\fxlfflr.exe
c:\fxlfflr.exe
\??\c:\xrlllll.exe
c:\xrlllll.exe
\??\c:\hhtttt.exe
c:\hhtttt.exe
\??\c:\jpvpj.exe
c:\jpvpj.exe
\??\c:\vvjjv.exe
c:\vvjjv.exe
\??\c:\rfxlxlr.exe
c:\rfxlxlr.exe
\??\c:\btttnn.exe
c:\btttnn.exe
\??\c:\thhhtt.exe
c:\thhhtt.exe
\??\c:\pvddv.exe
c:\pvddv.exe
\??\c:\pvdvv.exe
c:\pvdvv.exe
\??\c:\lffxxlf.exe
c:\lffxxlf.exe
\??\c:\ttbhbt.exe
c:\ttbhbt.exe
\??\c:\tnnhhh.exe
c:\tnnhhh.exe
\??\c:\5vddv.exe
c:\5vddv.exe
\??\c:\dpddd.exe
c:\dpddd.exe
\??\c:\lxfllrx.exe
c:\lxfllrx.exe
\??\c:\ntbtnn.exe
c:\ntbtnn.exe
\??\c:\thtbbn.exe
c:\thtbbn.exe
\??\c:\vjjjj.exe
c:\vjjjj.exe
\??\c:\jjjdd.exe
c:\jjjdd.exe
\??\c:\rlxrlll.exe
c:\rlxrlll.exe
\??\c:\bhbhbb.exe
c:\bhbhbb.exe
\??\c:\tbbbhh.exe
c:\tbbbhh.exe
\??\c:\jjjdd.exe
c:\jjjdd.exe
\??\c:\dvpjd.exe
c:\dvpjd.exe
\??\c:\xlrlllr.exe
c:\xlrlllr.exe
\??\c:\tttnnn.exe
c:\tttnnn.exe
\??\c:\hntnnh.exe
c:\hntnnh.exe
\??\c:\jddvp.exe
c:\jddvp.exe
\??\c:\7vvvp.exe
c:\7vvvp.exe
\??\c:\ffllflx.exe
c:\ffllflx.exe
\??\c:\frxrfxf.exe
c:\frxrfxf.exe
\??\c:\3bhhbb.exe
c:\3bhhbb.exe
\??\c:\thnnhh.exe
c:\thnnhh.exe
\??\c:\pjdjd.exe
c:\pjdjd.exe
\??\c:\lxfrfxf.exe
c:\lxfrfxf.exe
\??\c:\llrrlxl.exe
c:\llrrlxl.exe
\??\c:\bbbtnb.exe
c:\bbbtnb.exe
\??\c:\jdvdp.exe
c:\jdvdp.exe
\??\c:\rxxrllx.exe
c:\rxxrllx.exe
\??\c:\nhbnhh.exe
c:\nhbnhh.exe
\??\c:\vvvpv.exe
c:\vvvpv.exe
\??\c:\lfrlfrl.exe
c:\lfrlfrl.exe
\??\c:\bhnhnh.exe
c:\bhnhnh.exe
\??\c:\jjdjj.exe
c:\jjdjj.exe
\??\c:\lflfrrr.exe
c:\lflfrrr.exe
\??\c:\xrllrrx.exe
c:\xrllrrx.exe
\??\c:\tbbhbb.exe
c:\tbbhbb.exe
\??\c:\bbthbh.exe
c:\bbthbh.exe
\??\c:\vpjpp.exe
c:\vpjpp.exe
\??\c:\fxxrlll.exe
c:\fxxrlll.exe
\??\c:\btbtnh.exe
c:\btbtnh.exe
\??\c:\hnttnt.exe
c:\hnttnt.exe
\??\c:\ppjpd.exe
c:\ppjpd.exe
\??\c:\vvjjd.exe
c:\vvjjd.exe
\??\c:\lrxxllf.exe
c:\lrxxllf.exe
\??\c:\hbbtnn.exe
c:\hbbtnn.exe
\??\c:\9tbtnn.exe
c:\9tbtnn.exe
\??\c:\jjvjd.exe
c:\jjvjd.exe
\??\c:\jvdvv.exe
c:\jvdvv.exe
\??\c:\xflfxxr.exe
c:\xflfxxr.exe
\??\c:\thbbtn.exe
c:\thbbtn.exe
\??\c:\nhnhbb.exe
c:\nhnhbb.exe
\??\c:\nnnhbb.exe
c:\nnnhbb.exe
\??\c:\pdppp.exe
c:\pdppp.exe
\??\c:\9lxrlxr.exe
c:\9lxrlxr.exe
\??\c:\xlrrllf.exe
c:\xlrrllf.exe
\??\c:\hbhbbb.exe
c:\hbhbbb.exe
\??\c:\tbbbtt.exe
c:\tbbbtt.exe
\??\c:\pvvpj.exe
c:\pvvpj.exe
\??\c:\lllxfxr.exe
c:\lllxfxr.exe
\??\c:\fllrfff.exe
c:\fllrfff.exe
\??\c:\hbntnh.exe
c:\hbntnh.exe
\??\c:\bbhthb.exe
c:\bbhthb.exe
\??\c:\vpddv.exe
c:\vpddv.exe
\??\c:\vpdvv.exe
c:\vpdvv.exe
\??\c:\lfxllfr.exe
c:\lfxllfr.exe
\??\c:\rfllfff.exe
c:\rfllfff.exe
\??\c:\bttnhh.exe
c:\bttnhh.exe
\??\c:\jddvv.exe
c:\jddvv.exe
\??\c:\jdvdp.exe
c:\jdvdp.exe
\??\c:\fxrrllr.exe
c:\fxrrllr.exe
\??\c:\fxxxxxx.exe
c:\fxxxxxx.exe
\??\c:\hbnnhh.exe
c:\hbnnhh.exe
\??\c:\lxrrrrr.exe
c:\lxrrrrr.exe
\??\c:\7lrlfxx.exe
c:\7lrlfxx.exe
\??\c:\hbtnnh.exe
c:\hbtnnh.exe
\??\c:\nhnhhh.exe
c:\nhnhhh.exe
\??\c:\jdjdv.exe
c:\jdjdv.exe
\??\c:\lxlflxx.exe
c:\lxlflxx.exe
\??\c:\tttnhn.exe
c:\tttnhn.exe
\??\c:\ttnbtt.exe
c:\ttnbtt.exe
\??\c:\jvpjd.exe
c:\jvpjd.exe
\??\c:\3vvvv.exe
c:\3vvvv.exe
\??\c:\xxrrlll.exe
c:\xxrrlll.exe
\??\c:\bhtbnb.exe
c:\bhtbnb.exe
\??\c:\nbbbbb.exe
c:\nbbbbb.exe
\??\c:\jdvpp.exe
c:\jdvpp.exe
\??\c:\1djdj.exe
c:\1djdj.exe
\??\c:\rlxrffx.exe
c:\rlxrffx.exe
\??\c:\5rrlflf.exe
c:\5rrlflf.exe
\??\c:\bttthh.exe
c:\bttthh.exe
\??\c:\nnnhbb.exe
c:\nnnhbb.exe
\??\c:\jjdvv.exe
c:\jjdvv.exe
\??\c:\rlfxxll.exe
c:\rlfxxll.exe
\??\c:\ffffxfx.exe
c:\ffffxfx.exe
\??\c:\nhnntb.exe
c:\nhnntb.exe
\??\c:\bbhhtb.exe
c:\bbhhtb.exe
\??\c:\nbbttt.exe
c:\nbbttt.exe
\??\c:\pdjdd.exe
c:\pdjdd.exe
\??\c:\rllfrrr.exe
c:\rllfrrr.exe
\??\c:\flrrrrl.exe
c:\flrrrrl.exe
\??\c:\rrlfxxx.exe
c:\rrlfxxx.exe
\??\c:\nbttnh.exe
c:\nbttnh.exe
\??\c:\btbbbb.exe
c:\btbbbb.exe
\??\c:\dppdp.exe
c:\dppdp.exe
\??\c:\lffxrxr.exe
c:\lffxrxr.exe
\??\c:\bbbtnn.exe
c:\bbbtnn.exe
\??\c:\dvjdd.exe
c:\dvjdd.exe
\??\c:\vdjpj.exe
c:\vdjpj.exe
\??\c:\flrlxxx.exe
c:\flrlxxx.exe
\??\c:\tnbbtt.exe
c:\tnbbtt.exe
\??\c:\btbbhh.exe
c:\btbbhh.exe
\??\c:\dpvpj.exe
c:\dpvpj.exe
\??\c:\jpdjj.exe
c:\jpdjj.exe
\??\c:\ffrfxxx.exe
c:\ffrfxxx.exe
\??\c:\fxrrrxr.exe
c:\fxrrrxr.exe
\??\c:\bhnhbt.exe
c:\bhnhbt.exe
\??\c:\xxxffff.exe
c:\xxxffff.exe
\??\c:\nnnnnn.exe
c:\nnnnnn.exe
\??\c:\nntnhh.exe
c:\nntnhh.exe
\??\c:\djppp.exe
c:\djppp.exe
\??\c:\rllfrxf.exe
c:\rllfrxf.exe
\??\c:\fxffffl.exe
c:\fxffffl.exe
\??\c:\nnthbb.exe
c:\nnthbb.exe
\??\c:\vjpjv.exe
c:\vjpjv.exe
\??\c:\jvpdp.exe
c:\jvpdp.exe
\??\c:\xlrlfxx.exe
c:\xlrlfxx.exe
\??\c:\lfffxxx.exe
c:\lfffxxx.exe
\??\c:\bbtttt.exe
c:\bbtttt.exe
\??\c:\ppdvj.exe
c:\ppdvj.exe
\??\c:\vjjvp.exe
c:\vjjvp.exe
\??\c:\frxrllf.exe
c:\frxrllf.exe
\??\c:\lfxrllf.exe
c:\lfxrllf.exe
\??\c:\ntbtnn.exe
c:\ntbtnn.exe
\??\c:\5hhbhn.exe
c:\5hhbhn.exe
\??\c:\vdjdv.exe
c:\vdjdv.exe
\??\c:\lffxrrl.exe
c:\lffxrrl.exe
\??\c:\lxxxxrr.exe
c:\lxxxxrr.exe
\??\c:\hnbtnt.exe
c:\hnbtnt.exe
\??\c:\pjpjj.exe
c:\pjpjj.exe
\??\c:\flrlllx.exe
c:\flrlllx.exe
\??\c:\rrllfff.exe
c:\rrllfff.exe
\??\c:\tnnnnn.exe
c:\tnnnnn.exe
\??\c:\tntnnn.exe
c:\tntnnn.exe
\??\c:\jdddj.exe
c:\jdddj.exe
\??\c:\dvjdv.exe
c:\dvjdv.exe
\??\c:\fflrlll.exe
c:\fflrlll.exe
\??\c:\5bbttt.exe
c:\5bbttt.exe
\??\c:\1hnnhh.exe
c:\1hnnhh.exe
\??\c:\5pvpd.exe
c:\5pvpd.exe
\??\c:\frllfff.exe
c:\frllfff.exe
\??\c:\rrlxrrf.exe
c:\rrlxrrf.exe
\??\c:\tnhhnn.exe
c:\tnhhnn.exe
\??\c:\djjpj.exe
c:\djjpj.exe
\??\c:\vppjd.exe
c:\vppjd.exe
\??\c:\rrrxxrf.exe
c:\rrrxxrf.exe
\??\c:\1rrlfff.exe
c:\1rrlfff.exe
\??\c:\nnhhbh.exe
c:\nnhhbh.exe
\??\c:\7httbb.exe
c:\7httbb.exe
\??\c:\vvppd.exe
c:\vvppd.exe
\??\c:\fxxrflf.exe
c:\fxxrflf.exe
\??\c:\fxfffff.exe
c:\fxfffff.exe
\??\c:\tnnnbb.exe
c:\tnnnbb.exe
\??\c:\vvjdd.exe
c:\vvjdd.exe
\??\c:\djpjj.exe
c:\djpjj.exe
\??\c:\lrxfxxr.exe
c:\lrxfxxr.exe
\??\c:\frxflff.exe
c:\frxflff.exe
\??\c:\htbtth.exe
c:\htbtth.exe
\??\c:\tnnhbb.exe
c:\tnnhbb.exe
\??\c:\pdjjj.exe
c:\pdjjj.exe
\??\c:\xfrxrrr.exe
c:\xfrxrrr.exe
\??\c:\7fllllf.exe
c:\7fllllf.exe
\??\c:\bhhhhh.exe
c:\bhhhhh.exe
\??\c:\tthbnn.exe
c:\tthbnn.exe
\??\c:\pvpjd.exe
c:\pvpjd.exe
\??\c:\jjdvv.exe
c:\jjdvv.exe
\??\c:\vvpvd.exe
c:\vvpvd.exe
\??\c:\fllfrrr.exe
c:\fllfrrr.exe
\??\c:\hbnnnn.exe
c:\hbnnnn.exe
\??\c:\ntbttt.exe
c:\ntbttt.exe
\??\c:\dppvp.exe
c:\dppvp.exe
\??\c:\jddvp.exe
c:\jddvp.exe
\??\c:\3jdvp.exe
c:\3jdvp.exe
\??\c:\1flfxxr.exe
c:\1flfxxr.exe
\??\c:\hthbth.exe
c:\hthbth.exe
\??\c:\nnbbbh.exe
c:\nnbbbh.exe
\??\c:\pjddp.exe
c:\pjddp.exe
\??\c:\dppjd.exe
c:\dppjd.exe
\??\c:\rxfxrrl.exe
c:\rxfxrrl.exe
\??\c:\xrxxxxr.exe
c:\xrxxxxr.exe
\??\c:\ntbbtt.exe
c:\ntbbtt.exe
\??\c:\tntnnn.exe
c:\tntnnn.exe
\??\c:\jjvdj.exe
c:\jjvdj.exe
\??\c:\jpppj.exe
c:\jpppj.exe
\??\c:\rxrllff.exe
c:\rxrllff.exe
\??\c:\bnnbhb.exe
c:\bnnbhb.exe
\??\c:\thbthh.exe
c:\thbthh.exe
\??\c:\hnnnnn.exe
c:\hnnnnn.exe
\??\c:\dvppp.exe
c:\dvppp.exe
\??\c:\vpjjj.exe
c:\vpjjj.exe
\??\c:\lfffxff.exe
c:\lfffxff.exe
\??\c:\frrrxfx.exe
c:\frrrxfx.exe
\??\c:\hnhbth.exe
c:\hnhbth.exe
\??\c:\nhntbb.exe
c:\nhntbb.exe
\??\c:\dvvvj.exe
c:\dvvvj.exe
\??\c:\vpjjd.exe
c:\vpjjd.exe
\??\c:\rxfxrrr.exe
c:\rxfxrrr.exe
\??\c:\xxlrlll.exe
c:\xxlrlll.exe
\??\c:\nthhbh.exe
c:\nthhbh.exe
\??\c:\3htntt.exe
c:\3htntt.exe
\??\c:\hnbttb.exe
c:\hnbttb.exe
\??\c:\jdpjd.exe
c:\jdpjd.exe
\??\c:\1rlfrrl.exe
c:\1rlfrrl.exe
\??\c:\rrlfllf.exe
c:\rrlfllf.exe
\??\c:\pppjj.exe
c:\pppjj.exe
\??\c:\pjjdv.exe
c:\pjjdv.exe
\??\c:\xffxrxx.exe
c:\xffxrxx.exe
\??\c:\nhtntt.exe
c:\nhtntt.exe
\??\c:\btnnhh.exe
c:\btnnhh.exe
\??\c:\3djdd.exe
c:\3djdd.exe
\??\c:\vppjd.exe
c:\vppjd.exe
\??\c:\rlflfrf.exe
c:\rlflfrf.exe
\??\c:\nnnnhh.exe
c:\nnnnhh.exe
\??\c:\hbtthh.exe
c:\hbtthh.exe
\??\c:\pvpjd.exe
c:\pvpjd.exe
\??\c:\ddvvv.exe
c:\ddvvv.exe
\??\c:\fxxrffx.exe
c:\fxxrffx.exe
\??\c:\rrffxxx.exe
c:\rrffxxx.exe
\??\c:\nnnhbb.exe
c:\nnnhbb.exe
\??\c:\nnhbtb.exe
c:\nnhbtb.exe
\??\c:\bhhhbt.exe
c:\bhhhbt.exe
\??\c:\dpjvj.exe
c:\dpjvj.exe
\??\c:\9ffxrll.exe
c:\9ffxrll.exe
\??\c:\rrlllll.exe
c:\rrlllll.exe
\??\c:\bhhhbb.exe
c:\bhhhbb.exe
\??\c:\bttbbt.exe
c:\bttbbt.exe
\??\c:\djvjj.exe
c:\djvjj.exe
\??\c:\vvjjd.exe
c:\vvjjd.exe
\??\c:\vvpjj.exe
c:\vvpjj.exe
\??\c:\lflfxlf.exe
c:\lflfxlf.exe
\??\c:\9fffxxx.exe
c:\9fffxxx.exe
\??\c:\nhnnht.exe
c:\nhnnht.exe
\??\c:\dvdvp.exe
c:\dvdvp.exe
\??\c:\ppjdv.exe
c:\ppjdv.exe
\??\c:\9jpjd.exe
c:\9jpjd.exe
\??\c:\7rlfrff.exe
c:\7rlfrff.exe
\??\c:\lxxxrrf.exe
c:\lxxxrrf.exe
\??\c:\htnttn.exe
c:\htnttn.exe
\??\c:\vdjjj.exe
c:\vdjjj.exe
\??\c:\pdpvp.exe
c:\pdpvp.exe
\??\c:\llfxffl.exe
c:\llfxffl.exe
\??\c:\rxxxxxx.exe
c:\rxxxxxx.exe
\??\c:\ttbbtt.exe
c:\ttbbtt.exe
\??\c:\hbhbnb.exe
c:\hbhbnb.exe
\??\c:\vpjjp.exe
c:\vpjjp.exe
\??\c:\dddvp.exe
c:\dddvp.exe
\??\c:\xlxxflx.exe
c:\xlxxflx.exe
\??\c:\rfllffx.exe
c:\rfllffx.exe
\??\c:\nhhhbb.exe
c:\nhhhbb.exe
\??\c:\hbbbnh.exe
c:\hbbbnh.exe
\??\c:\dpddv.exe
c:\dpddv.exe
\??\c:\xflxxxr.exe
c:\xflxxxr.exe
\??\c:\nnnnnh.exe
c:\nnnnnh.exe
\??\c:\nntnbh.exe
c:\nntnbh.exe
\??\c:\dvjdv.exe
c:\dvjdv.exe
\??\c:\9pjdv.exe
c:\9pjdv.exe
\??\c:\1fffffx.exe
c:\1fffffx.exe
\??\c:\rxfxxxr.exe
c:\rxfxxxr.exe
\??\c:\bnthbb.exe
c:\bnthbb.exe
\??\c:\httnhb.exe
c:\httnhb.exe
\??\c:\vpdpj.exe
c:\vpdpj.exe
\??\c:\ppddp.exe
c:\ppddp.exe
\??\c:\1ffxllf.exe
c:\1ffxllf.exe
\??\c:\xrllxfl.exe
c:\xrllxfl.exe
\??\c:\fllrrrx.exe
c:\fllrrrx.exe
\??\c:\thbbhh.exe
c:\thbbhh.exe
\??\c:\vpvpj.exe
c:\vpvpj.exe
\??\c:\jpdvv.exe
c:\jpdvv.exe
\??\c:\lxxxlll.exe
c:\lxxxlll.exe
\??\c:\htbtnn.exe
c:\htbtnn.exe
\??\c:\tbhbhh.exe
c:\tbhbhh.exe
\??\c:\jjddd.exe
c:\jjddd.exe
\??\c:\pjddd.exe
c:\pjddd.exe
\??\c:\fxrllll.exe
c:\fxrllll.exe
\??\c:\ttbnhb.exe
c:\ttbnhb.exe
\??\c:\hbtnbb.exe
c:\hbtnbb.exe
\??\c:\ppppj.exe
c:\ppppj.exe
\??\c:\jdpvp.exe
c:\jdpvp.exe
\??\c:\xlffrrr.exe
c:\xlffrrr.exe
\??\c:\nhttbb.exe
c:\nhttbb.exe
\??\c:\tthbth.exe
c:\tthbth.exe
\??\c:\jddvv.exe
c:\jddvv.exe
\??\c:\jdjdv.exe
c:\jdjdv.exe
\??\c:\9rlffff.exe
c:\9rlffff.exe
\??\c:\rlrxxxx.exe
c:\rlrxxxx.exe
\??\c:\bttttb.exe
c:\bttttb.exe
\??\c:\hbbbbb.exe
c:\hbbbbb.exe
\??\c:\dpjjv.exe
c:\dpjjv.exe
\??\c:\ddpjv.exe
c:\ddpjv.exe
\??\c:\pjjdv.exe
c:\pjjdv.exe
\??\c:\1fxxxxx.exe
c:\1fxxxxx.exe
\??\c:\xffxrrl.exe
c:\xffxrrl.exe
\??\c:\thnhhh.exe
c:\thnhhh.exe
\??\c:\vpppj.exe
c:\vpppj.exe
\??\c:\vpjdp.exe
c:\vpjdp.exe
\??\c:\rlrlrxr.exe
c:\rlrlrxr.exe
\??\c:\tttbbb.exe
c:\tttbbb.exe
\??\c:\nhnntb.exe
c:\nhnntb.exe
\??\c:\jjpjv.exe
c:\jjpjv.exe
\??\c:\7jppv.exe
c:\7jppv.exe
\??\c:\rflrlll.exe
c:\rflrlll.exe
\??\c:\rxxllxl.exe
c:\rxxllxl.exe
\??\c:\hbbbbb.exe
c:\hbbbbb.exe
\??\c:\tbhbhh.exe
c:\tbhbhh.exe
\??\c:\vdjjd.exe
c:\vdjjd.exe
\??\c:\jdpjp.exe
c:\jdpjp.exe
\??\c:\xrlfllx.exe
c:\xrlfllx.exe
\??\c:\llrxffl.exe
c:\llrxffl.exe
\??\c:\bbbtnn.exe
c:\bbbtnn.exe
\??\c:\bttttt.exe
c:\bttttt.exe
\??\c:\dppjj.exe
c:\dppjj.exe
\??\c:\xllfrrf.exe
c:\xllfrrf.exe
\??\c:\nhhtnh.exe
c:\nhhtnh.exe
\??\c:\dpjpj.exe
c:\dpjpj.exe
\??\c:\5ddvj.exe
c:\5ddvj.exe
\??\c:\1flfxxf.exe
c:\1flfxxf.exe
\??\c:\lrxrfxr.exe
c:\lrxrfxr.exe
\??\c:\bnnhbb.exe
c:\bnnhbb.exe
\??\c:\hbhnbt.exe
c:\hbhnbt.exe
\??\c:\vppdp.exe
c:\vppdp.exe
\??\c:\7ffxrrx.exe
c:\7ffxrrx.exe
\??\c:\rfxrllx.exe
c:\rfxrllx.exe
\??\c:\7tbttt.exe
c:\7tbttt.exe
\??\c:\bnnbtt.exe
c:\bnnbtt.exe
\??\c:\vvvjv.exe
c:\vvvjv.exe
\??\c:\9ppdp.exe
c:\9ppdp.exe
\??\c:\xxlllll.exe
c:\xxlllll.exe
\??\c:\rrxrrff.exe
c:\rrxrrff.exe
\??\c:\7hnnhb.exe
c:\7hnnhb.exe
\??\c:\ppjjd.exe
c:\ppjjd.exe
\??\c:\pjjjv.exe
c:\pjjjv.exe
\??\c:\xflxlfr.exe
c:\xflxlfr.exe
\??\c:\1nhthh.exe
c:\1nhthh.exe
\??\c:\ttnhtn.exe
c:\ttnhtn.exe
\??\c:\pdpdv.exe
c:\pdpdv.exe
\??\c:\xrrrllx.exe
c:\xrrrllx.exe
\??\c:\lffxrrf.exe
c:\lffxrrf.exe
\??\c:\nhhbnh.exe
c:\nhhbnh.exe
\??\c:\ddpjv.exe
c:\ddpjv.exe
\??\c:\rrllflf.exe
c:\rrllflf.exe
\??\c:\xlxxflr.exe
c:\xlxxflr.exe
\??\c:\thbtnh.exe
c:\thbtnh.exe
\??\c:\bntnhh.exe
c:\bntnhh.exe
\??\c:\pvddd.exe
c:\pvddd.exe
\??\c:\frxllfl.exe
c:\frxllfl.exe
\??\c:\bttbth.exe
c:\bttbth.exe
\??\c:\nbbhbt.exe
c:\nbbhbt.exe
\??\c:\jvpdp.exe
c:\jvpdp.exe
\??\c:\jpjpd.exe
c:\jpjpd.exe
\??\c:\lllfxrl.exe
c:\lllfxrl.exe
\??\c:\ffrxrfx.exe
c:\ffrxrfx.exe
\??\c:\7htnhb.exe
c:\7htnhb.exe
\??\c:\3ddpv.exe
c:\3ddpv.exe
\??\c:\vpddp.exe
c:\vpddp.exe
\??\c:\lrxlxrl.exe
c:\lrxlxrl.exe
\??\c:\tntnhb.exe
c:\tntnhb.exe
\??\c:\hhnhtt.exe
c:\hhnhtt.exe
\??\c:\dvjjj.exe
c:\dvjjj.exe
\??\c:\lxfxxxf.exe
c:\lxfxxxf.exe
\??\c:\lffllxf.exe
c:\lffllxf.exe
\??\c:\1nbhhh.exe
c:\1nbhhh.exe
\??\c:\hhthtb.exe
c:\hhthtb.exe
\??\c:\pppvd.exe
c:\pppvd.exe
\??\c:\vdjdv.exe
c:\vdjdv.exe
\??\c:\rrflxlx.exe
c:\rrflxlx.exe
\??\c:\nhbthh.exe
c:\nhbthh.exe
\??\c:\tnnhbt.exe
c:\tnnhbt.exe
\??\c:\1vvpj.exe
c:\1vvpj.exe
\??\c:\lxllxxx.exe
c:\lxllxxx.exe
\??\c:\rxxxrrl.exe
c:\rxxxrrl.exe
\??\c:\bhnttt.exe
c:\bhnttt.exe
\??\c:\tbbtnn.exe
c:\tbbtnn.exe
\??\c:\bnthbn.exe
c:\bnthbn.exe
\??\c:\9pdvv.exe
c:\9pdvv.exe
\??\c:\dvpjv.exe
c:\dvpjv.exe
\??\c:\rfffffx.exe
c:\rfffffx.exe
\??\c:\rxxxxxx.exe
c:\rxxxxxx.exe
\??\c:\7rfflll.exe
c:\7rfflll.exe
\??\c:\hbbbtt.exe
c:\hbbbtt.exe
\??\c:\htbbtt.exe
c:\htbbtt.exe
\??\c:\5jvpj.exe
c:\5jvpj.exe
\??\c:\rrfxrrl.exe
c:\rrfxrrl.exe
\??\c:\lfxfxrx.exe
c:\lfxfxrx.exe
\??\c:\nhnhhb.exe
c:\nhnhhb.exe
\??\c:\nhhhhh.exe
c:\nhhhhh.exe
\??\c:\vpvvd.exe
c:\vpvvd.exe
\??\c:\dvjjp.exe
c:\dvjjp.exe
\??\c:\rffffff.exe
c:\rffffff.exe
\??\c:\rlfxxfl.exe
c:\rlfxxfl.exe
\??\c:\ttthhh.exe
c:\ttthhh.exe
\??\c:\htnbbb.exe
c:\htnbbb.exe
\??\c:\vvpjp.exe
c:\vvpjp.exe
\??\c:\3jjdp.exe
c:\3jjdp.exe
\??\c:\xxrlfll.exe
c:\xxrlfll.exe
\??\c:\bhbtnt.exe
c:\bhbtnt.exe
\??\c:\9jjpd.exe
c:\9jjpd.exe
\??\c:\7dpjv.exe
c:\7dpjv.exe
\??\c:\7rfxllr.exe
c:\7rfxllr.exe
\??\c:\rrxfflr.exe
c:\rrxfflr.exe
\??\c:\hntnnh.exe
c:\hntnnh.exe
\??\c:\nbhttn.exe
c:\nbhttn.exe
\??\c:\vjdjd.exe
c:\vjdjd.exe
\??\c:\rlflxrf.exe
c:\rlflxrf.exe
\??\c:\tttnnn.exe
c:\tttnnn.exe
\??\c:\hnnhth.exe
c:\hnnhth.exe
\??\c:\1jjjd.exe
c:\1jjjd.exe
\??\c:\rlfxxfx.exe
c:\rlfxxfx.exe
\??\c:\thtnhh.exe
c:\thtnhh.exe
\??\c:\nbbtnt.exe
c:\nbbtnt.exe
\??\c:\1jvvp.exe
c:\1jvvp.exe
\??\c:\pjjdv.exe
c:\pjjdv.exe
\??\c:\xxrrlxf.exe
c:\xxrrlxf.exe
\??\c:\rxxrfxl.exe
c:\rxxrfxl.exe
\??\c:\tntttt.exe
c:\tntttt.exe
\??\c:\ntthbb.exe
c:\ntthbb.exe
\??\c:\jvvvp.exe
c:\jvvvp.exe
\??\c:\ppvvp.exe
c:\ppvvp.exe
\??\c:\rrxxfll.exe
c:\rrxxfll.exe
\??\c:\nhtthn.exe
c:\nhtthn.exe
\??\c:\bbnnbt.exe
c:\bbnnbt.exe
\??\c:\jdddp.exe
c:\jdddp.exe
\??\c:\vjvpp.exe
c:\vjvpp.exe
\??\c:\rxrlfxl.exe
c:\rxrlfxl.exe
\??\c:\rlllfrr.exe
c:\rlllfrr.exe
\??\c:\hthnnh.exe
c:\hthnnh.exe
\??\c:\hbtbbh.exe
c:\hbtbbh.exe
\??\c:\jvdvp.exe
c:\jvdvp.exe
\??\c:\vpjjd.exe
c:\vpjjd.exe
\??\c:\ffxfrrr.exe
c:\ffxfrrr.exe
\??\c:\lfrxflr.exe
c:\lfrxflr.exe
\??\c:\nnnntn.exe
c:\nnnntn.exe
\??\c:\jpvpp.exe
c:\jpvpp.exe
\??\c:\fllxxrl.exe
c:\fllxxrl.exe
\??\c:\tntbnh.exe
c:\tntbnh.exe
\??\c:\bthhht.exe
c:\bthhht.exe
\??\c:\ppppj.exe
c:\ppppj.exe
\??\c:\flxxxff.exe
c:\flxxxff.exe
\??\c:\xxrllfx.exe
c:\xxrllfx.exe
\??\c:\bbhhbb.exe
c:\bbhhbb.exe
\??\c:\nbnthb.exe
c:\nbnthb.exe
\??\c:\1ppvp.exe
c:\1ppvp.exe
\??\c:\vpvvp.exe
c:\vpvvp.exe
\??\c:\lxllfff.exe
c:\lxllfff.exe
\??\c:\xfxxrrr.exe
c:\xfxxrrr.exe
\??\c:\bnnhbb.exe
c:\bnnhbb.exe
\??\c:\hhbhtb.exe
c:\hhbhtb.exe
\??\c:\jpddv.exe
c:\jpddv.exe
\??\c:\pjddd.exe
c:\pjddd.exe
\??\c:\lxxfrfr.exe
c:\lxxfrfr.exe
\??\c:\flxllll.exe
c:\flxllll.exe
\??\c:\nhbtnh.exe
c:\nhbtnh.exe
\??\c:\hnhbtb.exe
c:\hnhbtb.exe
\??\c:\ttbbbn.exe
c:\ttbbbn.exe
\??\c:\7dvvp.exe
c:\7dvvp.exe
\??\c:\3ppvv.exe
c:\3ppvv.exe
\??\c:\flflfll.exe
c:\flflfll.exe
\??\c:\frxxxfx.exe
c:\frxxxfx.exe
\??\c:\1xlfrrx.exe
c:\1xlfrrx.exe
\??\c:\hbhtbh.exe
c:\hbhtbh.exe
\??\c:\tttnhn.exe
c:\tttnhn.exe
\??\c:\1pvvp.exe
c:\1pvvp.exe
\??\c:\pjjdd.exe
c:\pjjdd.exe
\??\c:\rflrxfr.exe
c:\rflrxfr.exe
\??\c:\frfrxll.exe
c:\frfrxll.exe
\??\c:\3pjdd.exe
c:\3pjdd.exe
\??\c:\1xxrxxr.exe
c:\1xxrxxr.exe
\??\c:\nhhhbb.exe
c:\nhhhbb.exe
\??\c:\jjddv.exe
c:\jjddv.exe
\??\c:\dvjdd.exe
c:\dvjdd.exe
\??\c:\3rflrxr.exe
c:\3rflrxr.exe
\??\c:\tttnnb.exe
c:\tttnnb.exe
\??\c:\pdpjv.exe
c:\pdpjv.exe
\??\c:\pvjvd.exe
c:\pvjvd.exe
\??\c:\xrrlxff.exe
c:\xrrlxff.exe
\??\c:\bntntt.exe
c:\bntntt.exe
\??\c:\htbthh.exe
c:\htbthh.exe
\??\c:\jvvvp.exe
c:\jvvvp.exe
\??\c:\jpjpj.exe
c:\jpjpj.exe
\??\c:\xxfxxll.exe
c:\xxfxxll.exe
\??\c:\tbtbht.exe
c:\tbtbht.exe
\??\c:\ththbb.exe
c:\ththbb.exe
\??\c:\jdvpp.exe
c:\jdvpp.exe
\??\c:\jjvvv.exe
c:\jjvvv.exe
\??\c:\7rxflxf.exe
c:\7rxflxf.exe
\??\c:\ttttnt.exe
c:\ttttnt.exe
\??\c:\pdjvd.exe
c:\pdjvd.exe
\??\c:\pppdp.exe
c:\pppdp.exe
\??\c:\lffxfxf.exe
c:\lffxfxf.exe
\??\c:\ffxrrlx.exe
c:\ffxrrlx.exe
\??\c:\hnthbt.exe
c:\hnthbt.exe
\??\c:\jdpvj.exe
c:\jdpvj.exe
\??\c:\7ppjd.exe
c:\7ppjd.exe
\??\c:\5xrlrrr.exe
c:\5xrlrrr.exe
\??\c:\tbtnbb.exe
c:\tbtnbb.exe
\??\c:\httnbb.exe
c:\httnbb.exe
\??\c:\1dvjv.exe
c:\1dvjv.exe
\??\c:\jjdpd.exe
c:\jjdpd.exe
\??\c:\djpdj.exe
c:\djpdj.exe
\??\c:\3xrfrlx.exe
c:\3xrfrlx.exe
\??\c:\hbbtnt.exe
c:\hbbtnt.exe
\??\c:\hhhtht.exe
c:\hhhtht.exe
\??\c:\5pjvj.exe
c:\5pjvj.exe
\??\c:\pvdvp.exe
c:\pvdvp.exe
\??\c:\rxrlffr.exe
c:\rxrlffr.exe
\??\c:\lxrlrxr.exe
c:\lxrlrxr.exe
\??\c:\bhnhbb.exe
c:\bhnhbb.exe
\??\c:\dvjjp.exe
c:\dvjjp.exe
\??\c:\dvjdv.exe
c:\dvjdv.exe
\??\c:\xxrlxfr.exe
c:\xxrlxfr.exe
\??\c:\llfxrrl.exe
c:\llfxrrl.exe
\??\c:\hnnhtn.exe
c:\hnnhtn.exe
\??\c:\pdjdd.exe
c:\pdjdd.exe
\??\c:\jdddv.exe
c:\jdddv.exe
\??\c:\5xrlxrf.exe
c:\5xrlxrf.exe
\??\c:\tnnbtn.exe
c:\tnnbtn.exe
\??\c:\hnthbt.exe
c:\hnthbt.exe
\??\c:\tnhbtt.exe
c:\tnhbtt.exe
\??\c:\jvvpj.exe
c:\jvvpj.exe
\??\c:\3jdjv.exe
c:\3jdjv.exe
\??\c:\xfxrxrf.exe
c:\xfxrxrf.exe
\??\c:\ntbtnb.exe
c:\ntbtnb.exe
\??\c:\thbbbh.exe
c:\thbbbh.exe
\??\c:\vvddv.exe
c:\vvddv.exe
\??\c:\vjvpj.exe
c:\vjvpj.exe
\??\c:\xrxrlll.exe
c:\xrxrlll.exe
\??\c:\rfxlfxr.exe
c:\rfxlfxr.exe
\??\c:\nhtntt.exe
c:\nhtntt.exe
\??\c:\pdvjd.exe
c:\pdvjd.exe
\??\c:\1jpdd.exe
c:\1jpdd.exe
\??\c:\1ffxrrl.exe
c:\1ffxrrl.exe
\??\c:\3lxffxf.exe
c:\3lxffxf.exe
\??\c:\9nbhhn.exe
c:\9nbhhn.exe
\??\c:\hbtnbb.exe
c:\hbtnbb.exe
\??\c:\dddjd.exe
c:\dddjd.exe
\??\c:\lfxllff.exe
c:\lfxllff.exe
\??\c:\xxxxlxl.exe
c:\xxxxlxl.exe
\??\c:\hbthbn.exe
c:\hbthbn.exe
\??\c:\bnbtnn.exe
c:\bnbtnn.exe
\??\c:\djppp.exe
c:\djppp.exe
\??\c:\ddvpd.exe
c:\ddvpd.exe
\??\c:\frrfxxr.exe
c:\frrfxxr.exe
\??\c:\lrfxxxx.exe
c:\lrfxxxx.exe
\??\c:\htbbbt.exe
c:\htbbbt.exe
\??\c:\1dddd.exe
c:\1dddd.exe
\??\c:\ppjvj.exe
c:\ppjvj.exe
\??\c:\rlllrlr.exe
c:\rlllrlr.exe
\??\c:\fllxlfx.exe
c:\fllxlfx.exe
\??\c:\bnbtnb.exe
c:\bnbtnb.exe
\??\c:\tthbtt.exe
c:\tthbtt.exe
\??\c:\pjjdv.exe
c:\pjjdv.exe
\??\c:\jddvp.exe
c:\jddvp.exe
\??\c:\rlfrllx.exe
c:\rlfrllx.exe
\??\c:\fxxlrrf.exe
c:\fxxlrrf.exe
\??\c:\btnbnh.exe
c:\btnbnh.exe
\??\c:\tnhtbt.exe
c:\tnhtbt.exe
\??\c:\djddv.exe
c:\djddv.exe
\??\c:\pdpdv.exe
c:\pdpdv.exe
\??\c:\lllrrfl.exe
c:\lllrrfl.exe
\??\c:\9bttnn.exe
c:\9bttnn.exe
\??\c:\ttthtn.exe
c:\ttthtn.exe
\??\c:\tbbnbh.exe
c:\tbbnbh.exe
\??\c:\7pdvd.exe
c:\7pdvd.exe
\??\c:\rfxrfxr.exe
c:\rfxrfxr.exe
\??\c:\xxrrrrl.exe
c:\xxrrrrl.exe
\??\c:\5tbnnh.exe
c:\5tbnnh.exe
\??\c:\btnhtn.exe
c:\btnhtn.exe
\??\c:\dddvj.exe
c:\dddvj.exe
\??\c:\3pdvj.exe
c:\3pdvj.exe
\??\c:\lflxfxl.exe
c:\lflxfxl.exe
\??\c:\nbtbht.exe
c:\nbtbht.exe
\??\c:\nthhth.exe
c:\nthhth.exe
\??\c:\pjdjv.exe
c:\pjdjv.exe
\??\c:\ppvpp.exe
c:\ppvpp.exe
\??\c:\xlllfxx.exe
c:\xlllfxx.exe
\??\c:\lxxxrrr.exe
c:\lxxxrrr.exe
\??\c:\tnnnbt.exe
c:\tnnnbt.exe
\??\c:\tnhhbb.exe
c:\tnhhbb.exe
\??\c:\pvvpj.exe
c:\pvvpj.exe
\??\c:\1ddjj.exe
c:\1ddjj.exe
\??\c:\9dpjd.exe
c:\9dpjd.exe
\??\c:\frlxlxr.exe
c:\frlxlxr.exe
\??\c:\rfffrlx.exe
c:\rfffrlx.exe
\??\c:\tbttnn.exe
c:\tbttnn.exe
\??\c:\btnhtn.exe
c:\btnhtn.exe
\??\c:\9hbthh.exe
c:\9hbthh.exe
\??\c:\jppjv.exe
c:\jppjv.exe
\??\c:\jpvpv.exe
c:\jpvpv.exe
\??\c:\frxlxrf.exe
c:\frxlxrf.exe
\??\c:\xxffrlx.exe
c:\xxffrlx.exe
\??\c:\tttnbt.exe
c:\tttnbt.exe
\??\c:\bhtthh.exe
c:\bhtthh.exe
\??\c:\pdvpd.exe
c:\pdvpd.exe
\??\c:\jpjpd.exe
c:\jpjpd.exe
\??\c:\1fxlfrx.exe
c:\1fxlfrx.exe
\??\c:\xrfxlxl.exe
c:\xrfxlxl.exe
\??\c:\3bntht.exe
c:\3bntht.exe
\??\c:\btbbhn.exe
c:\btbbhn.exe
\??\c:\dvpdv.exe
c:\dvpdv.exe
\??\c:\fxflrxx.exe
c:\fxflrxx.exe
\??\c:\rlflfrl.exe
c:\rlflfrl.exe
\??\c:\nhnnth.exe
c:\nhnnth.exe
\??\c:\pddvj.exe
c:\pddvj.exe
\??\c:\vpddv.exe
c:\vpddv.exe
\??\c:\xfrrfxr.exe
c:\xfrrfxr.exe
\??\c:\llrrxxf.exe
c:\llrrxxf.exe
\??\c:\thntnh.exe
c:\thntnh.exe
\??\c:\3bnbnn.exe
c:\3bnbnn.exe
\??\c:\jvjdp.exe
c:\jvjdp.exe
\??\c:\rxrxfxf.exe
c:\rxrxfxf.exe
\??\c:\rfxrfrx.exe
c:\rfxrfrx.exe
\??\c:\5ntnhh.exe
c:\5ntnhh.exe
\??\c:\ppppv.exe
c:\ppppv.exe
\??\c:\lxlflfl.exe
c:\lxlflfl.exe
\??\c:\bhhthb.exe
c:\bhhthb.exe
\??\c:\7bhthh.exe
c:\7bhthh.exe
\??\c:\nnhbtn.exe
c:\nnhbtn.exe
\??\c:\jdjjd.exe
c:\jdjjd.exe
\??\c:\lfrlxff.exe
c:\lfrlxff.exe
\??\c:\7fffffx.exe
c:\7fffffx.exe
\??\c:\nhbtnh.exe
c:\nhbtnh.exe
\??\c:\nhthhb.exe
c:\nhthhb.exe
\??\c:\vddvj.exe
c:\vddvj.exe
\??\c:\9rxrllf.exe
c:\9rxrllf.exe
\??\c:\xrflrlx.exe
c:\xrflrlx.exe
\??\c:\rxxrlfr.exe
c:\rxxrlfr.exe
\??\c:\7btttt.exe
c:\7btttt.exe
\??\c:\vppjj.exe
c:\vppjj.exe
\??\c:\vdpdp.exe
c:\vdpdp.exe
\??\c:\llllxlr.exe
c:\llllxlr.exe
\??\c:\lxfxffx.exe
c:\lxfxffx.exe
\??\c:\btbbhh.exe
c:\btbbhh.exe
\??\c:\djpvp.exe
c:\djpvp.exe
\??\c:\1ppjd.exe
c:\1ppjd.exe
\??\c:\rlfrlfr.exe
c:\rlfrlfr.exe
\??\c:\bnnnhb.exe
c:\bnnnhb.exe
\??\c:\nnnhbt.exe
c:\nnnhbt.exe
\??\c:\ntthnh.exe
c:\ntthnh.exe
\??\c:\pdvjd.exe
c:\pdvjd.exe
\??\c:\frrxlfx.exe
c:\frrxlfx.exe
\??\c:\fllfxrf.exe
c:\fllfxrf.exe
\??\c:\hntbtt.exe
c:\hntbtt.exe
\??\c:\thbnbn.exe
c:\thbnbn.exe
\??\c:\jjjvj.exe
c:\jjjvj.exe
\??\c:\dvvpd.exe
c:\dvvpd.exe
\??\c:\jpjvj.exe
c:\jpjvj.exe
\??\c:\fxlxrfx.exe
c:\fxlxrfx.exe
\??\c:\rfxllxr.exe
c:\rfxllxr.exe
\??\c:\nbtnhn.exe
c:\nbtnhn.exe
\??\c:\hththb.exe
c:\hththb.exe
\??\c:\pdjpj.exe
c:\pdjpj.exe
\??\c:\xxlxxrx.exe
c:\xxlxxrx.exe
\??\c:\xrrlxrl.exe
c:\xrrlxrl.exe
\??\c:\5bhhhh.exe
c:\5bhhhh.exe
\??\c:\hththb.exe
c:\hththb.exe
\??\c:\3jppd.exe
c:\3jppd.exe
\??\c:\jdvpv.exe
c:\jdvpv.exe
\??\c:\xrfxlfl.exe
c:\xrfxlfl.exe
\??\c:\xllxllf.exe
c:\xllxllf.exe
\??\c:\tnhbtn.exe
c:\tnhbtn.exe
\??\c:\nbthtb.exe
c:\nbthtb.exe
\??\c:\jppjj.exe
c:\jppjj.exe
\??\c:\jddvv.exe
c:\jddvv.exe
\??\c:\5rrrlll.exe
c:\5rrrlll.exe
\??\c:\hbbbtt.exe
c:\hbbbtt.exe
\??\c:\bthbtn.exe
c:\bthbtn.exe
\??\c:\pjvdv.exe
c:\pjvdv.exe
\??\c:\1jjdp.exe
c:\1jjdp.exe
\??\c:\7fxxllx.exe
c:\7fxxllx.exe
\??\c:\rlffllr.exe
c:\rlffllr.exe
\??\c:\nbhhbb.exe
c:\nbhhbb.exe
\??\c:\ttthtn.exe
c:\ttthtn.exe
\??\c:\dpjvj.exe
c:\dpjvj.exe
\??\c:\3jdvv.exe
c:\3jdvv.exe
\??\c:\xrrlffx.exe
c:\xrrlffx.exe
\??\c:\nthnnt.exe
c:\nthnnt.exe
\??\c:\bbbbnn.exe
c:\bbbbnn.exe
\??\c:\jpvpj.exe
c:\jpvpj.exe
\??\c:\jvvpj.exe
c:\jvvpj.exe
\??\c:\rlrfrrx.exe
c:\rlrfrrx.exe
\??\c:\lrxrxlr.exe
c:\lrxrxlr.exe
\??\c:\5hbhbt.exe
c:\5hbhbt.exe
\??\c:\jpdpd.exe
c:\jpdpd.exe
\??\c:\vjdjd.exe
c:\vjdjd.exe
\??\c:\jdjdj.exe
c:\jdjdj.exe
\??\c:\5ffxlfx.exe
c:\5ffxlfx.exe
\??\c:\nbnhhn.exe
c:\nbnhhn.exe
\??\c:\3tthbt.exe
c:\3tthbt.exe
\??\c:\jjpdv.exe
c:\jjpdv.exe
\??\c:\pjpjj.exe
c:\pjpjj.exe
\??\c:\rxxfxrr.exe
c:\rxxfxrr.exe
\??\c:\lfxrllf.exe
c:\lfxrllf.exe
\??\c:\1hhbnh.exe
c:\1hhbnh.exe
\??\c:\hbbnhb.exe
c:\hbbnhb.exe
\??\c:\vjjpd.exe
c:\vjjpd.exe
\??\c:\7rrfxxr.exe
c:\7rrfxxr.exe
\??\c:\9fxrffr.exe
c:\9fxrffr.exe
\??\c:\bbbnbt.exe
c:\bbbnbt.exe
\??\c:\tbtbtt.exe
c:\tbtbtt.exe
\??\c:\ntbnhb.exe
c:\ntbnhb.exe
\??\c:\vpvpj.exe
c:\vpvpj.exe
\??\c:\ddpjv.exe
c:\ddpjv.exe
\??\c:\rfrrxfr.exe
c:\rfrrxfr.exe
\??\c:\hbthbt.exe
c:\hbthbt.exe
\??\c:\hthnhh.exe
c:\hthnhh.exe
\??\c:\3ddvj.exe
c:\3ddvj.exe
\??\c:\fxfllrx.exe
c:\fxfllrx.exe
\??\c:\rrrxrxf.exe
c:\rrrxrxf.exe
\??\c:\bhhhhh.exe
c:\bhhhhh.exe
\??\c:\tbbnhn.exe
c:\tbbnhn.exe
\??\c:\jpdjp.exe
c:\jpdjp.exe
\??\c:\9vppd.exe
c:\9vppd.exe
\??\c:\llxxfll.exe
c:\llxxfll.exe
\??\c:\xlfxrfr.exe
c:\xlfxrfr.exe
\??\c:\bnnhtn.exe
c:\bnnhtn.exe
\??\c:\nnnbnh.exe
c:\nnnbnh.exe
\??\c:\jvpdv.exe
c:\jvpdv.exe
\??\c:\jvddd.exe
c:\jvddd.exe
\??\c:\5xxlxfx.exe
c:\5xxlxfx.exe
\??\c:\1ntthb.exe
c:\1ntthb.exe
\??\c:\hnnhbt.exe
c:\hnnhbt.exe
\??\c:\jjvjj.exe
c:\jjvjj.exe
\??\c:\1ppdp.exe
c:\1ppdp.exe
\??\c:\rlfxfxr.exe
c:\rlfxfxr.exe
\??\c:\lflllll.exe
c:\lflllll.exe
\??\c:\hnnhtb.exe
c:\hnnhtb.exe
\??\c:\thnnnn.exe
c:\thnnnn.exe
\??\c:\jdpdp.exe
c:\jdpdp.exe
\??\c:\rlxrfxr.exe
c:\rlxrfxr.exe
\??\c:\rlxrlfr.exe
c:\rlxrlfr.exe
\??\c:\tthnth.exe
c:\tthnth.exe
\??\c:\btntnh.exe
c:\btntnh.exe
\??\c:\dddjv.exe
c:\dddjv.exe
\??\c:\ppvjj.exe
c:\ppvjj.exe
\??\c:\rxxxxrl.exe
c:\rxxxxrl.exe
\??\c:\rxrxlrr.exe
c:\rxrxlrr.exe
\??\c:\bthtnb.exe
c:\bthtnb.exe
\??\c:\nbthtn.exe
c:\nbthtn.exe
\??\c:\pvvpd.exe
c:\pvvpd.exe
\??\c:\vjjdv.exe
c:\vjjdv.exe
\??\c:\lxxxxxf.exe
c:\lxxxxxf.exe
\??\c:\rffxrlf.exe
c:\rffxrlf.exe
\??\c:\hnhnhh.exe
c:\hnhnhh.exe
\??\c:\7tbbhn.exe
c:\7tbbhn.exe
\??\c:\pdppj.exe
c:\pdppj.exe
\??\c:\jvvpd.exe
c:\jvvpd.exe
\??\c:\3rllxll.exe
c:\3rllxll.exe
\??\c:\3lfxlfr.exe
c:\3lfxlfr.exe
\??\c:\bnbhhh.exe
c:\bnbhhh.exe
\??\c:\pjjjd.exe
c:\pjjjd.exe
\??\c:\dppdp.exe
c:\dppdp.exe
\??\c:\rlxrlfx.exe
c:\rlxrlfx.exe
\??\c:\rfflfff.exe
c:\rfflfff.exe
\??\c:\btthhb.exe
c:\btthhb.exe
\??\c:\ddvdv.exe
c:\ddvdv.exe
\??\c:\pjjpp.exe
c:\pjjpp.exe
\??\c:\1lfxlfx.exe
c:\1lfxlfx.exe
\??\c:\hnhbbh.exe
c:\hnhbbh.exe
\??\c:\9hthtn.exe
c:\9hthtn.exe
\??\c:\jdvdp.exe
c:\jdvdp.exe
\??\c:\pvpjv.exe
c:\pvpjv.exe
\??\c:\xlrllfl.exe
c:\xlrllfl.exe
\??\c:\frrffxx.exe
c:\frrffxx.exe
\??\c:\nbtnbt.exe
c:\nbtnbt.exe
\??\c:\tthnnn.exe
c:\tthnnn.exe
\??\c:\pjppp.exe
c:\pjppp.exe
\??\c:\jppdp.exe
c:\jppdp.exe
\??\c:\llrrflx.exe
c:\llrrflx.exe
\??\c:\flfxlfr.exe
c:\flfxlfr.exe
\??\c:\htntnh.exe
c:\htntnh.exe
\??\c:\pvvpd.exe
c:\pvvpd.exe
\??\c:\pjjdd.exe
c:\pjjdd.exe
\??\c:\3lxlfrl.exe
c:\3lxlfrl.exe
\??\c:\flllxxl.exe
c:\flllxxl.exe
\??\c:\hhbhbn.exe
c:\hhbhbn.exe
\??\c:\tnhntt.exe
c:\tnhntt.exe
\??\c:\5vjdj.exe
c:\5vjdj.exe
\??\c:\vjdjv.exe
c:\vjdjv.exe
\??\c:\3xrlfff.exe
c:\3xrlfff.exe
\??\c:\3bthtt.exe
c:\3bthtt.exe
\??\c:\btnbhb.exe
c:\btnbhb.exe
\??\c:\pvjdv.exe
c:\pvjdv.exe
\??\c:\vjdvj.exe
c:\vjdvj.exe
\??\c:\5rlfrrf.exe
c:\5rlfrrf.exe
\??\c:\rflfrll.exe
c:\rflfrll.exe
\??\c:\hthhtn.exe
c:\hthhtn.exe
\??\c:\ththbt.exe
c:\ththbt.exe
\??\c:\tbhhbt.exe
c:\tbhhbt.exe
\??\c:\vjdvv.exe
c:\vjdvv.exe
\??\c:\frrlxrl.exe
c:\frrlxrl.exe
\??\c:\rlllflf.exe
c:\rlllflf.exe
\??\c:\btnthn.exe
c:\btnthn.exe
\??\c:\5vppd.exe
c:\5vppd.exe
\??\c:\lxrlxrl.exe
c:\lxrlxrl.exe
\??\c:\lxxffff.exe
c:\lxxffff.exe
\??\c:\bhhbtt.exe
c:\bhhbtt.exe
\??\c:\tbbtnh.exe
c:\tbbtnh.exe
\??\c:\jjppv.exe
c:\jjppv.exe
\??\c:\vddvp.exe
c:\vddvp.exe
\??\c:\frlxlff.exe
c:\frlxlff.exe
\??\c:\frrffxx.exe
c:\frrffxx.exe
\??\c:\bnntnn.exe
c:\bnntnn.exe
\??\c:\djvjv.exe
c:\djvjv.exe
\??\c:\jjjvj.exe
c:\jjjvj.exe
\??\c:\ddvjv.exe
c:\ddvjv.exe
\??\c:\xlxfrll.exe
c:\xlxfrll.exe
\??\c:\httnbb.exe
c:\httnbb.exe
\??\c:\1nbthh.exe
c:\1nbthh.exe
\??\c:\djvjd.exe
c:\djvjd.exe
\??\c:\jvdpd.exe
c:\jvdpd.exe
\??\c:\xrrlfff.exe
c:\xrrlfff.exe
\??\c:\llllfxl.exe
c:\llllfxl.exe
\??\c:\hhbtbb.exe
c:\hhbtbb.exe
\??\c:\httnhh.exe
c:\httnhh.exe
\??\c:\jjddv.exe
c:\jjddv.exe
\??\c:\3rxxxxx.exe
c:\3rxxxxx.exe
\??\c:\rffxlfx.exe
c:\rffxlfx.exe
\??\c:\3bhbnh.exe
c:\3bhbnh.exe
\??\c:\ththtn.exe
c:\ththtn.exe
\??\c:\vpjpd.exe
c:\vpjpd.exe
\??\c:\vppdj.exe
c:\vppdj.exe
\??\c:\xllxrlx.exe
c:\xllxrlx.exe
\??\c:\lxlfrfr.exe
c:\lxlfrfr.exe
\??\c:\flrrlrl.exe
c:\flrrlrl.exe
\??\c:\ththhb.exe
c:\ththhb.exe
\??\c:\5jpjp.exe
c:\5jpjp.exe
\??\c:\xxlxlxl.exe
c:\xxlxlxl.exe
\??\c:\xlffxff.exe
c:\xlffxff.exe
\??\c:\tnnnhb.exe
c:\tnnnhb.exe
\??\c:\hbbthh.exe
c:\hbbthh.exe
\??\c:\jjjpj.exe
c:\jjjpj.exe
\??\c:\vjjvj.exe
c:\vjjvj.exe
\??\c:\xrrlxrf.exe
c:\xrrlxrf.exe
\??\c:\flrrllf.exe
c:\flrrllf.exe
\??\c:\7tnhtt.exe
c:\7tnhtt.exe
\??\c:\bnbtbb.exe
c:\bnbtbb.exe
\??\c:\pjvpv.exe
c:\pjvpv.exe
\??\c:\pjjdp.exe
c:\pjjdp.exe
\??\c:\vppdp.exe
c:\vppdp.exe
\??\c:\ffllfff.exe
c:\ffllfff.exe
\??\c:\lfxxrxr.exe
c:\lfxxrxr.exe
\??\c:\htbtnn.exe
c:\htbtnn.exe
\??\c:\hbbhtn.exe
c:\hbbhtn.exe
\??\c:\jvjvp.exe
c:\jvjvp.exe
\??\c:\jvvpd.exe
c:\jvvpd.exe
\??\c:\xrrlxxr.exe
c:\xrrlxxr.exe
\??\c:\7fxrxrr.exe
c:\7fxrxrr.exe
\??\c:\bhtbhb.exe
c:\bhtbhb.exe
\??\c:\jdpjv.exe
c:\jdpjv.exe
\??\c:\ppvdp.exe
c:\ppvdp.exe
\??\c:\frfxrll.exe
c:\frfxrll.exe
\??\c:\rlxrrlr.exe
c:\rlxrrlr.exe
\??\c:\nbbttn.exe
c:\nbbttn.exe
\??\c:\hhhbnn.exe
c:\hhhbnn.exe
\??\c:\vppdv.exe
c:\vppdv.exe
\??\c:\fxfxrrl.exe
c:\fxfxrrl.exe
\??\c:\1lfxllx.exe
c:\1lfxllx.exe
\??\c:\tnttbb.exe
c:\tnttbb.exe
\??\c:\bnthtn.exe
c:\bnthtn.exe
\??\c:\jvjvv.exe
c:\jvjvv.exe
\??\c:\7dvjv.exe
c:\7dvjv.exe
\??\c:\frxffxx.exe
c:\frxffxx.exe
\??\c:\rlrlrlr.exe
c:\rlrlrlr.exe
\??\c:\hhnttt.exe
c:\hhnttt.exe
\??\c:\pjvjd.exe
c:\pjvjd.exe
\??\c:\pdjvj.exe
c:\pdjvj.exe
\??\c:\xxffxfr.exe
c:\xxffxfr.exe
\??\c:\xlfxxff.exe
c:\xlfxxff.exe
\??\c:\tbhbtn.exe
c:\tbhbtn.exe
\??\c:\hbnhth.exe
c:\hbnhth.exe
\??\c:\3pppp.exe
c:\3pppp.exe
\??\c:\vdjvv.exe
c:\vdjvv.exe
\??\c:\xxxrfxl.exe
c:\xxxrfxl.exe
\??\c:\1lfxffl.exe
c:\1lfxffl.exe
\??\c:\ntbthb.exe
c:\ntbthb.exe
\??\c:\btthtt.exe
c:\btthtt.exe
\??\c:\7vpdp.exe
c:\7vpdp.exe
\??\c:\pjdvv.exe
c:\pjdvv.exe
\??\c:\xffxlff.exe
c:\xffxlff.exe
\??\c:\rxxrllf.exe
c:\rxxrllf.exe
\??\c:\hntntn.exe
c:\hntntn.exe
\??\c:\hbtnhb.exe
c:\hbtnhb.exe
\??\c:\pjjjd.exe
c:\pjjjd.exe
\??\c:\7vppj.exe
c:\7vppj.exe
\??\c:\rxffxrl.exe
c:\rxffxrl.exe
\??\c:\xrlxlfr.exe
c:\xrlxlfr.exe
\??\c:\nnttnh.exe
c:\nnttnh.exe
\??\c:\bbbhnn.exe
c:\bbbhnn.exe
\??\c:\vpvpj.exe
c:\vpvpj.exe
\??\c:\1vjdj.exe
c:\1vjdj.exe
\??\c:\rfrlffl.exe
c:\rfrlffl.exe
\??\c:\9llrrrl.exe
c:\9llrrrl.exe
\??\c:\tnhbtt.exe
c:\tnhbtt.exe
\??\c:\tttnbt.exe
c:\tttnbt.exe
\??\c:\pjvpj.exe
c:\pjvpj.exe
\??\c:\3jpdp.exe
c:\3jpdp.exe
\??\c:\5lfrfxr.exe
c:\5lfrfxr.exe
\??\c:\lxxrlxr.exe
c:\lxxrlxr.exe
\??\c:\nhhbnb.exe
c:\nhhbnb.exe
\??\c:\htnhnh.exe
c:\htnhnh.exe
\??\c:\jddjv.exe
c:\jddjv.exe
\??\c:\rlrlxrl.exe
c:\rlrlxrl.exe
\??\c:\lrrlxrf.exe
c:\lrrlxrf.exe
\??\c:\7xrfrrl.exe
c:\7xrfrrl.exe
\??\c:\btthhb.exe
c:\btthhb.exe
\??\c:\nbbnnh.exe
c:\nbbnnh.exe
\??\c:\7dvpv.exe
c:\7dvpv.exe
\??\c:\lfxrllr.exe
c:\lfxrllr.exe
\??\c:\xlfrffx.exe
c:\xlfrffx.exe
\??\c:\nnnhtn.exe
c:\nnnhtn.exe
\??\c:\nhhhbb.exe
c:\nhhhbb.exe
\??\c:\vpjdp.exe
c:\vpjdp.exe
\??\c:\djpvj.exe
c:\djpvj.exe
\??\c:\lflffff.exe
c:\lflffff.exe
\??\c:\xrrlxrf.exe
c:\xrrlxrf.exe
\??\c:\1nthnh.exe
c:\1nthnh.exe
\??\c:\3tnhnn.exe
c:\3tnhnn.exe
\??\c:\vjvpd.exe
c:\vjvpd.exe
\??\c:\xfrlfrl.exe
c:\xfrlfrl.exe
\??\c:\xrffrxl.exe
c:\xrffrxl.exe
\??\c:\5ttnnn.exe
c:\5ttnnn.exe
\??\c:\7hbbnt.exe
c:\7hbbnt.exe
\??\c:\pppdp.exe
c:\pppdp.exe
\??\c:\dvdpv.exe
c:\dvdpv.exe
\??\c:\rfxlllf.exe
c:\rfxlllf.exe
\??\c:\hnnhhh.exe
c:\hnnhhh.exe
\??\c:\ntnbtt.exe
c:\ntnbtt.exe
\??\c:\jpvdd.exe
c:\jpvdd.exe
\??\c:\pjpjj.exe
c:\pjpjj.exe
\??\c:\xrrllrr.exe
c:\xrrllrr.exe
\??\c:\3hhhhn.exe
c:\3hhhhn.exe
\??\c:\hbtnbt.exe
c:\hbtnbt.exe
\??\c:\pjdvp.exe
c:\pjdvp.exe
\??\c:\vjdpd.exe
c:\vjdpd.exe
\??\c:\rllffff.exe
c:\rllffff.exe
\??\c:\xlxrlfx.exe
c:\xlxrlfx.exe
\??\c:\hhtbhn.exe
c:\hhtbhn.exe
\??\c:\pdvvj.exe
c:\pdvvj.exe
\??\c:\pjpvp.exe
c:\pjpvp.exe
\??\c:\frxrlfx.exe
c:\frxrlfx.exe
\??\c:\rffrllx.exe
c:\rffrllx.exe
\??\c:\htbbbh.exe
c:\htbbbh.exe
\??\c:\vjpjj.exe
c:\vjpjj.exe
\??\c:\3jvpd.exe
c:\3jvpd.exe
\??\c:\xxrrllf.exe
c:\xxrrllf.exe
\??\c:\lxrlxxl.exe
c:\lxrlxxl.exe
\??\c:\ttbthb.exe
c:\ttbthb.exe
\??\c:\btbtbt.exe
c:\btbtbt.exe
\??\c:\jjvvd.exe
c:\jjvvd.exe
\??\c:\dpjjj.exe
c:\dpjjj.exe
\??\c:\xrfllfl.exe
c:\xrfllfl.exe
\??\c:\3rxrrrx.exe
c:\3rxrrrx.exe
\??\c:\nntnhb.exe
c:\nntnhb.exe
\??\c:\3hnhhb.exe
c:\3hnhhb.exe
\??\c:\vpppv.exe
c:\vpppv.exe
\??\c:\pjpjj.exe
c:\pjpjj.exe
\??\c:\xlfrllf.exe
c:\xlfrllf.exe
\??\c:\nhtnbt.exe
c:\nhtnbt.exe
\??\c:\btnhtn.exe
c:\btnhtn.exe
\??\c:\nhbtnh.exe
c:\nhbtnh.exe
\??\c:\pjvvp.exe
c:\pjvvp.exe
\??\c:\djjdp.exe
c:\djjdp.exe
\??\c:\frrlxrl.exe
c:\frrlxrl.exe
\??\c:\nbbhbb.exe
c:\nbbhbb.exe
\??\c:\ttbntt.exe
c:\ttbntt.exe
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | 13.86.106.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 4.159.190.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 95.221.229.192.in-addr.arpa | udp |
| US | 8.8.8.8:53 | g.bing.com | udp |
| US | 150.171.27.10:443 | g.bing.com | tcp |
| US | 8.8.8.8:53 | 43.58.199.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 217.106.137.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 212.20.149.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 198.187.3.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 83.210.23.2.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 205.47.74.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 43.229.111.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | tse1.mm.bing.net | udp |
| US | 150.171.27.10:443 | tse1.mm.bing.net | tcp |
| US | 150.171.27.10:443 | tse1.mm.bing.net | tcp |
| US | 150.171.27.10:443 | tse1.mm.bing.net | tcp |
Files
memory/1980-0-0x0000000000500000-0x000000000050C000-memory.dmp
memory/1980-2-0x0000000000427000-0x0000000000428000-memory.dmp
memory/1980-1-0x0000000000400000-0x0000000000429000-memory.dmp
memory/1980-3-0x0000000000400000-0x0000000000429000-memory.dmp
memory/2772-12-0x0000000000400000-0x0000000000429000-memory.dmp
\??\c:\1flxrxl.exe
| MD5 | b2427b054c8d64ec25f9d9a188522f3b |
| SHA1 | a0791b90c514a0c5648c45ef15137e8b0f02b3d7 |
| SHA256 | 60e25acb455191e0a7cdaf56d937f75fd9b5a06439ee7f324aff9c5c159afd29 |
| SHA512 | 786c8552465abda99181406013fd072a7b7060b8354c8974aa59b8d249dd938ab1f092d802673649c064a5d55c2b13116acd5de17e40f4ad8484aaac471aa995 |
\??\c:\rllllll.exe
| MD5 | ac3ed99d5d549bfb4a72a7bea779b50f |
| SHA1 | a549bdf397af5d099977ad77a7c038917acb9136 |
| SHA256 | 625c203cc9bfbab73e923500a7b249265e07e505e31e7db45ceb9f8cc07b7c11 |
| SHA512 | eebccc811bcd71dff67b094c196eaa6f7ba61b49157a401816696836824cdca30ffcaf2ace4e4a9cf62b71e7e48c569d551608a1ca9643fe45d215a2dd51c460 |
memory/3948-18-0x0000000000400000-0x0000000000429000-memory.dmp
C:\thhhbb.exe
| MD5 | d7db4728d87b1dbdc2c2cdd9d70b5faa |
| SHA1 | 1fbe52f0a8b1761871e989fbff27c14ba5596100 |
| SHA256 | 8a4cc355b0d7bae21b500c0f29b6e9916b2a683350feb0f60cdbef2bbdce9668 |
| SHA512 | e0bf8d8ac114918820f35ad6ef04083a04cab9222981a40ee7576e1330ca48f25fc46e9261e832f1c3ca643a4599a780ba283ce95123ead7051a81d34aaf4bf2 |
memory/1980-8-0x0000000000400000-0x0000000000429000-memory.dmp
memory/3948-22-0x0000000000400000-0x0000000000429000-memory.dmp
memory/3680-25-0x0000000000400000-0x0000000000429000-memory.dmp
C:\jdddv.exe
| MD5 | bcff851fce47da02d286ecf2822322c4 |
| SHA1 | 06853568d2741ae1562f01dc11d5374075bf3b87 |
| SHA256 | f88936d20b7cb943f00404ab41cdccc8471ba762f03dbf1cd3cb8e9fa66d1ca3 |
| SHA512 | 3226462ada93099b6693b24681ab830035d4ee656a4888fceb0886444a3065a7b4f8c5a30241990eda62c49700ca4a5c913ba025eb0dd395576593c03ac79d19 |
memory/3680-30-0x0000000000400000-0x0000000000429000-memory.dmp
memory/756-35-0x0000000000400000-0x0000000000429000-memory.dmp
memory/756-34-0x0000000000400000-0x0000000000429000-memory.dmp
memory/756-33-0x0000000000400000-0x0000000000429000-memory.dmp
C:\hnbttn.exe
| MD5 | 67ab22a526b07d48f5a8899f61e66e92 |
| SHA1 | fe4b3b013b795a504951dacc981b13a657c19e82 |
| SHA256 | ea3a164fac4c8cffad202ef5c7998a6d01cbeb30f3d2a292aa9cbec57b22f70f |
| SHA512 | 00614b08b3816f734f3ef22d60e75b28bda6e85d26b37258a5205f170a6a543dd5fb43c2d15c2815d26aa2547a094dc4b04867ba9bb7846cb2080405fa812c9c |
memory/756-40-0x0000000000400000-0x0000000000429000-memory.dmp
memory/2740-44-0x0000000000400000-0x0000000000429000-memory.dmp
memory/2740-43-0x0000000000400000-0x0000000000429000-memory.dmp
memory/2740-48-0x0000000000400000-0x0000000000429000-memory.dmp
\??\c:\vdpvp.exe
| MD5 | 76c75b4a9ab61e880779852f65a6e5df |
| SHA1 | 0728025644bb9dfd9a32989afd209ee8acc87ba2 |
| SHA256 | dcc4de5fc2168d19759fa546a4442e4a342e7a41ea8ad09d6781c6bdf6da36fb |
| SHA512 | 7c5fcd964387165d50de0ed9c1f6acacfcbf0abfc67fe54689ee77e366dd08e54665f98722171bd57ecf220a8a6ec6fdc2c24e9961f32b3acd014ccb1e3db10b |
memory/2468-52-0x0000000000400000-0x0000000000429000-memory.dmp
memory/2468-54-0x0000000000400000-0x0000000000429000-memory.dmp
memory/2468-53-0x0000000000400000-0x0000000000429000-memory.dmp
C:\xfxrxxr.exe
| MD5 | f897411ec1c08d51f932f7b1c475649b |
| SHA1 | fc7abdf1f428f6caeee84107a05b638a54bc7f52 |
| SHA256 | affae0ea5b941516ab438c6c2df4a657d470399839a74436ff3164707a55235f |
| SHA512 | 86e95276b380134b65d1b32dedf761ff770497a2c8798ee49ff9b10caa7fad32d97e1b42fcbb9fef5cdb5fee79e2e45fb13683c4cf33c6c5d3d1f3fbf99c9500 |
memory/2468-58-0x0000000000400000-0x0000000000429000-memory.dmp
memory/5024-61-0x0000000000400000-0x0000000000429000-memory.dmp
memory/5024-62-0x0000000000400000-0x0000000000429000-memory.dmp
C:\nhbbht.exe
| MD5 | 84c6695bf3c94bcc21156aa854577850 |
| SHA1 | ee2282f14e4546e5481a5de22cab5a709c1266c4 |
| SHA256 | 7de96a846af75a9bf09a1ff13399ea07013097d90afedd1d9ed8493d9e07715d |
| SHA512 | c7d5fdc199a1bc8f94ba562a3c05880ea578ec74f92c9da424b7fc3d9a8d73bbfc4b6594b739ceceda7748b7fabc4a16914f56d825baad28b0479ee562c1a5a5 |
memory/5024-67-0x0000000000400000-0x0000000000429000-memory.dmp
memory/432-72-0x0000000000400000-0x0000000000429000-memory.dmp
memory/432-71-0x0000000000400000-0x0000000000429000-memory.dmp
memory/432-70-0x0000000000400000-0x0000000000429000-memory.dmp
memory/5000-80-0x0000000000400000-0x0000000000429000-memory.dmp
\??\c:\jvjjd.exe
| MD5 | 3837b853836981066fa13c8bfefcbe07 |
| SHA1 | a6b14e2bec53891269ef9a390c5d2f91acbbbffb |
| SHA256 | c77d48dadef7c046cdfbecb9f2f65787d251b38e84b4eda0c1b00fcd241ea9db |
| SHA512 | 09b80d0441a18ce5b3e4f992c1af26c77f8a98ba54255be42b48e7a70b8032faa545d8cdbddda39ce008f1ad5aed97a651329da6b85d0ea0ac667b77a273dfa2 |
memory/2724-87-0x0000000000400000-0x0000000000429000-memory.dmp
\??\c:\lrrrlll.exe
| MD5 | 116a1aa3f7365c889df2d4b6da2b6376 |
| SHA1 | 770d594f01e780816cd8c63ed4172304b91eebbc |
| SHA256 | 2f25ab8d55ad2919a53aab941c81b050ab3070ec3bf74ef50b5b651ec016ea04 |
| SHA512 | 5ff226764c09eac7796435f7977a75350f4e0908b0e2ad35a1730b2f7ee94035d66b18305821f631711e1bf45e65745fa36be800e63dbfd9c46dc99554143966 |
C:\1tbtnn.exe
| MD5 | 7f2e3d4c769538ff1f83832c96748586 |
| SHA1 | 278855ebcb8d6bb96981bbadda73409227acdbf8 |
| SHA256 | 25bf905c3c8ad8262d60a98717babf801f0eb50b05978a28ca1a2f2df279692f |
| SHA512 | ea56a32d10680557ba3ff011d0fff6eafd08e77b6f05e3d040244899f51b4fcf1934412f26dfef6814f8851399347354165191af69c44b4a73dc579512643a28 |
C:\hnhbbb.exe
| MD5 | f5cedfc2c471d62b51fa0da9652bddcb |
| SHA1 | 20b4b8d392eab73c0e9cbf86528874eca27c98f0 |
| SHA256 | 96925647398c59f7bb21af181fe1256d62c3a1dbf38799f04085fcf7beb5e3c3 |
| SHA512 | 25a7f9db05ad4104a14766fd6faf14d1f315a77815396e60f6c551fdad41722a1aced7d53145b1936cb1805d3cf59faad8bac484b752a93d44c40eaccd8fbaae |
memory/4988-96-0x0000000000400000-0x0000000000429000-memory.dmp
C:\7vdjj.exe
| MD5 | 5b1fbd639574541bb64188cc237a6ff0 |
| SHA1 | 6422b40b5d7bef4cfbe19bae42da0cdf920274e0 |
| SHA256 | 8a86ae72d619a1d6672e44dc09ddfda583fc79d32ce37fa3257f828fd2434f94 |
| SHA512 | 37f26a309991e7af3b921d987e86ac4fe46b73b695d80d01bd1fb0060571d727b08403af8d8819d266c2d50dab1aa02ae53c4f9fdd14851aab22e7414716aa90 |
memory/4612-102-0x0000000000400000-0x0000000000429000-memory.dmp
memory/3152-107-0x0000000000400000-0x0000000000429000-memory.dmp
C:\lllfrrr.exe
| MD5 | 0e49b50a21c48ea6d5913d2336eda5ab |
| SHA1 | 42dc4e52d98eb947f5d46e50a7453b906fb4e80b |
| SHA256 | 533b5fce5a0b564bb86ce018e62f6013417482f4f9e17d437868082f031c147a |
| SHA512 | 96bc991471cfb2119b9b5e508cc10b884fc63350c9a84d160f340f516f26ab567a6de7f29406bd913033cb134d6456a4f46a50b8beb0ed75feecb90abd6458a9 |
C:\ttbbbb.exe
| MD5 | c628701cb0f8e1e66869c88a3305f5f4 |
| SHA1 | cd1caadafdc6d5ed40e3fd4b308ae74a4d511cde |
| SHA256 | d8e6781e9b4fbc3d46a531b2acd1c67c7851c9bd2995081297eff51845329220 |
| SHA512 | 067d1af4278307496226c647be82d9d8879fdf8cb9f247da53ac310aa19e6f14808126dc540dd46c13eabadbea165cf4a81530d9dd116686e534e8134b58b16c |
memory/3936-114-0x0000000000400000-0x0000000000429000-memory.dmp
C:\jvvpj.exe
| MD5 | 515e2a786f5fed41d1e0e4f5f0655ccb |
| SHA1 | 403bc474fca0ec3c340b593e6c20f879bdbf6700 |
| SHA256 | 09c61ac3eb90fd91a3fde0e9849cdc53d2bab0069e6c08fce4a3c743ef0d07ae |
| SHA512 | 02addf12a83b8c4061bdba7782fc04f1581c5b71ecde8ce7035671b2b3af1f40e23f850b82ad1b60ba3c71a512e8a128e0153ebd57c6a1ba06a20e3f295a5954 |
memory/1144-119-0x0000000000400000-0x0000000000429000-memory.dmp
\??\c:\djdjj.exe
| MD5 | 6bd932d4699b32a22fa27d1a525cb488 |
| SHA1 | d86f243d01467eaf0f072a2b610c1886cb434777 |
| SHA256 | d1548c212b9a3d47c112d7ef5e34e4592572966fde15139d9087de49eea720d9 |
| SHA512 | 4e5dfbfb99eabf3b3f0348c3833f09121d03e00f3fefce02fadf0a6aa275b27065e7cf52efa52f047018401e6616ee51b55da386f1d099caad31eae3a99c2f4c |
memory/4652-126-0x0000000000400000-0x0000000000429000-memory.dmp
C:\xrxxffr.exe
| MD5 | 8d2acefa47324d1b22eb9fcadd918fd6 |
| SHA1 | 8c97b80e26b04e30c37219b32640c599b20a5f20 |
| SHA256 | 55abc58adc9a8806a539e68d02de69318e6b46af8082c65cefc332fb5eac9263 |
| SHA512 | c1078b1c429ffb3843d3d8ed35ba333e4880f550ff71980cd3b119c61ff92128245c92477ea8c8df029ffa38ba4d7dd1da3f35a2b33d934207555ee8d0e93196 |
memory/3920-132-0x0000000000400000-0x0000000000429000-memory.dmp
memory/4608-137-0x0000000000400000-0x0000000000429000-memory.dmp
C:\ttbtnb.exe
| MD5 | e9f25587618511e28a6dc7839b4f45b8 |
| SHA1 | d76f1e8564228287123a3447420e320ce83eccb3 |
| SHA256 | e389b69b7a1694273c347a5a299cb49aff239f774e9f7d7551f1fb1b6e823aa6 |
| SHA512 | 8e1cce5eb7ec15396a2a78c1816b4940f597a7ee05eb371fbc8cbd00882480e8baee3d5b57a9590d4d2a9f1c349fe76296ba22af7f4f304dc1b03475cba860ca |
C:\1bnnhh.exe
| MD5 | bfc6a15c57bc37ba5be112ae6ad74f9b |
| SHA1 | 2d30e749dbddd2a20790e083a231970870757715 |
| SHA256 | 2234126fc7649c2b969bae76d8d6b3b32cece1d0a62e013ee9ea05bcfd203c16 |
| SHA512 | cfc2d78d49c2cbbe9741eeb449f20bb4f3efdccef6c08ace9f1587e361252428fc4d5fde426cd3095b4552433b93fea55fde19697bfaa89dbfe50a8dc15344b2 |
C:\dpppp.exe
| MD5 | 4900cc003c8e1bb2c4c14f3c22f14619 |
| SHA1 | 12fc3bab54c89f161ebd82cc53c0398507483046 |
| SHA256 | 5508e975fd9c8b70203179e230c8ed2f65cda6752577f8a96ca3a0ee6a0d5964 |
| SHA512 | 82a468a5f705ef3c65e2052676d94a25d1ac87523ef6eb14207845129c7e1b1ef8567b373cd9ec3d932281d5d604d92d3a6939190a6965008e237aca28e6635b |
C:\bntnnh.exe
| MD5 | 2ac109b0f15774db6a2b1b0f40f3175e |
| SHA1 | 724a2cad2a2036c4277376240066bb070450fe6f |
| SHA256 | 6044028ca373fe4bd31e1c8f45441c2403a59d686996f7e01ef97a718add01f3 |
| SHA512 | a8b7a62bc58de03cc9a333d72bb3de0d76c9d20538e9b0b8e58305e0ae5b21fa96b840d4205ffe41214a57404a2b3c0d66c8a5976ac25b8b5ca3923a711eaee2 |
\??\c:\htbthh.exe
| MD5 | b726fc701c0b47169ff9e33f9c3977e8 |
| SHA1 | 66683e2183fe010e9245f324a2beecce138eca1f |
| SHA256 | 4d5f8be4edab4679f3252e5500c99167ffa59e014a9c346fc7222349026f21d2 |
| SHA512 | 25f321bc38f1fb424ddd92d3e288e84e0e902e235fc7cf40a022d5e53122704a0bce348217419dee1fa41b8096b6d1d88bd3d21bdf1db3795a2bd727321ed25d |
C:\jdvpv.exe
| MD5 | ee3133f5bd8ad440179122b2ef5357e6 |
| SHA1 | 208f68bec953b00c5f4e7cfe667a8a64c607932d |
| SHA256 | d4e3c138f884b8f3b2eae32b85c8a57189a99de031fac3df03d25962b03405f1 |
| SHA512 | 348fd66ff379bf27d4de9d978414423c9a325d9f8a81a19072858677ec3a623f72c2e7fab1d733fc5b389e162df50c553f70d446f5b461e68e1dfefbc57af1bf |
C:\ppppj.exe
| MD5 | da2ec2dd6e02cfb55ce50579bd912267 |
| SHA1 | 056ed73ee96b7126cdd2090c31c8f9fd986ace53 |
| SHA256 | ae2e0d8f7108265730e04250a9cc482ded8510f5171bba769392608f842e7291 |
| SHA512 | 267d204f0d2134ba51c2dfc98d2225da669514640926d14ec55296af0c2d286b02c02cd5bff7c58f1690ed9f06a81c5d4c8563029e5faecc99b0411f21014857 |
C:\xllfxxf.exe
| MD5 | 7ae995df20960762a408f1e5732ce86b |
| SHA1 | 0c1c03bb5947ceed3c71cd18699f0527a75c63e1 |
| SHA256 | 333c8861481cff64224ec56f6421d5cde9abde4383d88d84f9c80195a9c3f87d |
| SHA512 | 442a85144c1119ce1206edac0a31ccf7d49dd79fc2b62bef2e291a953d680fe4553c50bbd2eac155bdf681667b958755c4888b6a0aea00fbc18c1e76d33588f8 |
C:\nhhhbb.exe
| MD5 | 458895fb7f96f7fed9eaa4ed543d21be |
| SHA1 | b9c7405984c5c5daabc991493c2565558e940884 |
| SHA256 | 3b39cc1a29d59ffd11b32c173fddcf03a4ad9a3efa8a4312f24b3cd7b51b5702 |
| SHA512 | bc2dca3430eaa324b97bd5a0a131cc7bf6955ab810d2cb44db33ab936345ae1637c51f432bd78da4c901d209de71da63c22c33ab86bacbdc656856df48cb5260 |
memory/4668-186-0x0000000000400000-0x0000000000429000-memory.dmp
C:\jvdvp.exe
| MD5 | 0a7cab1a826003a14fcc0b0722ed8683 |
| SHA1 | 16bb90e13aecbe4301a79d3c6899b5712536f64e |
| SHA256 | d90aaa268b85d5010f4c21d58ab485deb94712ec82ece932e657733802a4ad42 |
| SHA512 | c6c47ee9aa2316adbe6039c264777a4ab0c24d33fccdb91cc7c8257c2190be9afbebe7fad2453f44fccf4bab7e9163c246d8da9f8eab9ab8c029cc6b0076b1d0 |
memory/4756-191-0x0000000000400000-0x0000000000429000-memory.dmp
C:\dddvj.exe
| MD5 | 2c2b65aeead353aa6d09face82e117ca |
| SHA1 | 259990684cc3eea981c7be4bdf3629695dc2dccc |
| SHA256 | 0b11a450dae6a0fb04b9c30182eb7fad2f0d9db6612b1eb948bb3aa3296e60a5 |
| SHA512 | 8c641fa46871121c2d0a9ad819ba88719b85a322a6d1290727e43b51638bdabcfe8de3097e4ce47bca9d7ab3161a916bae95b414bd8d275cfb12d862190e0f94 |
\??\c:\llfxfxr.exe
| MD5 | df9659ce203d5e90739b0d3fb6fb874a |
| SHA1 | 9946688699e27ced1d69d905fccc876cb1b92888 |
| SHA256 | be8f61f24fda01e602158d1e833d7ac3324afa28a960094c84b110b2116b5e8d |
| SHA512 | c255c9cef94d0032ea350a4a33a3e584bfda447a8b9e9e55b7e25f8f600ed890098f3f9bd16fac48713929691174b10230c8c4d858b179e14e19270bb3ac44a3 |
memory/4984-204-0x0000000000400000-0x0000000000429000-memory.dmp
\??\c:\hnttbb.exe
| MD5 | c04961f36913f8c26ab445d1e9a76d45 |
| SHA1 | 8e1711c28fe097a4c44a20385892d03ea0056736 |
| SHA256 | e35d4958a66491634b12ff3202d54ca7a13a74e51ab45fb3d711e807d155d3f7 |
| SHA512 | 3ffc9b05944333b957758a26402a044bf9d003cb9782fa3cc9cf2f33b64af35a91c27e2796c55a7a6ed0bbf2a8354fd8c4f25e2beaf7f08220e3f5d1210f5ab9 |
memory/1244-211-0x0000000000400000-0x0000000000429000-memory.dmp
C:\dpddd.exe
| MD5 | ed8dd78d00ebd5a0de450b683a004c59 |
| SHA1 | 60b743b74f4c6070a80c2481dabb6d142c5ee38c |
| SHA256 | a468dc5e5cb25742d83c814f287d1095d38b2f85a9e354aa072cf814733e06f2 |
| SHA512 | 5ad272bf92ead87aea7903040bed66d37e29ac94176da5bfdaf31b759e81be7bd6b82671c1ad9285157916ae2c5ea80e2e3cb23cf959dfeb965fb6fd068428a2 |
memory/5036-215-0x0000000000400000-0x0000000000429000-memory.dmp