Analysis Overview
SHA256
a667e8a91cbf3fb5b36ba4f31982e8315cd391968abb73bc038b4398b2693ffb
Threat Level: Known bad
The file JaffaCakes118_ba533ed647781b66a16904d7c4224982 was found to be: Known bad.
Malicious Activity Summary
Pykspa
Pykspa family
Detect Pykspa worm
Looks up external IP address via web service
Unsigned PE
System Location Discovery: System Language Discovery
Suspicious behavior: EnumeratesProcesses
MITRE ATT&CK
Enterprise Matrix V16
Analysis: static1
Detonation Overview
Reported
2025-04-17 16:51
Signatures
Unsigned PE
| Description | Indicator | Process | Target |
| N/A | N/A | N/A | N/A |
Analysis: behavioral1
Detonation Overview
Submitted
2025-04-17 16:51
Reported
2025-04-17 16:54
Platform
win10v2004-20250314-en
Max time kernel
2s
Max time network
152s
Command Line
Signatures
Pykspa
Pykspa family
Detect Pykspa worm
| Description | Indicator | Process | Target |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
Looks up external IP address via web service
| Description | Indicator | Process | Target |
| N/A | www.whatismyip.ca | N/A | N/A |
| N/A | whatismyip.everdot.org | N/A | N/A |
| N/A | whatismyipaddress.com | N/A | N/A |
| N/A | whatismyip.everdot.org | N/A | N/A |
| N/A | www.showmyipaddress.com | N/A | N/A |
| N/A | www.whatismyip.ca | N/A | N/A |
| N/A | www.whatismyip.ca | N/A | N/A |
System Location Discovery: System Language Discovery
| Description | Indicator | Process | Target |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_ba533ed647781b66a16904d7c4224982.exe | N/A |
Suspicious behavior: EnumeratesProcesses
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_ba533ed647781b66a16904d7c4224982.exe | N/A |
| N/A | N/A | C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_ba533ed647781b66a16904d7c4224982.exe | N/A |
Processes
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_ba533ed647781b66a16904d7c4224982.exe
"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_ba533ed647781b66a16904d7c4224982.exe"
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\jaffacakes118_ba533ed647781b66a16904d7c4224982.exe*"
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c sqgwecshruzbobjh.exe
C:\Windows\sqgwecshruzbobjh.exe
sqgwecshruzbobjh.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe .
C:\Windows\tungrsldqwejzpabkef.exe
tungrsldqwejzpabkef.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\tungrsldqwejzpabkef.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c sqgwecshruzbobjh.exe .
C:\Windows\zypgpofvgkqthvedk.exe
zypgpofvgkqthvedk.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe
C:\Windows\sqgwecshruzbobjh.exe
sqgwecshruzbobjh.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe .
C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe
C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\sqgwecshruzbobjh.exe*."
C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe
C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\vytobeztiqahzrehsormh.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .
C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe
C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\tungrsldqwejzpabkef.exe*."
C:\Users\Admin\AppData\Local\Temp\guages.exe
"C:\Users\Admin\AppData\Local\Temp\guages.exe" "-c:\users\admin\appdata\local\temp\jaffacakes118_ba533ed647781b66a16904d7c4224982.exe"
C:\Users\Admin\AppData\Local\Temp\guages.exe
"C:\Users\Admin\AppData\Local\Temp\guages.exe" "-c:\users\admin\appdata\local\temp\jaffacakes118_ba533ed647781b66a16904d7c4224982.exe"
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c sqgwecshruzbobjh.exe
C:\Windows\tungrsldqwejzpabkef.exe
tungrsldqwejzpabkef.exe
C:\Windows\sqgwecshruzbobjh.exe
sqgwecshruzbobjh.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c iiascculxcjncrbbjc.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c zypgpofvgkqthvedk.exe .
C:\Windows\iiascculxcjncrbbjc.exe
iiascculxcjncrbbjc.exe .
C:\Windows\zypgpofvgkqthvedk.exe
zypgpofvgkqthvedk.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c zypgpofvgkqthvedk.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c sqgwecshruzbobjh.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\iiascculxcjncrbbjc.exe*."
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\zypgpofvgkqthvedk.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .
C:\Windows\zypgpofvgkqthvedk.exe
zypgpofvgkqthvedk.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe
C:\Windows\sqgwecshruzbobjh.exe
sqgwecshruzbobjh.exe .
C:\Windows\tungrsldqwejzpabkef.exe
tungrsldqwejzpabkef.exe .
C:\Windows\vytobeztiqahzrehsormh.exe
vytobeztiqahzrehsormh.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe
C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\sqgwecshruzbobjh.exe*."
C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe
C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\tungrsldqwejzpabkef.exe*."
C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe
C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe .
C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe
C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .
C:\Windows\vytobeztiqahzrehsormh.exe
vytobeztiqahzrehsormh.exe
C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe
C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\tungrsldqwejzpabkef.exe*."
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\sqgwecshruzbobjh.exe*."
C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe
C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe
C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe
C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\gicwikexlsbhypbdnike.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\gicwikexlsbhypbdnike.exe*."
C:\Windows\gicwikexlsbhypbdnike.exe
gicwikexlsbhypbdnike.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c zypgpofvgkqthvedk.exe .
C:\Windows\zypgpofvgkqthvedk.exe
zypgpofvgkqthvedk.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\zypgpofvgkqthvedk.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Windows\iiascculxcjncrbbjc.exe
iiascculxcjncrbbjc.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Windows\vytobeztiqahzrehsormh.exe
vytobeztiqahzrehsormh.exe .
C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe
C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\vytobeztiqahzrehsormh.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\tungrsldqwejzpabkef.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\iiascculxcjncrbbjc.exe*."
C:\Windows\zypgpofvgkqthvedk.exe
zypgpofvgkqthvedk.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c zypgpofvgkqthvedk.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c iiascculxcjncrbbjc.exe
C:\Windows\zypgpofvgkqthvedk.exe
zypgpofvgkqthvedk.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c sqgwecshruzbobjh.exe .
C:\Windows\gicwikexlsbhypbdnike.exe
gicwikexlsbhypbdnike.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c sqgwecshruzbobjh.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c sqgwecshruzbobjh.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .
C:\Windows\vytobeztiqahzrehsormh.exe
vytobeztiqahzrehsormh.exe .
C:\Windows\iiascculxcjncrbbjc.exe
iiascculxcjncrbbjc.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\gicwikexlsbhypbdnike.exe*."
C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe
C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe
C:\Windows\sqgwecshruzbobjh.exe
sqgwecshruzbobjh.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\vytobeztiqahzrehsormh.exe*."
C:\Windows\sqgwecshruzbobjh.exe
sqgwecshruzbobjh.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\sqgwecshruzbobjh.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe
C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .
C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe
C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe
C:\Windows\gicwikexlsbhypbdnike.exe
gicwikexlsbhypbdnike.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe .
C:\Windows\sqgwecshruzbobjh.exe
sqgwecshruzbobjh.exe
C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe
C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe
C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\sqgwecshruzbobjh.exe*."
C:\Windows\tungrsldqwejzpabkef.exe
tungrsldqwejzpabkef.exe .
C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe
C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe
C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe
C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .
C:\Windows\vytobeztiqahzrehsormh.exe
vytobeztiqahzrehsormh.exe
C:\Windows\vytobeztiqahzrehsormh.exe
vytobeztiqahzrehsormh.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\tungrsldqwejzpabkef.exe*."
C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe
C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\tungrsldqwejzpabkef.exe*."
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\tungrsldqwejzpabkef.exe*."
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\tungrsldqwejzpabkef.exe*."
C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe
C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\vytobeztiqahzrehsormh.exe*."
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\iiascculxcjncrbbjc.exe*."
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\gicwikexlsbhypbdnike.exe*."
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\sqgwecshruzbobjh.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe
C:\Windows\gicwikexlsbhypbdnike.exe
gicwikexlsbhypbdnike.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe .
C:\Windows\vytobeztiqahzrehsormh.exe
vytobeztiqahzrehsormh.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\vytobeztiqahzrehsormh.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe .
C:\Windows\gicwikexlsbhypbdnike.exe
gicwikexlsbhypbdnike.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe
C:\Windows\tungrsldqwejzpabkef.exe
tungrsldqwejzpabkef.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .
C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe
C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\tungrsldqwejzpabkef.exe*."
C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe
C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\gicwikexlsbhypbdnike.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\iiascculxcjncrbbjc.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c sqgwecshruzbobjh.exe
C:\Windows\sqgwecshruzbobjh.exe
sqgwecshruzbobjh.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe .
C:\Windows\tungrsldqwejzpabkef.exe
tungrsldqwejzpabkef.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\tungrsldqwejzpabkef.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c iiascculxcjncrbbjc.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe .
C:\Windows\tungrsldqwejzpabkef.exe
tungrsldqwejzpabkef.exe
C:\Windows\tungrsldqwejzpabkef.exe
tungrsldqwejzpabkef.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe .
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe
C:\Windows\iiascculxcjncrbbjc.exe
iiascculxcjncrbbjc.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c zypgpofvgkqthvedk.exe
C:\Windows\tungrsldqwejzpabkef.exe
tungrsldqwejzpabkef.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe .
C:\Windows\tungrsldqwejzpabkef.exe
tungrsldqwejzpabkef.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\iiascculxcjncrbbjc.exe*."
C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe
C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\tungrsldqwejzpabkef.exe*."
C:\Windows\zypgpofvgkqthvedk.exe
zypgpofvgkqthvedk.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe
C:\Windows\tungrsldqwejzpabkef.exe
tungrsldqwejzpabkef.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe .
C:\Windows\vytobeztiqahzrehsormh.exe
vytobeztiqahzrehsormh.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .
C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe
C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe
C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe
C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe .
C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe
C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\sqgwecshruzbobjh.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\tungrsldqwejzpabkef.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\vytobeztiqahzrehsormh.exe*."
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\vytobeztiqahzrehsormh.exe*."
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\gicwikexlsbhypbdnike.exe*."
C:\Windows\gicwikexlsbhypbdnike.exe
gicwikexlsbhypbdnike.exe
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .
C:\Windows\vytobeztiqahzrehsormh.exe
vytobeztiqahzrehsormh.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .
C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe
C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\iiascculxcjncrbbjc.exe*."
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\iiascculxcjncrbbjc.exe*."
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\vytobeztiqahzrehsormh.exe*."
C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe
C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\gicwikexlsbhypbdnike.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe
C:\Windows\tungrsldqwejzpabkef.exe
tungrsldqwejzpabkef.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c zypgpofvgkqthvedk.exe .
C:\Windows\zypgpofvgkqthvedk.exe
zypgpofvgkqthvedk.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\zypgpofvgkqthvedk.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c iiascculxcjncrbbjc.exe
C:\Windows\iiascculxcjncrbbjc.exe
iiascculxcjncrbbjc.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c iiascculxcjncrbbjc.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe
C:\Windows\iiascculxcjncrbbjc.exe
iiascculxcjncrbbjc.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe .
C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe
C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\iiascculxcjncrbbjc.exe*."
C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe
C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\vytobeztiqahzrehsormh.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe
C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe
C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\zypgpofvgkqthvedk.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c zypgpofvgkqthvedk.exe
C:\Windows\zypgpofvgkqthvedk.exe
zypgpofvgkqthvedk.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe .
C:\Windows\vytobeztiqahzrehsormh.exe
vytobeztiqahzrehsormh.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\vytobeztiqahzrehsormh.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c zypgpofvgkqthvedk.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c iiascculxcjncrbbjc.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe
C:\Windows\zypgpofvgkqthvedk.exe
zypgpofvgkqthvedk.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe
C:\Windows\iiascculxcjncrbbjc.exe
iiascculxcjncrbbjc.exe .
C:\Windows\vytobeztiqahzrehsormh.exe
vytobeztiqahzrehsormh.exe
C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe
C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c iiascculxcjncrbbjc.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe .
C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe
C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe
C:\Windows\tungrsldqwejzpabkef.exe
tungrsldqwejzpabkef.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\gicwikexlsbhypbdnike.exe*."
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\iiascculxcjncrbbjc.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .
C:\Windows\vytobeztiqahzrehsormh.exe
vytobeztiqahzrehsormh.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c sqgwecshruzbobjh.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c zypgpofvgkqthvedk.exe .
C:\Windows\tungrsldqwejzpabkef.exe
tungrsldqwejzpabkef.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe
C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe
C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\tungrsldqwejzpabkef.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .
C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe
C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .
C:\Windows\gicwikexlsbhypbdnike.exe
gicwikexlsbhypbdnike.exe .
C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe
C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe
C:\Windows\zypgpofvgkqthvedk.exe
zypgpofvgkqthvedk.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe
C:\Windows\sqgwecshruzbobjh.exe
sqgwecshruzbobjh.exe
C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe
C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe .
C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe
C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe
C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe
C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\zypgpofvgkqthvedk.exe*."
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\gicwikexlsbhypbdnike.exe*."
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\zypgpofvgkqthvedk.exe*."
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\tungrsldqwejzpabkef.exe*."
C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe
C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe .
C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe
C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\gicwikexlsbhypbdnike.exe*."
C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe
C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\sqgwecshruzbobjh.exe*."
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\vytobeztiqahzrehsormh.exe*."
C:\Windows\iiascculxcjncrbbjc.exe
iiascculxcjncrbbjc.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\iiascculxcjncrbbjc.exe*."
C:\Windows\vytobeztiqahzrehsormh.exe
vytobeztiqahzrehsormh.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c sqgwecshruzbobjh.exe .
C:\Windows\sqgwecshruzbobjh.exe
sqgwecshruzbobjh.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\sqgwecshruzbobjh.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c iiascculxcjncrbbjc.exe .
C:\Windows\gicwikexlsbhypbdnike.exe
gicwikexlsbhypbdnike.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe
C:\Windows\iiascculxcjncrbbjc.exe
iiascculxcjncrbbjc.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .
C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe
C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\iiascculxcjncrbbjc.exe*."
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\zypgpofvgkqthvedk.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe
C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe
C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .
C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe
C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\gicwikexlsbhypbdnike.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c iiascculxcjncrbbjc.exe
C:\Windows\iiascculxcjncrbbjc.exe
iiascculxcjncrbbjc.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe .
C:\Windows\tungrsldqwejzpabkef.exe
tungrsldqwejzpabkef.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\tungrsldqwejzpabkef.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c iiascculxcjncrbbjc.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe .
C:\Windows\iiascculxcjncrbbjc.exe
iiascculxcjncrbbjc.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Windows\vytobeztiqahzrehsormh.exe
vytobeztiqahzrehsormh.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\vytobeztiqahzrehsormh.exe*."
C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe
C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c zypgpofvgkqthvedk.exe .
C:\Windows\vytobeztiqahzrehsormh.exe
vytobeztiqahzrehsormh.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Windows\gicwikexlsbhypbdnike.exe
gicwikexlsbhypbdnike.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c sqgwecshruzbobjh.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\tungrsldqwejzpabkef.exe*."
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe
C:\Windows\zypgpofvgkqthvedk.exe
zypgpofvgkqthvedk.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe
C:\Windows\sqgwecshruzbobjh.exe
sqgwecshruzbobjh.exe
C:\Windows\vytobeztiqahzrehsormh.exe
vytobeztiqahzrehsormh.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c sqgwecshruzbobjh.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\zypgpofvgkqthvedk.exe*."
C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe
C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\vytobeztiqahzrehsormh.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Windows\gicwikexlsbhypbdnike.exe
gicwikexlsbhypbdnike.exe .
C:\Windows\gicwikexlsbhypbdnike.exe
gicwikexlsbhypbdnike.exe
C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe
C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .
C:\Windows\sqgwecshruzbobjh.exe
sqgwecshruzbobjh.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\gicwikexlsbhypbdnike.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\gicwikexlsbhypbdnike.exe*."
C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe
C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\iiascculxcjncrbbjc.exe*."
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\zypgpofvgkqthvedk.exe*."
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\sqgwecshruzbobjh.exe*."
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .
C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe
C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\iiascculxcjncrbbjc.exe*."
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\iiascculxcjncrbbjc.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe
C:\Windows\gicwikexlsbhypbdnike.exe
gicwikexlsbhypbdnike.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c iiascculxcjncrbbjc.exe .
C:\Windows\iiascculxcjncrbbjc.exe
iiascculxcjncrbbjc.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\iiascculxcjncrbbjc.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe
C:\Windows\gicwikexlsbhypbdnike.exe
gicwikexlsbhypbdnike.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe .
C:\Windows\tungrsldqwejzpabkef.exe
tungrsldqwejzpabkef.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\tungrsldqwejzpabkef.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .
C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe
C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\iiascculxcjncrbbjc.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe
C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe
C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe .
C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe
C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\vytobeztiqahzrehsormh.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c sqgwecshruzbobjh.exe
C:\Windows\sqgwecshruzbobjh.exe
sqgwecshruzbobjh.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c zypgpofvgkqthvedk.exe .
C:\Windows\zypgpofvgkqthvedk.exe
zypgpofvgkqthvedk.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\zypgpofvgkqthvedk.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c iiascculxcjncrbbjc.exe
C:\Windows\iiascculxcjncrbbjc.exe
iiascculxcjncrbbjc.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe .
C:\Windows\tungrsldqwejzpabkef.exe
tungrsldqwejzpabkef.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\tungrsldqwejzpabkef.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .
C:\Windows\tungrsldqwejzpabkef.exe
tungrsldqwejzpabkef.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\zypgpofvgkqthvedk.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c sqgwecshruzbobjh.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Windows\sqgwecshruzbobjh.exe
sqgwecshruzbobjh.exe
C:\Windows\gicwikexlsbhypbdnike.exe
gicwikexlsbhypbdnike.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c zypgpofvgkqthvedk.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c iiascculxcjncrbbjc.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe .
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\gicwikexlsbhypbdnike.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .
C:\Windows\zypgpofvgkqthvedk.exe
zypgpofvgkqthvedk.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe .
C:\Windows\gicwikexlsbhypbdnike.exe
gicwikexlsbhypbdnike.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\iiascculxcjncrbbjc.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\zypgpofvgkqthvedk.exe*."
C:\Windows\vytobeztiqahzrehsormh.exe
vytobeztiqahzrehsormh.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe
C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe
C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe .
C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe
C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\gicwikexlsbhypbdnike.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Windows\vytobeztiqahzrehsormh.exe
vytobeztiqahzrehsormh.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\vytobeztiqahzrehsormh.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .
C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe
C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe
C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe
C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\vytobeztiqahzrehsormh.exe*."
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe
C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\zypgpofvgkqthvedk.exe*."
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\gicwikexlsbhypbdnike.exe*."
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\gicwikexlsbhypbdnike.exe*."
C:\Windows\iiascculxcjncrbbjc.exe
iiascculxcjncrbbjc.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe
C:\Windows\vytobeztiqahzrehsormh.exe
vytobeztiqahzrehsormh.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c sqgwecshruzbobjh.exe .
C:\Windows\sqgwecshruzbobjh.exe
sqgwecshruzbobjh.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\sqgwecshruzbobjh.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c zypgpofvgkqthvedk.exe
C:\Windows\zypgpofvgkqthvedk.exe
zypgpofvgkqthvedk.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe .
C:\Windows\gicwikexlsbhypbdnike.exe
gicwikexlsbhypbdnike.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\gicwikexlsbhypbdnike.exe*."
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .
C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe
C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\tungrsldqwejzpabkef.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\zypgpofvgkqthvedk.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe
C:\Windows\tungrsldqwejzpabkef.exe
tungrsldqwejzpabkef.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe .
C:\Windows\tungrsldqwejzpabkef.exe
tungrsldqwejzpabkef.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\tungrsldqwejzpabkef.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe
C:\Windows\vytobeztiqahzrehsormh.exe
vytobeztiqahzrehsormh.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Windows\tungrsldqwejzpabkef.exe
tungrsldqwejzpabkef.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\tungrsldqwejzpabkef.exe*."
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\zypgpofvgkqthvedk.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe
C:\Windows\gicwikexlsbhypbdnike.exe
gicwikexlsbhypbdnike.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c zypgpofvgkqthvedk.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe
C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe .
C:\Windows\zypgpofvgkqthvedk.exe
zypgpofvgkqthvedk.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe
C:\Windows\zypgpofvgkqthvedk.exe
zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\sqgwecshruzbobjh.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c zypgpofvgkqthvedk.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\zypgpofvgkqthvedk.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c sqgwecshruzbobjh.exe .
C:\Windows\tungrsldqwejzpabkef.exe
tungrsldqwejzpabkef.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe
C:\Windows\sqgwecshruzbobjh.exe
sqgwecshruzbobjh.exe .
C:\Windows\zypgpofvgkqthvedk.exe
zypgpofvgkqthvedk.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c iiascculxcjncrbbjc.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\sqgwecshruzbobjh.exe*."
C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe
C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\zypgpofvgkqthvedk.exe*."
C:\Windows\iiascculxcjncrbbjc.exe
iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe
C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe
C:\Windows\gicwikexlsbhypbdnike.exe
gicwikexlsbhypbdnike.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .
C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe
C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\gicwikexlsbhypbdnike.exe*."
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\gicwikexlsbhypbdnike.exe*."
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe
C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe
C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe
C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\gicwikexlsbhypbdnike.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .
C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe
C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\sqgwecshruzbobjh.exe*."
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\iiascculxcjncrbbjc.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe
C:\Windows\gicwikexlsbhypbdnike.exe
gicwikexlsbhypbdnike.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c zypgpofvgkqthvedk.exe .
C:\Windows\zypgpofvgkqthvedk.exe
zypgpofvgkqthvedk.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\zypgpofvgkqthvedk.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe
C:\Windows\vytobeztiqahzrehsormh.exe
vytobeztiqahzrehsormh.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe .
C:\Windows\tungrsldqwejzpabkef.exe
tungrsldqwejzpabkef.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\tungrsldqwejzpabkef.exe*."
C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe
C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\iiascculxcjncrbbjc.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe
C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe
C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\zypgpofvgkqthvedk.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c sqgwecshruzbobjh.exe
C:\Windows\sqgwecshruzbobjh.exe
sqgwecshruzbobjh.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c sqgwecshruzbobjh.exe .
C:\Windows\sqgwecshruzbobjh.exe
sqgwecshruzbobjh.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\sqgwecshruzbobjh.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe
C:\Windows\tungrsldqwejzpabkef.exe
tungrsldqwejzpabkef.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Windows\vytobeztiqahzrehsormh.exe
vytobeztiqahzrehsormh.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\vytobeztiqahzrehsormh.exe*."
C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe
C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\gicwikexlsbhypbdnike.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe
C:\Windows\vytobeztiqahzrehsormh.exe
vytobeztiqahzrehsormh.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe
C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe
C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c zypgpofvgkqthvedk.exe .
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .
C:\Windows\zypgpofvgkqthvedk.exe
zypgpofvgkqthvedk.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\zypgpofvgkqthvedk.exe*."
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\zypgpofvgkqthvedk.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c zypgpofvgkqthvedk.exe
C:\Windows\zypgpofvgkqthvedk.exe
zypgpofvgkqthvedk.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe
C:\Windows\zypgpofvgkqthvedk.exe
zypgpofvgkqthvedk.exe
C:\Windows\tungrsldqwejzpabkef.exe
tungrsldqwejzpabkef.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c iiascculxcjncrbbjc.exe .
C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe
C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe
C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe
C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe .
C:\Windows\iiascculxcjncrbbjc.exe
iiascculxcjncrbbjc.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\tungrsldqwejzpabkef.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\iiascculxcjncrbbjc.exe*."
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\vytobeztiqahzrehsormh.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c sqgwecshruzbobjh.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe
C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe
C:\Windows\sqgwecshruzbobjh.exe
sqgwecshruzbobjh.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe .
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .
C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe
C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\sqgwecshruzbobjh.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\iiascculxcjncrbbjc.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\vytobeztiqahzrehsormh.exe*."
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe
C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .
C:\Windows\tungrsldqwejzpabkef.exe
tungrsldqwejzpabkef.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\tungrsldqwejzpabkef.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe
C:\Windows\gicwikexlsbhypbdnike.exe
gicwikexlsbhypbdnike.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe .
C:\Windows\tungrsldqwejzpabkef.exe
tungrsldqwejzpabkef.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\tungrsldqwejzpabkef.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe
C:\Windows\gicwikexlsbhypbdnike.exe
gicwikexlsbhypbdnike.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c iiascculxcjncrbbjc.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe
C:\Windows\iiascculxcjncrbbjc.exe
iiascculxcjncrbbjc.exe .
C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe
C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\iiascculxcjncrbbjc.exe*."
C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe
C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\vytobeztiqahzrehsormh.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .
C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe
C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\tungrsldqwejzpabkef.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe
C:\Windows\tungrsldqwejzpabkef.exe
tungrsldqwejzpabkef.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe .
C:\Windows\vytobeztiqahzrehsormh.exe
vytobeztiqahzrehsormh.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\vytobeztiqahzrehsormh.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe
C:\Windows\vytobeztiqahzrehsormh.exe
vytobeztiqahzrehsormh.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe .
C:\Windows\vytobeztiqahzrehsormh.exe
vytobeztiqahzrehsormh.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .
C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe
C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\vytobeztiqahzrehsormh.exe*."
C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe
C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c zypgpofvgkqthvedk.exe
C:\Windows\zypgpofvgkqthvedk.exe
zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\tungrsldqwejzpabkef.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe .
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .
C:\Windows\gicwikexlsbhypbdnike.exe
gicwikexlsbhypbdnike.exe .
C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe
C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\gicwikexlsbhypbdnike.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c zypgpofvgkqthvedk.exe .
C:\Windows\iiascculxcjncrbbjc.exe
iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\tungrsldqwejzpabkef.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Windows\zypgpofvgkqthvedk.exe
zypgpofvgkqthvedk.exe .
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\zypgpofvgkqthvedk.exe*."
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\zypgpofvgkqthvedk.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c iiascculxcjncrbbjc.exe
C:\Windows\iiascculxcjncrbbjc.exe
iiascculxcjncrbbjc.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .
C:\Windows\tungrsldqwejzpabkef.exe
tungrsldqwejzpabkef.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe
C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\tungrsldqwejzpabkef.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe .
C:\Windows\iiascculxcjncrbbjc.exe
iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\tungrsldqwejzpabkef.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Windows\vytobeztiqahzrehsormh.exe
vytobeztiqahzrehsormh.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\vytobeztiqahzrehsormh.exe*."
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\iiascculxcjncrbbjc.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe
C:\Windows\vytobeztiqahzrehsormh.exe
vytobeztiqahzrehsormh.exe
C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe
C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c sqgwecshruzbobjh.exe .
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .
C:\Windows\sqgwecshruzbobjh.exe
sqgwecshruzbobjh.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\zypgpofvgkqthvedk.exe*."
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\sqgwecshruzbobjh.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe
C:\Windows\vytobeztiqahzrehsormh.exe
vytobeztiqahzrehsormh.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c sqgwecshruzbobjh.exe .
C:\Windows\sqgwecshruzbobjh.exe
sqgwecshruzbobjh.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\sqgwecshruzbobjh.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe .
C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe
C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\sqgwecshruzbobjh.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe
C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe
C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\zypgpofvgkqthvedk.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c zypgpofvgkqthvedk.exe
C:\Windows\zypgpofvgkqthvedk.exe
zypgpofvgkqthvedk.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe .
C:\Windows\vytobeztiqahzrehsormh.exe
vytobeztiqahzrehsormh.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\vytobeztiqahzrehsormh.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c iiascculxcjncrbbjc.exe
C:\Windows\iiascculxcjncrbbjc.exe
iiascculxcjncrbbjc.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Windows\gicwikexlsbhypbdnike.exe
gicwikexlsbhypbdnike.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\gicwikexlsbhypbdnike.exe*."
C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe
C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe
C:\Windows\vytobeztiqahzrehsormh.exe
vytobeztiqahzrehsormh.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\gicwikexlsbhypbdnike.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c sqgwecshruzbobjh.exe .
C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe
C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe .
C:\Windows\sqgwecshruzbobjh.exe
sqgwecshruzbobjh.exe .
C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe
C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\sqgwecshruzbobjh.exe*."
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\vytobeztiqahzrehsormh.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe .
C:\Windows\tungrsldqwejzpabkef.exe
tungrsldqwejzpabkef.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\jaffacakes118_ba533ed647781b66a16904d7c4224982.exe"
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe
C:\Windows\tungrsldqwejzpabkef.exe
tungrsldqwejzpabkef.exe .
C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe
C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\tungrsldqwejzpabkef.exe*."
C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe
C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\vytobeztiqahzrehsormh.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe
C:\Windows\gicwikexlsbhypbdnike.exe
gicwikexlsbhypbdnike.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe .
C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe
C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe .
C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe
C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe .
C:\Windows\vytobeztiqahzrehsormh.exe
vytobeztiqahzrehsormh.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\vytobeztiqahzrehsormh.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c iiascculxcjncrbbjc.exe .
C:\Windows\iiascculxcjncrbbjc.exe
iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\vytobeztiqahzrehsormh.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Windows\iiascculxcjncrbbjc.exe
iiascculxcjncrbbjc.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe .
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\iiascculxcjncrbbjc.exe*."
C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe
C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\vytobeztiqahzrehsormh.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Windows\tungrsldqwejzpabkef.exe
tungrsldqwejzpabkef.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c sqgwecshruzbobjh.exe .
C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe
C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .
C:\Windows\sqgwecshruzbobjh.exe
sqgwecshruzbobjh.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\tungrsldqwejzpabkef.exe*."
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\sqgwecshruzbobjh.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe
C:\Windows\tungrsldqwejzpabkef.exe
tungrsldqwejzpabkef.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe .
C:\Windows\gicwikexlsbhypbdnike.exe
gicwikexlsbhypbdnike.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe
C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe
C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\gicwikexlsbhypbdnike.exe*."
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\iiascculxcjncrbbjc.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\iiascculxcjncrbbjc.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c zypgpofvgkqthvedk.exe
C:\Windows\zypgpofvgkqthvedk.exe
zypgpofvgkqthvedk.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe .
C:\Windows\gicwikexlsbhypbdnike.exe
gicwikexlsbhypbdnike.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\gicwikexlsbhypbdnike.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe
C:\Windows\gicwikexlsbhypbdnike.exe
gicwikexlsbhypbdnike.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c sqgwecshruzbobjh.exe .
C:\Windows\sqgwecshruzbobjh.exe
sqgwecshruzbobjh.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\sqgwecshruzbobjh.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe .
C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe
C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe
C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe
C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe .
C:\Windows\gicwikexlsbhypbdnike.exe
gicwikexlsbhypbdnike.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c zypgpofvgkqthvedk.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\vytobeztiqahzrehsormh.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .
C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe
C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe
C:\Windows\zypgpofvgkqthvedk.exe
zypgpofvgkqthvedk.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe .
C:\Windows\vytobeztiqahzrehsormh.exe
vytobeztiqahzrehsormh.exe
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\zypgpofvgkqthvedk.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe .
C:\Windows\gicwikexlsbhypbdnike.exe
gicwikexlsbhypbdnike.exe .
C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe
C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\zypgpofvgkqthvedk.exe*."
C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe
C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\gicwikexlsbhypbdnike.exe*."
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\sqgwecshruzbobjh.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe
C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe
C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .
C:\Windows\iiascculxcjncrbbjc.exe
iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\zypgpofvgkqthvedk.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c iiascculxcjncrbbjc.exe .
C:\Windows\iiascculxcjncrbbjc.exe
iiascculxcjncrbbjc.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\iiascculxcjncrbbjc.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c sqgwecshruzbobjh.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe .
C:\Windows\sqgwecshruzbobjh.exe
sqgwecshruzbobjh.exe
C:\Windows\vytobeztiqahzrehsormh.exe
vytobeztiqahzrehsormh.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe
C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe
C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\vytobeztiqahzrehsormh.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe .
C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe
C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe .
C:\Windows\gicwikexlsbhypbdnike.exe
gicwikexlsbhypbdnike.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\sqgwecshruzbobjh.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Windows\tungrsldqwejzpabkef.exe
tungrsldqwejzpabkef.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c zypgpofvgkqthvedk.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\tungrsldqwejzpabkef.exe*."
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .
C:\Windows\tungrsldqwejzpabkef.exe
tungrsldqwejzpabkef.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Windows\zypgpofvgkqthvedk.exe
zypgpofvgkqthvedk.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\zypgpofvgkqthvedk.exe*."
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe
C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\zypgpofvgkqthvedk.exe*."
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\iiascculxcjncrbbjc.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe
C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe
C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .
C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe
C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\tungrsldqwejzpabkef.exe*."
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | whatismyipaddress.com | udp |
| US | 104.19.223.79:80 | whatismyipaddress.com | tcp |
| US | 8.8.8.8:53 | whatismyip.everdot.org | udp |
| US | 8.8.8.8:53 | www.showmyipaddress.com | udp |
| US | 104.21.74.56:80 | www.showmyipaddress.com | tcp |
| US | 104.19.223.79:80 | whatismyipaddress.com | tcp |
| US | 104.21.74.56:80 | www.showmyipaddress.com | tcp |
| US | 8.8.8.8:53 | www.whatismyip.ca | udp |
| US | 8.8.8.8:53 | www.whatismyip.com | udp |
| US | 172.66.40.87:80 | www.whatismyip.com | tcp |
| US | 104.21.74.56:80 | www.showmyipaddress.com | tcp |
| US | 172.66.40.87:80 | www.whatismyip.com | tcp |
| US | 104.21.74.56:80 | www.showmyipaddress.com | tcp |
| US | 8.8.8.8:53 | www.whatismyip.ca | udp |
| US | 104.21.74.56:80 | www.showmyipaddress.com | tcp |
| US | 172.66.40.87:80 | www.whatismyip.com | tcp |
| US | 172.66.40.87:80 | www.whatismyip.com | tcp |
| US | 104.19.223.79:80 | whatismyipaddress.com | tcp |
| US | 8.8.8.8:53 | www.whatismyip.ca | udp |
| US | 104.21.74.56:80 | www.showmyipaddress.com | tcp |
| US | 172.66.40.87:80 | www.whatismyip.com | tcp |
| US | 104.21.74.56:80 | www.showmyipaddress.com | tcp |
| US | 8.8.8.8:53 | whatismyip.everdot.org | udp |
| US | 8.8.8.8:53 | www.imdb.com | udp |
| FR | 52.222.159.143:80 | www.imdb.com | tcp |
| LT | 78.63.122.70:26753 | tcp | |
| US | 8.8.8.8:53 | gyuuym.org | udp |
| DE | 85.214.228.140:80 | gyuuym.org | tcp |
| US | 8.8.8.8:53 | laaxpbyk.net | udp |
| US | 8.8.8.8:53 | tmpqvsl.net | udp |
| US | 8.8.8.8:53 | qudfory.net | udp |
| US | 8.8.8.8:53 | unxfuild.info | udp |
| SG | 18.142.91.111:80 | unxfuild.info | tcp |
| US | 8.8.8.8:53 | ojsajt.net | udp |
| US | 8.8.8.8:53 | shzszg.info | udp |
| US | 8.8.8.8:53 | rjeqik.info | udp |
| US | 8.8.8.8:53 | uutvvtvja.net | udp |
| US | 8.8.8.8:53 | ztrfti.info | udp |
| US | 8.8.8.8:53 | ysjoxmxgh.net | udp |
| US | 8.8.8.8:53 | ggoiukqgsikq.org | udp |
| US | 8.8.8.8:53 | orhdjp.info | udp |
| US | 8.8.8.8:53 | wowlmaywol.info | udp |
| US | 8.8.8.8:53 | srfrxqia.net | udp |
| US | 8.8.8.8:53 | udzdjiddn.net | udp |
| US | 8.8.8.8:53 | qjjwfkitzc.info | udp |
| US | 8.8.8.8:53 | hqvarimyweh.info | udp |
| US | 8.8.8.8:53 | xmduzmar.info | udp |
| US | 8.8.8.8:53 | ygoukmwg.org | udp |
| US | 8.8.8.8:53 | marpudjt.net | udp |
| US | 8.8.8.8:53 | tayasqpvyok.net | udp |
| US | 8.8.8.8:53 | hpjsasmosel.org | udp |
| US | 8.8.8.8:53 | usjbdw.net | udp |
| US | 8.8.8.8:53 | aernnaceyi.net | udp |
| US | 8.8.8.8:53 | nkxqvykhbur.net | udp |
| US | 8.8.8.8:53 | esssgiwayo.org | udp |
| US | 8.8.8.8:53 | cydlrge.info | udp |
| US | 104.156.155.94:80 | cydlrge.info | tcp |
| US | 8.8.8.8:53 | zoxgctodyqfs.net | udp |
| US | 8.8.8.8:53 | vsogsifgn.org | udp |
| US | 8.8.8.8:53 | fbnhngruq.info | udp |
| US | 8.8.8.8:53 | mjotpzfbosdh.info | udp |
| US | 8.8.8.8:53 | hemxvvt.org | udp |
| US | 8.8.8.8:53 | xkfkvedxk.info | udp |
| US | 8.8.8.8:53 | xxwsulsce.net | udp |
| US | 8.8.8.8:53 | taajbhzrfxhr.info | udp |
| US | 8.8.8.8:53 | brdkxnr.info | udp |
| US | 8.8.8.8:53 | luvehemiri.info | udp |
| US | 8.8.8.8:53 | rogitssbdg.net | udp |
| US | 8.8.8.8:53 | nlyzcerqby.net | udp |
| US | 8.8.8.8:53 | zyjybhp.net | udp |
| US | 8.8.8.8:53 | iydtrcjhvy.info | udp |
| US | 8.8.8.8:53 | lalckpw.org | udp |
| US | 8.8.8.8:53 | qyoykc.org | udp |
| US | 8.8.8.8:53 | aaiwummwgy.com | udp |
| US | 8.8.8.8:53 | omfvaanuj.info | udp |
| US | 8.8.8.8:53 | hmfurcniz.info | udp |
| BG | 94.236.166.209:38264 | tcp | |
| US | 8.8.8.8:53 | uycdzn.info | udp |
| US | 8.8.8.8:53 | pulhjmcehtpa.info | udp |
| US | 8.8.8.8:53 | lwwwuptpmw.net | udp |
| US | 8.8.8.8:53 | zepwrmgqvmb.com | udp |
| US | 8.8.8.8:53 | nosqmsa.net | udp |
| US | 8.8.8.8:53 | weswqscccw.org | udp |
| US | 8.8.8.8:53 | xydwhwb.net | udp |
| US | 8.8.8.8:53 | ssygipvbkmt.info | udp |
| US | 8.8.8.8:53 | ddpobim.org | udp |
| US | 8.8.8.8:53 | iusioomq.org | udp |
| US | 8.8.8.8:53 | swrtdqtqk.net | udp |
| US | 8.8.8.8:53 | bordvgx.info | udp |
| BG | 178.254.198.143:16311 | tcp | |
| US | 8.8.8.8:53 | wcsbrpz.net | udp |
| US | 8.8.8.8:53 | lzfufp.info | udp |
| US | 8.8.8.8:53 | jcjedutypqp.org | udp |
| US | 8.8.8.8:53 | npgqiqtjg.info | udp |
| US | 8.8.8.8:53 | xilqdrien.com | udp |
| US | 8.8.8.8:53 | pasxgkjyvuh.net | udp |
| US | 8.8.8.8:53 | uwcuws.org | udp |
| US | 8.8.8.8:53 | guygewecqo.com | udp |
| US | 8.8.8.8:53 | ymekiacwwqes.com | udp |
| US | 8.8.8.8:53 | hxwccvskyt.info | udp |
| US | 8.8.8.8:53 | azlfou.info | udp |
| US | 8.8.8.8:53 | btbjewpdy.net | udp |
| US | 8.8.8.8:53 | lvyvfodk.info | udp |
| US | 8.8.8.8:53 | pksfioiu.info | udp |
| US | 8.8.8.8:53 | nzibocagjwdd.info | udp |
| US | 8.8.8.8:53 | wnfofep.info | udp |
| US | 8.8.8.8:53 | umyicieyee.org | udp |
| US | 8.8.8.8:53 | hsjhpazxqvct.net | udp |
| US | 8.8.8.8:53 | xkjrnmvhmjnn.net | udp |
| US | 8.8.8.8:53 | vmxoajpdzy.net | udp |
| US | 8.8.8.8:53 | gltzjdk.info | udp |
| US | 8.8.8.8:53 | ipialurefem.net | udp |
| US | 8.8.8.8:53 | vcsuct.net | udp |
| US | 8.8.8.8:53 | kanmsjetqybt.net | udp |
| US | 8.8.8.8:53 | patagb.info | udp |
| US | 8.8.8.8:53 | csbmzmxcd.net | udp |
| US | 8.8.8.8:53 | fsyczawoha.info | udp |
| US | 8.8.8.8:53 | jrzurmddbd.info | udp |
| US | 8.8.8.8:53 | kgrjqedy.info | udp |
| US | 8.8.8.8:53 | gczhlszbz.net | udp |
| US | 8.8.8.8:53 | atkzfclhbift.info | udp |
| MD | 92.115.77.72:14260 | tcp | |
| US | 8.8.8.8:53 | otfpkctjvo.net | udp |
| US | 8.8.8.8:53 | oceyewsiws.org | udp |
| US | 8.8.8.8:53 | nshfrgthvm.net | udp |
| US | 8.8.8.8:53 | quzymcn.info | udp |
| US | 8.8.8.8:53 | bzxmsb.info | udp |
| US | 8.8.8.8:53 | wueysyqiyg.org | udp |
| US | 8.8.8.8:53 | mssysmf.info | udp |
| US | 8.8.8.8:53 | ywilnsfcb.info | udp |
| US | 8.8.8.8:53 | jjrefkv.net | udp |
| US | 8.8.8.8:53 | bipqynbezc.info | udp |
| US | 8.8.8.8:53 | wtflaovmps.net | udp |
| US | 8.8.8.8:53 | pdpibobucap.org | udp |
| US | 8.8.8.8:53 | bcgajnqgnale.net | udp |
| US | 8.8.8.8:53 | vgsgaio.org | udp |
| US | 8.8.8.8:53 | tjjxlutx.net | udp |
| US | 8.8.8.8:53 | aiwmqyoeaq.org | udp |
| US | 8.8.8.8:53 | kjskvzf.info | udp |
| US | 8.8.8.8:53 | zenolprmkgr.org | udp |
| US | 8.8.8.8:53 | szarccgqh.net | udp |
| US | 8.8.8.8:53 | dukedcttsa.info | udp |
| US | 8.8.8.8:53 | cekyowacouce.com | udp |
| US | 8.8.8.8:53 | rynixel.info | udp |
| US | 8.8.8.8:53 | lzbjkx.info | udp |
| US | 8.8.8.8:53 | tehkruuknoo.com | udp |
| US | 8.8.8.8:53 | blriytvijot.com | udp |
| US | 8.8.8.8:53 | oddwkeravsr.info | udp |
| US | 8.8.8.8:53 | kyilnx.net | udp |
| US | 8.8.8.8:53 | kjhckstcbeq.net | udp |
| US | 8.8.8.8:53 | wsrmwfe.info | udp |
| US | 8.8.8.8:53 | vgbikrg.net | udp |
| US | 8.8.8.8:53 | jclwnqy.com | udp |
| US | 8.8.8.8:53 | dwlwgibut.net | udp |
| US | 8.8.8.8:53 | qqpovsvj.net | udp |
| US | 8.8.8.8:53 | gaqkygwq.org | udp |
| US | 8.8.8.8:53 | pjprusldok.net | udp |
| US | 8.8.8.8:53 | ptnibcbanqk.info | udp |
| US | 8.8.8.8:53 | ybbkszjap.net | udp |
| US | 8.8.8.8:53 | gegkesgiuy.com | udp |
| US | 8.8.8.8:53 | ywiiam.com | udp |
| US | 8.8.8.8:53 | gsukyeks.com | udp |
| US | 8.8.8.8:53 | lcnahzh.net | udp |
| US | 8.8.8.8:53 | bpsunhl.net | udp |
| US | 8.8.8.8:53 | jrbulad.info | udp |
| US | 8.8.8.8:53 | gclljw.net | udp |
| US | 8.8.8.8:53 | qcfwyobyswu.info | udp |
| US | 8.8.8.8:53 | yfrkqav.info | udp |
| US | 8.8.8.8:53 | bpzorpfuhtf.org | udp |
| US | 8.8.8.8:53 | pqhvrgd.org | udp |
| US | 8.8.8.8:53 | vvqwhsvm.info | udp |
| US | 8.8.8.8:53 | uqqmtrsqtygj.net | udp |
| US | 8.8.8.8:53 | ueqckonspml.info | udp |
| US | 8.8.8.8:53 | udp | |
| US | 8.8.8.8:53 | ecegeakc.org | udp |
| US | 8.8.8.8:53 | lcurousnjcfa.net | udp |
| US | 8.8.8.8:53 | gomfycvut.net | udp |
| US | 8.8.8.8:53 | qzbrbxfc.net | udp |
| US | 8.8.8.8:53 | kolorbaof.net | udp |
| US | 8.8.8.8:53 | bjdumxkh.info | udp |
| US | 8.8.8.8:53 | ootkjdzphd.net | udp |
| US | 8.8.8.8:53 | fmmwznf.net | udp |
| US | 8.8.8.8:53 | jblcujtn.net | udp |
| US | 8.8.8.8:53 | aararuzmj.info | udp |
| US | 8.8.8.8:53 | jupalmjmj.org | udp |
| US | 8.8.8.8:53 | nadzxnin.net | udp |
| US | 8.8.8.8:53 | uogegscemuce.org | udp |
| US | 8.8.8.8:53 | zrizzt.net | udp |
| SG | 86.38.91.213:23240 | tcp | |
| US | 8.8.8.8:53 | puykxk.net | udp |
| US | 8.8.8.8:53 | tmhmyuj.com | udp |
| US | 8.8.8.8:53 | vklvlnim.net | udp |
| US | 8.8.8.8:53 | yrhglc.info | udp |
| US | 8.8.8.8:53 | tiylxsi.net | udp |
| US | 8.8.8.8:53 | nsjnpn.net | udp |
| US | 8.8.8.8:53 | ztdytrxxvn.net | udp |
| US | 8.8.8.8:53 | bgwulie.info | udp |
| US | 8.8.8.8:53 | empmqt.info | udp |
| US | 8.8.8.8:53 | pxljpnrb.info | udp |
| US | 8.8.8.8:53 | jetjswd.info | udp |
| US | 8.8.8.8:53 | ivewnr.info | udp |
| US | 8.8.8.8:53 | setxymr.net | udp |
| US | 8.8.8.8:53 | uxzyfla.info | udp |
| US | 8.8.8.8:53 | nqxijbihvn.info | udp |
| US | 8.8.8.8:53 | fkxmxzj.info | udp |
| US | 8.8.8.8:53 | ekqrlkjndfpd.net | udp |
| US | 8.8.8.8:53 | zilynuvcs.net | udp |
| US | 8.8.8.8:53 | yspynbdonzn.net | udp |
| US | 8.8.8.8:53 | fcfbfxh.net | udp |
| US | 8.8.8.8:53 | iswigc.com | udp |
| US | 8.8.8.8:53 | ltngsnxbab.net | udp |
| US | 8.8.8.8:53 | rvvkhwak.net | udp |
| US | 8.8.8.8:53 | aejttwpwebsq.net | udp |
| US | 8.8.8.8:53 | xrctizgjhu.net | udp |
| US | 8.8.8.8:53 | qwvulfviwf.info | udp |
| US | 8.8.8.8:53 | uulwzmj.net | udp |
| US | 8.8.8.8:53 | dshyudqln.info | udp |
| US | 8.8.8.8:53 | eqpifea.info | udp |
| US | 8.8.8.8:53 | yewqstuoq.info | udp |
| US | 8.8.8.8:53 | rfcqjgcwrllk.info | udp |
| US | 8.8.8.8:53 | yqtypd.info | udp |
| US | 8.8.8.8:53 | fyviqsnogcy.info | udp |
| US | 8.8.8.8:53 | xcgtbce.com | udp |
| US | 8.8.8.8:53 | ooewwc.org | udp |
| US | 8.8.8.8:53 | xnvybpnazsl.org | udp |
| US | 8.8.8.8:53 | mqeoecewyias.org | udp |
| US | 8.8.8.8:53 | yqdwzrdyhq.net | udp |
| US | 8.8.8.8:53 | xvpwwmgt.net | udp |
| US | 8.8.8.8:53 | jypigkw.net | udp |
| US | 8.8.8.8:53 | gegwmskceq.org | udp |
| US | 8.8.8.8:53 | suvmpbbgu.net | udp |
| US | 8.8.8.8:53 | ischtjii.net | udp |
| US | 8.8.8.8:53 | nqtsnnlgep.info | udp |
| US | 8.8.8.8:53 | uosgssuwumyc.org | udp |
| US | 8.8.8.8:53 | zzvoduwzvzzp.info | udp |
| US | 8.8.8.8:53 | jphhtgd.com | udp |
| US | 8.8.8.8:53 | rggedndjyozs.net | udp |
| US | 8.8.8.8:53 | bavvryzl.info | udp |
| US | 8.8.8.8:53 | uoikoagiku.com | udp |
| US | 8.8.8.8:53 | putkrobes.info | udp |
| US | 8.8.8.8:53 | wwqcueww.com | udp |
| US | 8.8.8.8:53 | omierhazkhgw.net | udp |
| US | 8.8.8.8:53 | nypdymbsjqp.net | udp |
| US | 8.8.8.8:53 | jghfomdkkr.net | udp |
| US | 8.8.8.8:53 | zqtutpdxtsa.info | udp |
| US | 8.8.8.8:53 | ugokguewmgkc.com | udp |
| US | 8.8.8.8:53 | kwdrqyzrhd.net | udp |
| US | 8.8.8.8:53 | gfqpwerwz.net | udp |
| US | 8.8.8.8:53 | kozelangx.info | udp |
| US | 8.8.8.8:53 | xrjmbmgmisvh.info | udp |
| US | 8.8.8.8:53 | awnekynulkd.info | udp |
| US | 8.8.8.8:53 | kqqecesmceka.org | udp |
| US | 8.8.8.8:53 | uvfljyomeq.net | udp |
| US | 8.8.8.8:53 | jqtenkdayoy.org | udp |
| US | 8.8.8.8:53 | ieemsk.com | udp |
| US | 8.8.8.8:53 | jqvvnetwx.net | udp |
| US | 8.8.8.8:53 | lvliwxsju.net | udp |
| US | 8.8.8.8:53 | uuhpyi.info | udp |
| US | 8.8.8.8:53 | tpxepmhhxo.net | udp |
| US | 8.8.8.8:53 | wcgcuuiu.org | udp |
| US | 8.8.8.8:53 | aouylfqj.net | udp |
| US | 8.8.8.8:53 | rojkekjgxgv.com | udp |
| US | 8.8.8.8:53 | abtceupkeiq.net | udp |
| US | 8.8.8.8:53 | nhmyomxjv.info | udp |
| US | 8.8.8.8:53 | yahkdydxbwkf.net | udp |
| US | 8.8.8.8:53 | xrashk.info | udp |
| US | 8.8.8.8:53 | rmmkcburkf.net | udp |
| US | 8.8.8.8:53 | tyzkrdhyl.info | udp |
| BG | 78.90.150.27:18740 | tcp | |
| US | 8.8.8.8:53 | ryclcctqzmj.net | udp |
| US | 8.8.8.8:53 | cjniohmclcvn.net | udp |
| US | 8.8.8.8:53 | vyvijbihvn.info | udp |
| US | 8.8.8.8:53 | ykuiww.com | udp |
| US | 8.8.8.8:53 | cqkdpulihwv.net | udp |
| US | 8.8.8.8:53 | aoacwkigmmks.org | udp |
| US | 8.8.8.8:53 | emikcsse.com | udp |
| US | 8.8.8.8:53 | kfuaxccx.info | udp |
| US | 8.8.8.8:53 | dcoulqlpw.net | udp |
| US | 8.8.8.8:53 | llpwlrlwpx.net | udp |
| US | 8.8.8.8:53 | euhusqrqpij.info | udp |
| US | 8.8.8.8:53 | bctwfgikb.org | udp |
| US | 8.8.8.8:53 | ffcbtjgq.net | udp |
| US | 8.8.8.8:53 | xsxpvlfr.info | udp |
| US | 8.8.8.8:53 | xgbudgdfdkl.net | udp |
| US | 8.8.8.8:53 | wijayyfmvwp.info | udp |
| US | 8.8.8.8:53 | dqxwxaqxxrp.net | udp |
| US | 8.8.8.8:53 | fzqqksnzg.net | udp |
| US | 8.8.8.8:53 | qipsqplpxcx.net | udp |
| US | 8.8.8.8:53 | onlohmosj.info | udp |
| US | 8.8.8.8:53 | jynyrfjiknnw.net | udp |
| US | 8.8.8.8:53 | hrudywtli.org | udp |
| US | 8.8.8.8:53 | agnyaiwqf.net | udp |
| US | 8.8.8.8:53 | xmlymtnez.org | udp |
| US | 8.8.8.8:53 | woepguqcn.info | udp |
| US | 8.8.8.8:53 | ourbrqmpse.net | udp |
| US | 8.8.8.8:53 | odzbrjqoy.info | udp |
| US | 8.8.8.8:53 | gcksakwkgoum.com | udp |
| US | 8.8.8.8:53 | qeoecsuq.org | udp |
| US | 8.8.8.8:53 | tpsleabzwt.net | udp |
| US | 8.8.8.8:53 | sayeoywcuu.com | udp |
| US | 8.8.8.8:53 | oemupsn.net | udp |
| US | 8.8.8.8:53 | aalijqi.info | udp |
| US | 8.8.8.8:53 | iutjjvxez.info | udp |
| US | 8.8.8.8:53 | libojsjbx.com | udp |
| US | 8.8.8.8:53 | odqisf.info | udp |
| US | 8.8.8.8:53 | vmacnmhq.info | udp |
| US | 8.8.8.8:53 | iizfvzzb.info | udp |
| US | 8.8.8.8:53 | nqtvrwdez.com | udp |
| US | 8.8.8.8:53 | ludfsj.info | udp |
| US | 8.8.8.8:53 | ncpmyszzt.info | udp |
| US | 8.8.8.8:53 | pqtyzgeskcl.net | udp |
| US | 159.148.166.6:29517 | tcp | |
| US | 8.8.8.8:53 | uukuvupkl.net | udp |
| US | 8.8.8.8:53 | qwemwsma.org | udp |
| US | 8.8.8.8:53 | tsadizxlcl.net | udp |
| US | 8.8.8.8:53 | nobkwfkwvshl.info | udp |
| US | 8.8.8.8:53 | jgablqj.org | udp |
| US | 8.8.8.8:53 | ybxsqlwexbnh.info | udp |
| US | 8.8.8.8:53 | yeidxglzl.net | udp |
| US | 8.8.8.8:53 | yvhehaqyqn.info | udp |
| US | 8.8.8.8:53 | glwzncdjh.info | udp |
| US | 8.8.8.8:53 | zchpylnxfplx.info | udp |
| US | 8.8.8.8:53 | trrrgjdnnbrm.info | udp |
| US | 8.8.8.8:53 | kmukgu.org | udp |
| US | 8.8.8.8:53 | kkiamiym.com | udp |
| US | 8.8.8.8:53 | immpxad.net | udp |
| US | 8.8.8.8:53 | ydyofq.info | udp |
| US | 8.8.8.8:53 | yyemqiayao.com | udp |
| US | 8.8.8.8:53 | wywazjfaa.info | udp |
| US | 8.8.8.8:53 | medcnzqfno.net | udp |
| US | 8.8.8.8:53 | dchmpulgv.net | udp |
| US | 8.8.8.8:53 | jatdaajehomt.net | udp |
| US | 8.8.8.8:53 | wvzixgncgh.net | udp |
| US | 8.8.8.8:53 | wryhfbhx.net | udp |
| US | 8.8.8.8:53 | jdfijutqj.info | udp |
| US | 8.8.8.8:53 | uezmtt.info | udp |
| US | 8.8.8.8:53 | mwgkuyee.org | udp |
| US | 8.8.8.8:53 | yefawioisor.info | udp |
| US | 8.8.8.8:53 | xdefsx.info | udp |
| US | 8.8.8.8:53 | c.pki.goog | udp |
| NL | 173.194.69.94:80 | c.pki.goog | tcp |
| US | 8.8.8.8:53 | arnimu.info | udp |
| US | 8.8.8.8:53 | ctkipoxh.info | udp |
| US | 8.8.8.8:53 | xifoloobaf.net | udp |
| US | 8.8.8.8:53 | uiceesz.info | udp |
| US | 8.8.8.8:53 | tkleplbbjg.info | udp |
| US | 8.8.8.8:53 | iqojmojssut.net | udp |
| US | 8.8.8.8:53 | mgosug.org | udp |
| US | 8.8.8.8:53 | bupdlp.info | udp |
| US | 8.8.8.8:53 | dengxfrwxu.info | udp |
| US | 8.8.8.8:53 | ruahpcbmpzu.net | udp |
| US | 8.8.8.8:53 | vczsjaxyusm.net | udp |
| US | 8.8.8.8:53 | pzotphqq.net | udp |
| US | 8.8.8.8:53 | bzaydhbkyko.info | udp |
| US | 8.8.8.8:53 | hmvucwy.info | udp |
| BG | 130.204.114.238:43084 | tcp | |
| US | 8.8.8.8:53 | wmyaxkabwvfy.net | udp |
| US | 8.8.8.8:53 | cprgywzb.net | udp |
| US | 8.8.8.8:53 | uoxjsmld.info | udp |
| US | 8.8.8.8:53 | augyqoss.org | udp |
| US | 8.8.8.8:53 | zkylfh.info | udp |
| US | 8.8.8.8:53 | nusgja.info | udp |
| US | 8.8.8.8:53 | ewiuauieao.com | udp |
| US | 8.8.8.8:53 | csoiiemc.org | udp |
| US | 8.8.8.8:53 | bnvnxfmnia.net | udp |
| US | 8.8.8.8:53 | bjpwlrlwpx.net | udp |
| US | 8.8.8.8:53 | ipfhvlsg.net | udp |
| US | 8.8.8.8:53 | jqvtchngzoj.com | udp |
| US | 8.8.8.8:53 | jprkjcocgrxl.net | udp |
| US | 8.8.8.8:53 | gmmbqqr.net | udp |
| US | 8.8.8.8:53 | copcsxl.net | udp |
| US | 8.8.8.8:53 | ycephkmmpe.info | udp |
| US | 8.8.8.8:53 | gfflluitxivt.net | udp |
| US | 8.8.8.8:53 | zlhorjshpzzy.info | udp |
| US | 8.8.8.8:53 | vyrazqzrtk.info | udp |
| US | 8.8.8.8:53 | ngaadsfqhuf.org | udp |
| US | 8.8.8.8:53 | yujzbf.info | udp |
| US | 8.8.8.8:53 | sewuvwb.net | udp |
| US | 8.8.8.8:53 | skrdmegyyqv.net | udp |
| US | 8.8.8.8:53 | dapakzwisk.net | udp |
| US | 8.8.8.8:53 | waikic.com | udp |
| US | 8.8.8.8:53 | fdcnhwjfnl.info | udp |
| US | 8.8.8.8:53 | vhyuyr.info | udp |
| US | 8.8.8.8:53 | oaewcmmi.com | udp |
| US | 8.8.8.8:53 | rdsalkv.net | udp |
| US | 8.8.8.8:53 | awtkltffriwv.net | udp |
| US | 8.8.8.8:53 | iywgceys.com | udp |
| US | 8.8.8.8:53 | keyqkiuu.com | udp |
| US | 8.8.8.8:53 | fspushloucd.com | udp |
| US | 8.8.8.8:53 | oalwpcngx.info | udp |
| US | 8.8.8.8:53 | ckyyzks.net | udp |
| US | 8.8.8.8:53 | podkoinxlip.net | udp |
| US | 8.8.8.8:53 | aklruohjej.net | udp |
| US | 8.8.8.8:53 | bnprcvgmxwdu.net | udp |
| US | 8.8.8.8:53 | fcmlnsd.com | udp |
| US | 8.8.8.8:53 | xcrfxbihvn.info | udp |
| US | 8.8.8.8:53 | yyyoykcckiey.org | udp |
| US | 8.8.8.8:53 | nktomb.info | udp |
| US | 8.8.8.8:53 | owmssgcy.org | udp |
| US | 8.8.8.8:53 | hypsopsbj.com | udp |
| US | 8.8.8.8:53 | dxcyyuq.net | udp |
| US | 8.8.8.8:53 | gvhgfsn.info | udp |
| US | 8.8.8.8:53 | avdpjtx.net | udp |
| US | 8.8.8.8:53 | pvesxitaordl.info | udp |
| US | 8.8.8.8:53 | rvlmjq.info | udp |
| US | 8.8.8.8:53 | gsgywggeqg.com | udp |
| US | 8.8.8.8:53 | lzkejad.net | udp |
| US | 8.8.8.8:53 | omumkc.org | udp |
| US | 8.8.8.8:53 | dzrmxez.com | udp |
| US | 8.8.8.8:53 | yucidujkw.net | udp |
| US | 8.8.8.8:53 | jycmyirzdct.org | udp |
| US | 8.8.8.8:53 | wdgdbextgsho.net | udp |
| US | 8.8.8.8:53 | kxldwaoqfn.info | udp |
| US | 8.8.8.8:53 | lrfexnjazjkt.info | udp |
| US | 8.8.8.8:53 | sksksc.org | udp |
| US | 8.8.8.8:53 | lssmzecimib.com | udp |
| US | 8.8.8.8:53 | fgoqql.net | udp |
| US | 8.8.8.8:53 | egjealczfsdr.info | udp |
| US | 8.8.8.8:53 | xxbuvavqnao.net | udp |
| US | 8.8.8.8:53 | hkbvbfbks.info | udp |
| US | 8.8.8.8:53 | gexirij.info | udp |
| US | 8.8.8.8:53 | tgzzsilpuoyu.info | udp |
| US | 8.8.8.8:53 | tilxuwdml.info | udp |
| US | 8.8.8.8:53 | zfcqnktz.net | udp |
| US | 8.8.8.8:53 | yujaxeb.info | udp |
| US | 8.8.8.8:53 | lgoabxuuckaz.info | udp |
| US | 8.8.8.8:53 | sllojeh.net | udp |
| US | 8.8.8.8:53 | rejwrwpoa.info | udp |
| US | 8.8.8.8:53 | uwysowoy.com | udp |
| US | 8.8.8.8:53 | seysumkoeq.com | udp |
| US | 8.8.8.8:53 | gguqkg.com | udp |
| US | 8.8.8.8:53 | yuqsate.info | udp |
| US | 8.8.8.8:53 | beouriw.net | udp |
| US | 8.8.8.8:53 | dcfctpnd.info | udp |
| US | 8.8.8.8:53 | lbtgyrfber.net | udp |
| US | 8.8.8.8:53 | jmuyzwjxj.net | udp |
| US | 8.8.8.8:53 | xkhqwah.net | udp |
| US | 8.8.8.8:53 | sgescokcmo.org | udp |
| US | 8.8.8.8:53 | yeakms.com | udp |
| US | 8.8.8.8:53 | jvroteq.net | udp |
| US | 8.8.8.8:53 | pinadye.org | udp |
| US | 8.8.8.8:53 | lzwgpqnxhy.net | udp |
| US | 8.8.8.8:53 | zhnghdrifb.info | udp |
| US | 8.8.8.8:53 | pezgfgbvhwr.com | udp |
| US | 8.8.8.8:53 | bhnbdsbtba.net | udp |
| US | 8.8.8.8:53 | jehyhpbob.com | udp |
| US | 8.8.8.8:53 | doxjfnhk.net | udp |
| US | 8.8.8.8:53 | socqykqe.com | udp |
| US | 8.8.8.8:53 | yescie.com | udp |
| US | 8.8.8.8:53 | frqniu.info | udp |
| US | 8.8.8.8:53 | mqficsr.info | udp |
| US | 8.8.8.8:53 | vveushuoxdlp.net | udp |
| US | 8.8.8.8:53 | mkgqcemqso.org | udp |
| US | 8.8.8.8:53 | qqugqlrcvwsv.info | udp |
| US | 8.8.8.8:53 | xaglpx.info | udp |
| US | 8.8.8.8:53 | jnqvhqai.info | udp |
| US | 8.8.8.8:53 | nurcpihcfpl.org | udp |
| US | 8.8.8.8:53 | hsfspwfirsr.org | udp |
| US | 8.8.8.8:53 | eoiuciaq.com | udp |
| US | 8.8.8.8:53 | yrqmxofwicx.info | udp |
| US | 8.8.8.8:53 | kekwbn.info | udp |
| US | 8.8.8.8:53 | ncztumfk.info | udp |
| US | 8.8.8.8:53 | toretqlvbw.info | udp |
| US | 8.8.8.8:53 | itjfkixadmz.info | udp |
| BG | 79.100.42.4:16630 | tcp | |
| US | 8.8.8.8:53 | icbdithml.net | udp |
| US | 8.8.8.8:53 | hewmikl.info | udp |
| US | 8.8.8.8:53 | ckpsxcjin.info | udp |
| US | 8.8.8.8:53 | rebymbqknptz.net | udp |
| US | 8.8.8.8:53 | dnyidwf.info | udp |
| US | 8.8.8.8:53 | icgkimqg.com | udp |
| US | 8.8.8.8:53 | ewwmgousuc.org | udp |
| US | 8.8.8.8:53 | pbmzhgvoziz.net | udp |
| US | 8.8.8.8:53 | iwooye.org | udp |
| US | 8.8.8.8:53 | dtcmsl.info | udp |
| US | 8.8.8.8:53 | yadxtkefpqdf.net | udp |
| US | 8.8.8.8:53 | aiuqqimwmi.org | udp |
| US | 8.8.8.8:53 | yetmxkxqh.net | udp |
| US | 8.8.8.8:53 | kwpeowv.net | udp |
| US | 8.8.8.8:53 | qngitmingp.net | udp |
| US | 8.8.8.8:53 | pygdgajd.net | udp |
| US | 8.8.8.8:53 | uyzkhcubeliw.net | udp |
| US | 8.8.8.8:53 | xdkdyecghew.info | udp |
| US | 8.8.8.8:53 | fapobwpxpcdm.info | udp |
| US | 8.8.8.8:53 | ulwprsdpevsj.info | udp |
| US | 8.8.8.8:53 | riuawanw.info | udp |
| US | 8.8.8.8:53 | rmvurugmdmx.net | udp |
| US | 8.8.8.8:53 | ewqgme.com | udp |
| US | 8.8.8.8:53 | hcajrml.com | udp |
| US | 8.8.8.8:53 | gbezfymnoq.net | udp |
| US | 8.8.8.8:53 | hwppheppbbd.org | udp |
| US | 8.8.8.8:53 | kuxyxunmv.net | udp |
| US | 8.8.8.8:53 | qyjxvcif.net | udp |
| US | 8.8.8.8:53 | lmskkud.net | udp |
| US | 8.8.8.8:53 | bqthujs.com | udp |
| US | 8.8.8.8:53 | rsxyzjhke.net | udp |
| US | 8.8.8.8:53 | sjoyqwarzybg.net | udp |
| US | 8.8.8.8:53 | kuqmiywgeyyk.org | udp |
| US | 8.8.8.8:53 | ynfhxnub.net | udp |
| US | 8.8.8.8:53 | bqjubxfuug.info | udp |
| US | 8.8.8.8:53 | rkwlhccy.info | udp |
| US | 8.8.8.8:53 | ojrszqyplj.net | udp |
| US | 8.8.8.8:53 | nthafgeqx.org | udp |
| US | 8.8.8.8:53 | rysxkjutfca.org | udp |
| US | 8.8.8.8:53 | gwuasykc.com | udp |
| US | 8.8.8.8:53 | zarfdrnqbfkb.net | udp |
| US | 8.8.8.8:53 | cqegcmioes.com | udp |
| US | 8.8.8.8:53 | skzafqs.net | udp |
| US | 8.8.8.8:53 | vibshiiel.net | udp |
| US | 8.8.8.8:53 | jcatfaeqpzfv.info | udp |
| US | 8.8.8.8:53 | lcthybrmjddh.info | udp |
| US | 8.8.8.8:53 | jjqtpeerkb.net | udp |
| US | 8.8.8.8:53 | byzyjukom.info | udp |
| US | 8.8.8.8:53 | puvldtielldn.info | udp |
| US | 8.8.8.8:53 | mgdyrkson.net | udp |
| US | 8.8.8.8:53 | hmnitafg.net | udp |
| US | 8.8.8.8:53 | igvwtit.net | udp |
| US | 8.8.8.8:53 | cyflwoaqd.info | udp |
| US | 8.8.8.8:53 | djanychncjor.net | udp |
| US | 8.8.8.8:53 | urkcltobhpwf.net | udp |
| US | 8.8.8.8:53 | lsniddwqoaht.net | udp |
| US | 8.8.8.8:53 | agkxdktl.net | udp |
| US | 8.8.8.8:53 | oismai.com | udp |
| US | 8.8.8.8:53 | eheflhppvg.net | udp |
| US | 8.8.8.8:53 | pclnivmleanr.net | udp |
| US | 8.8.8.8:53 | csuksc.com | udp |
| US | 8.8.8.8:53 | hfrkdoqvjz.info | udp |
| US | 8.8.8.8:53 | qwkywkao.com | udp |
| US | 8.8.8.8:53 | elqxwzmh.info | udp |
| LT | 212.117.9.69:34498 | tcp | |
| US | 8.8.8.8:53 | cykogcgqqcuu.com | udp |
| US | 8.8.8.8:53 | smwmlg.net | udp |
| US | 8.8.8.8:53 | xspqclz.net | udp |
| US | 8.8.8.8:53 | skkapax.net | udp |
| US | 8.8.8.8:53 | ugjyfpgfl.net | udp |
| US | 8.8.8.8:53 | asxyjipov.net | udp |
| US | 8.8.8.8:53 | acxgdr.net | udp |
| US | 8.8.8.8:53 | pkqzppsdbq.info | udp |
| US | 8.8.8.8:53 | ympanulwi.net | udp |
| US | 8.8.8.8:53 | pnxjnkgif.net | udp |
| US | 8.8.8.8:53 | eyqeykgyic.org | udp |
| US | 8.8.8.8:53 | esfcqrg.net | udp |
| US | 8.8.8.8:53 | myrwjqkrwpbk.info | udp |
| US | 8.8.8.8:53 | qkreziredcn.info | udp |
| US | 8.8.8.8:53 | fsmmvgbarn.net | udp |
| US | 8.8.8.8:53 | pmjadalzt.info | udp |
| US | 8.8.8.8:53 | mpkbfsgyp.info | udp |
| US | 8.8.8.8:53 | gsdskjh.info | udp |
| US | 8.8.8.8:53 | godmyfrbtj.info | udp |
| US | 8.8.8.8:53 | ussgsuakom.com | udp |
| US | 8.8.8.8:53 | qseoumkkca.org | udp |
| US | 8.8.8.8:53 | acdetcf.info | udp |
| US | 8.8.8.8:53 | fwmenrbrrh.net | udp |
| US | 8.8.8.8:53 | lyfumoz.net | udp |
| US | 8.8.8.8:53 | qdnmhgdyrit.net | udp |
| US | 8.8.8.8:53 | fgnsxwu.org | udp |
| US | 8.8.8.8:53 | bclvea.net | udp |
| US | 8.8.8.8:53 | hcbszmb.info | udp |
| US | 8.8.8.8:53 | cocsgeow.org | udp |
| US | 8.8.8.8:53 | jeqwbi.net | udp |
| US | 8.8.8.8:53 | zkfjbu.net | udp |
| US | 8.8.8.8:53 | qyqigk.com | udp |
| US | 8.8.8.8:53 | agjycsacnt.info | udp |
| US | 8.8.8.8:53 | nmmkfss.net | udp |
| US | 8.8.8.8:53 | tnjxbi.net | udp |
| US | 8.8.8.8:53 | cbgevk.net | udp |
| US | 8.8.8.8:53 | filicwxat.com | udp |
| US | 8.8.8.8:53 | fyaylmbcb.net | udp |
| US | 8.8.8.8:53 | vycsqizs.net | udp |
| US | 8.8.8.8:53 | tiocujoptg.net | udp |
| US | 8.8.8.8:53 | wioywobgn.info | udp |
| US | 8.8.8.8:53 | ekqaao.com | udp |
| US | 8.8.8.8:53 | leislgv.org | udp |
| US | 8.8.8.8:53 | yljgzgd.info | udp |
| US | 8.8.8.8:53 | uahhax.info | udp |
| US | 8.8.8.8:53 | viclhcrdno.info | udp |
| US | 8.8.8.8:53 | xarszitqk.org | udp |
| LV | 85.254.33.225:22720 | tcp | |
| US | 8.8.8.8:53 | rkjyfrxybqd.net | udp |
| US | 8.8.8.8:53 | wcooqqeg.com | udp |
| US | 8.8.8.8:53 | wlmmdek.info | udp |
| US | 8.8.8.8:53 | xsbabdbdjd.net | udp |
| US | 8.8.8.8:53 | hjfdpmp.org | udp |
| US | 8.8.8.8:53 | rvljpzomlf.net | udp |
| US | 8.8.8.8:53 | kagigs.org | udp |
| US | 8.8.8.8:53 | ydsfbsmz.info | udp |
| US | 8.8.8.8:53 | rjbifug.net | udp |
| US | 8.8.8.8:53 | zcdmnywbbel.net | udp |
| US | 8.8.8.8:53 | yqdindvszcl.info | udp |
| US | 8.8.8.8:53 | ksbqymhebwk.info | udp |
| US | 8.8.8.8:53 | xdlhnomgnu.net | udp |
| US | 8.8.8.8:53 | xvrjgkxcmw.net | udp |
| US | 8.8.8.8:53 | bvleenyitufj.net | udp |
| US | 8.8.8.8:53 | mgvujoaaj.info | udp |
| US | 8.8.8.8:53 | ldlrgk.info | udp |
| US | 8.8.8.8:53 | siiucewa.org | udp |
| US | 8.8.8.8:53 | tqjeexr.org | udp |
| US | 8.8.8.8:53 | owtumceqt.info | udp |
| US | 8.8.8.8:53 | shrwnfeexho.net | udp |
| US | 8.8.8.8:53 | vijdzqp.net | udp |
| US | 8.8.8.8:53 | nnhhyniovl.info | udp |
| US | 8.8.8.8:53 | czsesbhvcydm.info | udp |
| US | 8.8.8.8:53 | ckggnpdbpdyv.info | udp |
| US | 8.8.8.8:53 | vlnthukuzii.com | udp |
| US | 8.8.8.8:53 | vzeqxcfiuyiu.net | udp |
| US | 8.8.8.8:53 | sgdzhklkvfso.info | udp |
| US | 8.8.8.8:53 | fkwwjrodvm.info | udp |
| US | 8.8.8.8:53 | hoxykkwem.org | udp |
| US | 8.8.8.8:53 | oakyuuaaggiu.org | udp |
| US | 8.8.8.8:53 | bsxukoea.info | udp |
| US | 8.8.8.8:53 | skqsiiae.org | udp |
| LT | 78.62.144.169:22671 | tcp | |
| US | 8.8.8.8:53 | iudsbwl.info | udp |
| US | 8.8.8.8:53 | tydgygsud.net | udp |
| US | 8.8.8.8:53 | kuuiou.com | udp |
| US | 8.8.8.8:53 | auqmxkhmq.net | udp |
| US | 8.8.8.8:53 | kstpdx.info | udp |
| US | 8.8.8.8:53 | abdgbsnofxvq.net | udp |
| US | 8.8.8.8:53 | alyypvemovoc.net | udp |
| US | 8.8.8.8:53 | ksycokeqqe.org | udp |
| US | 8.8.8.8:53 | awkkqg.org | udp |
| US | 8.8.8.8:53 | qlstpgkhcjbu.net | udp |
| US | 8.8.8.8:53 | rfhpjhlytxwf.net | udp |
| US | 8.8.8.8:53 | qjjapgod.info | udp |
| US | 8.8.8.8:53 | ibvocdxf.info | udp |
| US | 8.8.8.8:53 | jajynjgqlqv.com | udp |
| US | 8.8.8.8:53 | sqdsxt.net | udp |
| US | 8.8.8.8:53 | swkuuumy.org | udp |
| US | 8.8.8.8:53 | btrzbnhuvsx.info | udp |
| US | 8.8.8.8:53 | picftmlr.info | udp |
| US | 8.8.8.8:53 | dyxqtol.net | udp |
| US | 8.8.8.8:53 | nzitfaav.info | udp |
| US | 8.8.8.8:53 | npyncgjj.info | udp |
| US | 8.8.8.8:53 | eekswqki.com | udp |
| US | 8.8.8.8:53 | lktcrbw.com | udp |
| US | 8.8.8.8:53 | oczhfhcmmtrn.info | udp |
| US | 8.8.8.8:53 | hyjodgw.info | udp |
| US | 8.8.8.8:53 | zfjelaqhnfb.com | udp |
| US | 8.8.8.8:53 | pttznxof.net | udp |
| US | 8.8.8.8:53 | jlxxubcmhdml.info | udp |
| US | 8.8.8.8:53 | yjxbblcucn.net | udp |
| US | 8.8.8.8:53 | dkdczgl.info | udp |
| US | 8.8.8.8:53 | bejmsgzozoj.info | udp |
| US | 8.8.8.8:53 | yygimacwgyuk.com | udp |
| US | 8.8.8.8:53 | earmhyjihls.net | udp |
| US | 8.8.8.8:53 | iaeymeiiqkki.com | udp |
| US | 8.8.8.8:53 | fajjjo.net | udp |
| US | 8.8.8.8:53 | eaictyqxc.info | udp |
| US | 8.8.8.8:53 | okuqqq.org | udp |
| US | 8.8.8.8:53 | xtuitkrup.net | udp |
| US | 8.8.8.8:53 | dzefsf.net | udp |
| US | 8.8.8.8:53 | kpqjhwtg.info | udp |
| US | 8.8.8.8:53 | steghc.net | udp |
| US | 8.8.8.8:53 | vgqxvqngngx.info | udp |
| US | 8.8.8.8:53 | bnosoya.net | udp |
| US | 8.8.8.8:53 | eadxhih.net | udp |
| US | 8.8.8.8:53 | pcukhjpibsv.org | udp |
| US | 8.8.8.8:53 | mkgspwjic.net | udp |
| US | 8.8.8.8:53 | jzuzzqnnet.info | udp |
| US | 8.8.8.8:53 | hsrkvgh.com | udp |
| US | 8.8.8.8:53 | cznedunhjr.net | udp |
| US | 8.8.8.8:53 | cgzqtowog.info | udp |
| US | 8.8.8.8:53 | rqvyvgtlgrmm.info | udp |
| US | 8.8.8.8:53 | iixrzwoxw.info | udp |
| US | 8.8.8.8:53 | dodlrundv.net | udp |
| US | 8.8.8.8:53 | zlcbctva.info | udp |
| US | 8.8.8.8:53 | gscosauu.org | udp |
| US | 8.8.8.8:53 | bqxjdqh.net | udp |
| US | 8.8.8.8:53 | qeasooggkkye.org | udp |
| BG | 93.155.169.215:20802 | tcp | |
| US | 8.8.8.8:53 | fufosmi.org | udp |
| US | 8.8.8.8:53 | zqdovxmrged.net | udp |
| US | 8.8.8.8:53 | nlrnljnixwj.org | udp |
| US | 8.8.8.8:53 | sbhkyc.info | udp |
| US | 8.8.8.8:53 | gdiecndz.net | udp |
| US | 8.8.8.8:53 | dlhkseb.net | udp |
| US | 8.8.8.8:53 | fevpfshvp.org | udp |
| US | 8.8.8.8:53 | huvgpix.org | udp |
| US | 8.8.8.8:53 | radhafzm.info | udp |
| US | 8.8.8.8:53 | ichzwt.info | udp |
| US | 8.8.8.8:53 | kcryxrris.info | udp |
| US | 8.8.8.8:53 | fqlunkhy.net | udp |
| US | 8.8.8.8:53 | wcjexmc.net | udp |
| US | 8.8.8.8:53 | uajbrwn.net | udp |
| US | 8.8.8.8:53 | jkjhrl.net | udp |
| US | 8.8.8.8:53 | giekgyskeiik.org | udp |
| US | 8.8.8.8:53 | njeaxgj.com | udp |
| US | 8.8.8.8:53 | pqtersnsimr.com | udp |
| US | 8.8.8.8:53 | bcftiejofc.info | udp |
| US | 8.8.8.8:53 | rtexqs.info | udp |
| US | 8.8.8.8:53 | jtvmni.net | udp |
| US | 8.8.8.8:53 | rrtnzgwg.net | udp |
| US | 8.8.8.8:53 | picuugfkn.org | udp |
| US | 8.8.8.8:53 | bavppixu.net | udp |
| US | 8.8.8.8:53 | vghebmtvpp.net | udp |
| US | 8.8.8.8:53 | zhgukfzvhgjz.net | udp |
| US | 8.8.8.8:53 | fkgritslx.org | udp |
| US | 8.8.8.8:53 | zsbwjijte.org | udp |
| US | 8.8.8.8:53 | xkkaky.net | udp |
| US | 8.8.8.8:53 | jbjidebhygc.com | udp |
| US | 8.8.8.8:53 | ehcirpkaleny.net | udp |
| US | 8.8.8.8:53 | gsewky.org | udp |
| US | 8.8.8.8:53 | ptpwnlreeaxo.net | udp |
| US | 8.8.8.8:53 | rhqschl.net | udp |
| US | 8.8.8.8:53 | lokdonoiowja.net | udp |
| US | 8.8.8.8:53 | lgshyahb.info | udp |
| US | 8.8.8.8:53 | lspofiqoh.info | udp |
| US | 8.8.8.8:53 | kwiktxwyrq.net | udp |
| US | 8.8.8.8:53 | dcfynue.info | udp |
| IT | 94.156.55.38:21804 | tcp | |
| US | 8.8.8.8:53 | eeeiusoc.com | udp |
| US | 8.8.8.8:53 | pvfsjlm.com | udp |
| US | 8.8.8.8:53 | iwswskgy.com | udp |
| US | 8.8.8.8:53 | qmtlbxxqndnp.info | udp |
| US | 8.8.8.8:53 | flvrzqrixwn.com | udp |
| US | 8.8.8.8:53 | rmrmtwxdhon.org | udp |
| US | 8.8.8.8:53 | zbqtpeerkb.net | udp |
| US | 8.8.8.8:53 | rdspao.net | udp |
| US | 8.8.8.8:53 | oiwrgbffggbj.net | udp |
| US | 8.8.8.8:53 | nalgyej.com | udp |
| US | 8.8.8.8:53 | pwnibob.net | udp |
| US | 8.8.8.8:53 | tcrxsyddqetr.net | udp |
| US | 8.8.8.8:53 | prjdhr.info | udp |
| US | 8.8.8.8:53 | zuwrljtqss.net | udp |
| US | 8.8.8.8:53 | weskko.org | udp |
| US | 8.8.8.8:53 | cgkopug.net | udp |
| US | 8.8.8.8:53 | sswdsktxpmto.net | udp |
| US | 8.8.8.8:53 | swcwgygu.com | udp |
| US | 8.8.8.8:53 | vmeuscyo.info | udp |
| US | 8.8.8.8:53 | msaeugqyakco.org | udp |
| US | 8.8.8.8:53 | zheaujuvaw.info | udp |
| US | 8.8.8.8:53 | tmrxnmjrkb.net | udp |
| US | 8.8.8.8:53 | bzxwvcz.net | udp |
| US | 8.8.8.8:53 | qmukqqvdr.info | udp |
| US | 8.8.8.8:53 | aiuwdxfr.info | udp |
| US | 8.8.8.8:53 | uomieuwsgywa.com | udp |
| US | 8.8.8.8:53 | blyfxc.net | udp |
| US | 8.8.8.8:53 | nglqvkbmrpc.com | udp |
| US | 8.8.8.8:53 | wykuaqukww.com | udp |
| US | 8.8.8.8:53 | tovopylh.info | udp |
| US | 8.8.8.8:53 | huzalsfejhtj.info | udp |
| US | 8.8.8.8:53 | xmjmnczctgb.org | udp |
| US | 8.8.8.8:53 | fzkrxmam.info | udp |
| US | 8.8.8.8:53 | jexcvf.net | udp |
| US | 8.8.8.8:53 | rqvjhs.info | udp |
| US | 8.8.8.8:53 | fixijml.org | udp |
| US | 8.8.8.8:53 | mlvteyyqryl.net | udp |
| US | 8.8.8.8:53 | kpdlcwifpbmw.info | udp |
| US | 8.8.8.8:53 | pssmhkxobs.net | udp |
| US | 8.8.8.8:53 | feoyfok.net | udp |
| US | 8.8.8.8:53 | kqjntybbtrpw.net | udp |
| US | 8.8.8.8:53 | bvrlxiawb.net | udp |
| US | 8.8.8.8:53 | cgkzxwfvpo.info | udp |
| US | 8.8.8.8:53 | fgfskjpsu.org | udp |
| US | 8.8.8.8:53 | oekiooyw.com | udp |
| US | 8.8.8.8:53 | dppolyzety.net | udp |
| US | 8.8.8.8:53 | sqoyewoqyq.org | udp |
| US | 8.8.8.8:53 | dgpcbnishin.info | udp |
| US | 8.8.8.8:53 | bujydax.net | udp |
| US | 8.8.8.8:53 | hwhoegekf.info | udp |
| US | 8.8.8.8:53 | eupocuxef.info | udp |
| US | 8.8.8.8:53 | xspbrazfb.info | udp |
| US | 8.8.8.8:53 | yjvsdsxby.info | udp |
| US | 8.8.8.8:53 | nzllvjpbyjf.org | udp |
| US | 8.8.8.8:53 | ndxwfoyovsw.net | udp |
| US | 8.8.8.8:53 | frcuzznrrcgk.net | udp |
| US | 8.8.8.8:53 | msoiygcw.org | udp |
| US | 8.8.8.8:53 | ejdqzdt.net | udp |
| US | 8.8.8.8:53 | wovogxqadgdb.net | udp |
| US | 8.8.8.8:53 | oisuhv.net | udp |
| US | 8.8.8.8:53 | jntxuexoq.net | udp |
| US | 8.8.8.8:53 | jongxr.net | udp |
| US | 8.8.8.8:53 | fagqrg.info | udp |
| US | 8.8.8.8:53 | awtrjqbmv.net | udp |
| RU | 178.141.101.119:15967 | tcp | |
| US | 8.8.8.8:53 | gleinpuy.net | udp |
| US | 8.8.8.8:53 | kqkmyqwqyo.com | udp |
| US | 8.8.8.8:53 | nrbzxsdkb.net | udp |
| US | 8.8.8.8:53 | wosztnnayzfe.info | udp |
| US | 8.8.8.8:53 | ejpdqikairvo.info | udp |
| US | 8.8.8.8:53 | iogglwzwxzfc.info | udp |
| US | 8.8.8.8:53 | xeccvoazm.info | udp |
| US | 8.8.8.8:53 | pentxdhzn.info | udp |
| US | 8.8.8.8:53 | ssgqsckw.com | udp |
| US | 8.8.8.8:53 | yqwpsyrabee.net | udp |
| US | 8.8.8.8:53 | sirqxczym.info | udp |
| US | 8.8.8.8:53 | cxritgbkwiqj.net | udp |
| US | 8.8.8.8:53 | taeqtut.net | udp |
| US | 8.8.8.8:53 | ldjcwspir.com | udp |
| US | 8.8.8.8:53 | xflrdxdu.net | udp |
| US | 8.8.8.8:53 | usmsyz.net | udp |
| US | 8.8.8.8:53 | yabgjuiyvpj.net | udp |
| US | 8.8.8.8:53 | brlysmdo.info | udp |
| US | 8.8.8.8:53 | qntyzubcyqj.info | udp |
| US | 8.8.8.8:53 | yqtafgfohsp.net | udp |
| US | 8.8.8.8:53 | vvhslcbmhml.net | udp |
| US | 8.8.8.8:53 | sqcowwkqii.com | udp |
| US | 8.8.8.8:53 | okuwss.org | udp |
| US | 8.8.8.8:53 | nhmcqarsdy.info | udp |
| US | 8.8.8.8:53 | qmlwvkvsw.info | udp |
| US | 8.8.8.8:53 | ikvohllsnz.info | udp |
| US | 8.8.8.8:53 | gacwyuim.org | udp |
| US | 8.8.8.8:53 | tzdprovsrdfa.info | udp |
| US | 8.8.8.8:53 | nrpqjt.info | udp |
| US | 8.8.8.8:53 | dzhqvekq.info | udp |
| US | 8.8.8.8:53 | ihisbvuerta.net | udp |
| US | 8.8.8.8:53 | sqiiuwicqi.org | udp |
| US | 8.8.8.8:53 | gimcimyqsksa.com | udp |
| US | 8.8.8.8:53 | lkngjoezjnq.com | udp |
| US | 8.8.8.8:53 | hbriaqnpwk.info | udp |
| US | 8.8.8.8:53 | lrzbvgn.com | udp |
| US | 8.8.8.8:53 | bciekpgvcwka.info | udp |
| US | 8.8.8.8:53 | qrigmstjehdb.info | udp |
| US | 8.8.8.8:53 | amscyc.org | udp |
| US | 8.8.8.8:53 | layorkz.net | udp |
| US | 8.8.8.8:53 | qyoumo.com | udp |
| US | 8.8.8.8:53 | hopwceyt.net | udp |
| US | 8.8.8.8:53 | pcnsjtfiz.info | udp |
| US | 8.8.8.8:53 | ppssblfdspeu.info | udp |
| US | 8.8.8.8:53 | liqyaygivoq.com | udp |
| US | 8.8.8.8:53 | xenuqwz.net | udp |
| US | 8.8.8.8:53 | qokoyy.org | udp |
| US | 8.8.8.8:53 | vexvqxpgxrlm.info | udp |
| US | 8.8.8.8:53 | xbfhtyff.info | udp |
| US | 8.8.8.8:53 | ikxqnsryq.info | udp |
| US | 8.8.8.8:53 | hrhijke.com | udp |
| US | 8.8.8.8:53 | oeztozdsrt.info | udp |
| US | 8.8.8.8:53 | lqwvin.net | udp |
| US | 8.8.8.8:53 | vsswekgnat.info | udp |
| US | 8.8.8.8:53 | obfxxjjqiaia.net | udp |
| US | 8.8.8.8:53 | ywqqos.org | udp |
| US | 8.8.8.8:53 | tcherndubeb.info | udp |
| US | 8.8.8.8:53 | qeeouymq.com | udp |
| BR | 189.46.206.247:17864 | tcp | |
| US | 8.8.8.8:53 | gyuuym.org | udp |
| DE | 85.214.228.140:80 | gyuuym.org | tcp |
| US | 8.8.8.8:53 | ssiimwmcko.com | udp |
| US | 8.8.8.8:53 | lrjacuwrec.info | udp |
| US | 8.8.8.8:53 | cyhijmkwvkn.net | udp |
| SG | 18.142.91.111:80 | unxfuild.info | tcp |
| US | 8.8.8.8:53 | lfyyrytldof.net | udp |
| US | 8.8.8.8:53 | zozjsjcyl.info | udp |
| US | 8.8.8.8:53 | qgmewaiqwgaw.org | udp |
| US | 8.8.8.8:53 | gmtydsfik.info | udp |
| US | 8.8.8.8:53 | hhlinqxejwm.info | udp |
| US | 8.8.8.8:53 | wvequyl.info | udp |
| US | 8.8.8.8:53 | ggoiukqgsikq.org | udp |
| US | 8.8.8.8:53 | kwhomglks.net | udp |
| US | 8.8.8.8:53 | ugunkjkf.info | udp |
| US | 8.8.8.8:53 | yblvedtkjiy.net | udp |
| US | 8.8.8.8:53 | udzdjiddn.net | udp |
| US | 8.8.8.8:53 | xzzpccnitzd.info | udp |
| US | 8.8.8.8:53 | chtiue.info | udp |
| US | 8.8.8.8:53 | ceqaqakqeo.com | udp |
| US | 8.8.8.8:53 | ygoukmwg.org | udp |
| US | 8.8.8.8:53 | optidunybos.net | udp |
| US | 8.8.8.8:53 | fepghqgqp.info | udp |
| US | 8.8.8.8:53 | syoaewaikmca.com | udp |
| US | 104.156.155.94:80 | cydlrge.info | tcp |
| US | 8.8.8.8:53 | hituvuhmwqr.info | udp |
| US | 8.8.8.8:53 | tglsjqboz.com | udp |
| US | 8.8.8.8:53 | fepsbiyyvsp.com | udp |
| US | 8.8.8.8:53 | tlpxkn.info | udp |
| US | 8.8.8.8:53 | cuckme.com | udp |
| NL | 86.105.245.69:80 | cuckme.com | tcp |
| US | 8.8.8.8:53 | rrimfjaicj.net | udp |
| US | 8.8.8.8:53 | iyouiqks.com | udp |
| US | 8.8.8.8:53 | ssvfqkmtrbdw.info | udp |
| US | 8.8.8.8:53 | mjotpzfbosdh.info | udp |
| US | 8.8.8.8:53 | sudefbv.info | udp |
| US | 8.8.8.8:53 | zyujoaplvqb.info | udp |
| US | 8.8.8.8:53 | kcikiif.net | udp |
| US | 8.8.8.8:53 | iowqsakc.org | udp |
| US | 8.8.8.8:53 | uffczzl.net | udp |
| US | 8.8.8.8:53 | luvehemiri.info | udp |
| US | 8.8.8.8:53 | fayqjkmayud.net | udp |
| US | 8.8.8.8:53 | xiuqjgdc.net | udp |
| US | 8.8.8.8:53 | uulrzujyfmp.net | udp |
| US | 8.8.8.8:53 | lalckpw.org | udp |
| US | 8.8.8.8:53 | dyogdon.org | udp |
| US | 8.8.8.8:53 | hgoohibop.org | udp |
| US | 8.8.8.8:53 | ywksmy.org | udp |
| US | 8.8.8.8:53 | uohesoour.info | udp |
| US | 8.8.8.8:53 | hmfurcniz.info | udp |
| US | 8.8.8.8:53 | ajekzgg.net | udp |
| US | 8.8.8.8:53 | szllrp.info | udp |
| US | 8.8.8.8:53 | mxqraqhh.net | udp |
| US | 8.8.8.8:53 | ddpobim.org | udp |
| US | 8.8.8.8:53 | ortkfcboxkb.net | udp |
| US | 8.8.8.8:53 | muwffpbyfkoa.info | udp |
| US | 8.8.8.8:53 | ewhqxezcwwc.net | udp |
| US | 8.8.8.8:53 | xezhmxnr.net | udp |
| US | 8.8.8.8:53 | yiayumwc.org | udp |
| US | 8.8.8.8:53 | xkzsryh.net | udp |
| PK | 111.119.166.95:30142 | tcp | |
| US | 8.8.8.8:53 | yoaoooewyeeo.com | udp |
| US | 8.8.8.8:53 | fgunse.net | udp |
| US | 8.8.8.8:53 | dsnljgyap.net | udp |
| US | 8.8.8.8:53 | qkdqcjlun.net | udp |
| US | 8.8.8.8:53 | uiqakyukogic.com | udp |
| US | 8.8.8.8:53 | mdhpuesj.net | udp |
| US | 8.8.8.8:53 | fjxgibeebn.info | udp |
Files
C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe
| MD5 | 5203b6ea0901877fbf2d8d6f6d8d338e |
| SHA1 | c803e92561921b38abe13239c1fd85605b570936 |
| SHA256 | 0cc02d34d5fd4cf892fed282f98c1ad3e7dd6159a8877ae5c46d3f834ed36060 |
| SHA512 | d48a41b4fc4c38a6473f789c02918fb7353a4b4199768a3624f3b685d91d38519887a1ccd3616e0d2b079a346afaec5a0f2ef2c46d72d3097ef561cedb476471 |
C:\Windows\SysWOW64\iiascculxcjncrbbjc.exe
| MD5 | ba533ed647781b66a16904d7c4224982 |
| SHA1 | b066d05818ed3d018f37e96181e483b4db6d044a |
| SHA256 | a667e8a91cbf3fb5b36ba4f31982e8315cd391968abb73bc038b4398b2693ffb |
| SHA512 | e63ca8095183da04fea8f3ddef58b4aa852ca27b5ad18a38e697b94de45331e1f8a13351838936eefe6127e17e02bf221c0d7c71f3c747665770baf36f842f1f |
C:\Users\Admin\AppData\Local\Temp\guages.exe
| MD5 | 0d0b6b40d1b2b9fb6a91ccf63eb3bd77 |
| SHA1 | b52f60a77d297cc93a91a9b3ad1369e96e1ea43d |
| SHA256 | 41845fd8f622aef349c88ba1e3610233a42da5c08a86582935c1e04e2cdf1a2e |
| SHA512 | 16cee35366e3f5aa402d741fa4e9959b3e916d9972509e829772c1b3b6d6e648f2d4cfb820a80a87dea616a5ac21ed782cdc56830fe7cae0e657219bf6d18176 |
C:\Users\Admin\AppData\Local\xghibkllgukxvtmvmoxyzsb.cxl
| MD5 | cfbf71ab2d5207867fa58ae0874c0e43 |
| SHA1 | a7db96185bcabb4c1535812b4acdc3569b4fed42 |
| SHA256 | 3a8eab715c7af0efc58bc3b03091de7ea0aac5035ffba68a295fb7131ea49443 |
| SHA512 | e17c4d51aa52c6cff1e6a93f360aca73935955b2103b0c9bc6f630b33e40742c5d98b2b26d9a28e8021f9ae29606ef214a62c7a3ff4cbc520df94accd843bb1b |
C:\Program Files (x86)\xghibkllgukxvtmvmoxyzsb.cxl
| MD5 | 4306433f2ba2ea120ce6f8a0b1bfaf47 |
| SHA1 | c073f049e4e8943984d7569487d83254e94882e5 |
| SHA256 | f1726b2bbdf0cc3d1eb79b1aa3de8237d173aabf8c85095160e5e0a017705648 |
| SHA512 | 5ebddf3d4fb1d5b5ca2dde7a908b89dd12a363161c46dbae5a7a32f05d53c01aa73ca8fd2ef7e98d511424f10e47ea0dcbf6b6d953f04067ed73c4a28d642735 |
C:\Users\Admin\AppData\Local\keqcgamxdcdbktxrtgamycwitzyzxgptnp.wiu
| MD5 | c359550469c968556336b384144fb821 |
| SHA1 | 3cc228ccc25a54fae1f4051d155671b98c799714 |
| SHA256 | bc7a812073631b9db026679f50535f5abffda18a7d36e33a5d49d271edde3bc4 |
| SHA512 | 737d93297f7181b4b58894750477d3e7fa283e6f53ea7dd54bfdf6746d33bd608a471e4b29441fd2ddfd1d9dcb82635353c369f2abd8bb4faecdbaf0d51be4cd |
C:\Users\Admin\AppData\Local\xghibkllgukxvtmvmoxyzsb.cxl
| MD5 | 85110af40139376460d5759ceac2df16 |
| SHA1 | 5130770ddd3abe055cc4c5329e487aeddb004aed |
| SHA256 | 4fea2596d74b3394935677e42e0c7bfad75e6cf400a2256495c0beab02acce27 |
| SHA512 | 7603381d03e950544485abc11f5f8e52beebbd064b4b7711cf0b26466a4e2a1c14867a6ab4e616a503fb85432472a5cc504bcd37dc09cf0b8a27d4aa4c41c7de |
C:\Users\Admin\AppData\Local\xghibkllgukxvtmvmoxyzsb.cxl
| MD5 | 65e864ebaca1a407fcec264f97e9ae34 |
| SHA1 | 50d3f693c267d7f74b9b7ed5f7b50180920dbcb0 |
| SHA256 | 5278c2d86aaa91fea2ebbc9f41831f190b2bd819d550ff915502dc01f06f0beb |
| SHA512 | 64efcf2cb251c70dd1343219e12ad73f1e443366555dd632966b6240128715755a67cae0683f4ad2d0b49e5da50f5d559e0a1f0a5b0ec26d457195749ef25a62 |
C:\Users\Admin\AppData\Local\xghibkllgukxvtmvmoxyzsb.cxl
| MD5 | 785a875e114be1e7b9c57f89244da302 |
| SHA1 | 0e6521d97b4c898ed22cfac05c7c13ce7b8ad87b |
| SHA256 | 82704709a1fe6ac5a598ce4d8ea51755ccd909029522b4f04f26dfb32abfd18a |
| SHA512 | becdb3d8654ddbec2021511ceb70e3b1273ba07509a47522d4bfc737583a0ae6872f410f33d0db3f4ee098b226d9f23bb5e9c7f9adaa5a9aaaf67289b745e19d |
C:\Program Files (x86)\xghibkllgukxvtmvmoxyzsb.cxl
| MD5 | 133967f102e4c644ee575e8c865cb7c9 |
| SHA1 | 777ad1e4cd48df313af16dcc02cd90707111be63 |
| SHA256 | 665e3843ea518242514a2cfa0c584dbebb026954fddd96e4e54fc88205c8d31b |
| SHA512 | 19bf5846564135197fb5b51c4c2993cf417cffdf0b6e2d678a8854ea6e6f97902b004f54497f9c360bc054c2538ca0c1a20dc21b51e8ae68da6c60a004fb491b |
C:\Program Files (x86)\xghibkllgukxvtmvmoxyzsb.cxl
| MD5 | ea367de6cf3becc2b2fbdb0568bdb0b4 |
| SHA1 | 85d09e66c7c763837b3b931931d7d5b1970a48a8 |
| SHA256 | 16e1bc075ec3e0e7c5bb58a13c1929462f6775fe85296993d7d30ee4f0cf2257 |
| SHA512 | a6622b0218221fbfd55c2f8d09953a75aac8131956da958ec91e29566ffb46377b00bec034a3025b45c783975a7a5ecaf6a09bc9f282753e1131c0a81dc8d7ea |
Analysis: behavioral2
Detonation Overview
Submitted
2025-04-17 16:51
Reported
2025-04-17 16:54
Platform
win11-20250410-en
Max time kernel
1s
Max time network
157s
Command Line
Signatures
Pykspa
Pykspa family
Detect Pykspa worm
| Description | Indicator | Process | Target |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
Looks up external IP address via web service
| Description | Indicator | Process | Target |
| N/A | whatismyipaddress.com | N/A | N/A |
| N/A | whatismyip.everdot.org | N/A | N/A |
| N/A | www.whatismyip.ca | N/A | N/A |
| N/A | www.showmyipaddress.com | N/A | N/A |
System Location Discovery: System Language Discovery
| Description | Indicator | Process | Target |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_ba533ed647781b66a16904d7c4224982.exe | N/A |
Suspicious behavior: EnumeratesProcesses
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_ba533ed647781b66a16904d7c4224982.exe | N/A |
| N/A | N/A | C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_ba533ed647781b66a16904d7c4224982.exe | N/A |
Processes
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_ba533ed647781b66a16904d7c4224982.exe
"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_ba533ed647781b66a16904d7c4224982.exe"
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\jaffacakes118_ba533ed647781b66a16904d7c4224982.exe*"
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c aykepoywgzavoptln.exe
C:\Windows\aykepoywgzavoptln.exe
aykepoywgzavoptln.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c jivqccnmxrtpjlqjmg.exe .
C:\Windows\jivqccnmxrtpjlqjmg.exe
jivqccnmxrtpjlqjmg.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\jivqccnmxrtpjlqjmg.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c aykepoywgzavoptln.exe
C:\Windows\aykepoywgzavoptln.exe
aykepoywgzavoptln.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe .
C:\Windows\tqbueclirjjdvvyp.exe
tqbueclirjjdvvyp.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe
C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe
C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\tqbueclirjjdvvyp.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .
C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe
C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\uuierseeqlolgjpjniy.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe
C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe
C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .
C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe
C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\uuierseeqlolgjpjniy.exe*."
C:\Users\Admin\AppData\Local\Temp\uikuvkk.exe
"C:\Users\Admin\AppData\Local\Temp\uikuvkk.exe" "-c:\users\admin\appdata\local\temp\jaffacakes118_ba533ed647781b66a16904d7c4224982.exe"
C:\Users\Admin\AppData\Local\Temp\uikuvkk.exe
"C:\Users\Admin\AppData\Local\Temp\uikuvkk.exe" "-c:\users\admin\appdata\local\temp\jaffacakes118_ba533ed647781b66a16904d7c4224982.exe"
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe
C:\Windows\hixuikxylhljfjqlqmde.exe
hixuikxylhljfjqlqmde.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe
C:\Windows\wyombesuifkjgltpvskmc.exe
wyombesuifkjgltpvskmc.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe .
C:\Windows\hixuikxylhljfjqlqmde.exe
hixuikxylhljfjqlqmde.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe .
C:\Windows\tqbueclirjjdvvyp.exe
tqbueclirjjdvvyp.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\hixuikxylhljfjqlqmde.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\tqbueclirjjdvvyp.exe*."
C:\Windows\tqbueclirjjdvvyp.exe
tqbueclirjjdvvyp.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .
C:\Windows\uuierseeqlolgjpjniy.exe
uuierseeqlolgjpjniy.exe .
C:\Windows\tqbueclirjjdvvyp.exe
tqbueclirjjdvvyp.exe
C:\Windows\wyombesuifkjgltpvskmc.exe
wyombesuifkjgltpvskmc.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe
C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .
C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\uuierseeqlolgjpjniy.exe*."
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\wyombesuifkjgltpvskmc.exe*."
C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe
C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe*."
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\aykepoywgzavoptln.exe*."
C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe
C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe*."
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c jivqccnmxrtpjlqjmg.exe
C:\Windows\jivqccnmxrtpjlqjmg.exe
jivqccnmxrtpjlqjmg.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe .
C:\Windows\tqbueclirjjdvvyp.exe
tqbueclirjjdvvyp.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\tqbueclirjjdvvyp.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe
C:\Windows\uuierseeqlolgjpjniy.exe
uuierseeqlolgjpjniy.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe .
C:\Windows\uuierseeqlolgjpjniy.exe
uuierseeqlolgjpjniy.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\uuierseeqlolgjpjniy.exe*."
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe .
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\jivqccnmxrtpjlqjmg.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .
C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe
C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\hixuikxylhljfjqlqmde.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe
C:\Windows\uuierseeqlolgjpjniy.exe
uuierseeqlolgjpjniy.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe
C:\Windows\uuierseeqlolgjpjniy.exe
uuierseeqlolgjpjniy.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c jivqccnmxrtpjlqjmg.exe .
C:\Windows\jivqccnmxrtpjlqjmg.exe
jivqccnmxrtpjlqjmg.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\jivqccnmxrtpjlqjmg.exe*."
C:\Windows\wyombesuifkjgltpvskmc.exe
wyombesuifkjgltpvskmc.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c aykepoywgzavoptln.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\wyombesuifkjgltpvskmc.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe
C:\Windows\aykepoywgzavoptln.exe
aykepoywgzavoptln.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe
C:\Windows\wyombesuifkjgltpvskmc.exe
wyombesuifkjgltpvskmc.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Windows\uuierseeqlolgjpjniy.exe
uuierseeqlolgjpjniy.exe
C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe
C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\wyombesuifkjgltpvskmc.exe*."
C:\Windows\wyombesuifkjgltpvskmc.exe
wyombesuifkjgltpvskmc.exe .
C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe
C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .
C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Windows\uuierseeqlolgjpjniy.exe
uuierseeqlolgjpjniy.exe
C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe
C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\wyombesuifkjgltpvskmc.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\uuierseeqlolgjpjniy.exe*."
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\uuierseeqlolgjpjniy.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c aykepoywgzavoptln.exe .
C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe
C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe
C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe
C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .
C:\Windows\wyombesuifkjgltpvskmc.exe
wyombesuifkjgltpvskmc.exe .
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .
C:\Windows\aykepoywgzavoptln.exe
aykepoywgzavoptln.exe .
C:\Windows\tqbueclirjjdvvyp.exe
tqbueclirjjdvvyp.exe
C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe
C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .
C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe
C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\hixuikxylhljfjqlqmde.exe*."
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\wyombesuifkjgltpvskmc.exe*."
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\aykepoywgzavoptln.exe*."
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\wyombesuifkjgltpvskmc.exe*."
C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe
C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe
C:\Windows\tqbueclirjjdvvyp.exe
tqbueclirjjdvvyp.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe .
C:\Windows\uuierseeqlolgjpjniy.exe
uuierseeqlolgjpjniy.exe
C:\Windows\uuierseeqlolgjpjniy.exe
uuierseeqlolgjpjniy.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\uuierseeqlolgjpjniy.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe
C:\Windows\wyombesuifkjgltpvskmc.exe
wyombesuifkjgltpvskmc.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe .
C:\Windows\tqbueclirjjdvvyp.exe
tqbueclirjjdvvyp.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\wyombesuifkjgltpvskmc.exe*."
C:\Windows\tqbueclirjjdvvyp.exe
tqbueclirjjdvvyp.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe
C:\Windows\uuierseeqlolgjpjniy.exe
uuierseeqlolgjpjniy.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe .
C:\Windows\hixuikxylhljfjqlqmde.exe
hixuikxylhljfjqlqmde.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\tqbueclirjjdvvyp.exe*."
C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe .
C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe
C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c jivqccnmxrtpjlqjmg.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\hixuikxylhljfjqlqmde.exe*."
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\aykepoywgzavoptln.exe*."
C:\Windows\wyombesuifkjgltpvskmc.exe
wyombesuifkjgltpvskmc.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe .
C:\Windows\jivqccnmxrtpjlqjmg.exe
jivqccnmxrtpjlqjmg.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\jivqccnmxrtpjlqjmg.exe*."
C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe
C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe .
C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Windows\hixuikxylhljfjqlqmde.exe
hixuikxylhljfjqlqmde.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\jivqccnmxrtpjlqjmg.exe*."
C:\Windows\wyombesuifkjgltpvskmc.exe
wyombesuifkjgltpvskmc.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\aykepoywgzavoptln.exe*."
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\hixuikxylhljfjqlqmde.exe*."
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\wyombesuifkjgltpvskmc.exe*."
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\jivqccnmxrtpjlqjmg.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe
C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe
C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\wyombesuifkjgltpvskmc.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe
C:\Windows\wyombesuifkjgltpvskmc.exe
wyombesuifkjgltpvskmc.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c aykepoywgzavoptln.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe .
C:\Windows\aykepoywgzavoptln.exe
aykepoywgzavoptln.exe
C:\Windows\uuierseeqlolgjpjniy.exe
uuierseeqlolgjpjniy.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\uuierseeqlolgjpjniy.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe
C:\Windows\uuierseeqlolgjpjniy.exe
uuierseeqlolgjpjniy.exe .
C:\Windows\tqbueclirjjdvvyp.exe
tqbueclirjjdvvyp.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\uuierseeqlolgjpjniy.exe*."
C:\Windows\wyombesuifkjgltpvskmc.exe
wyombesuifkjgltpvskmc.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c jivqccnmxrtpjlqjmg.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\wyombesuifkjgltpvskmc.exe*."
C:\Windows\jivqccnmxrtpjlqjmg.exe
jivqccnmxrtpjlqjmg.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe
C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe
C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .
C:\Windows\tqbueclirjjdvvyp.exe
tqbueclirjjdvvyp.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c aykepoywgzavoptln.exe .
C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe
C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe
C:\Windows\uuierseeqlolgjpjniy.exe
uuierseeqlolgjpjniy.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\uuierseeqlolgjpjniy.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\tqbueclirjjdvvyp.exe*."
C:\Windows\aykepoywgzavoptln.exe
aykepoywgzavoptln.exe .
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .
C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe
C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c aykepoywgzavoptln.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c aykepoywgzavoptln.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\aykepoywgzavoptln.exe*."
C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe
C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\wyombesuifkjgltpvskmc.exe*."
C:\Windows\aykepoywgzavoptln.exe
aykepoywgzavoptln.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe .
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Windows\aykepoywgzavoptln.exe
aykepoywgzavoptln.exe .
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .
C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe
C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\hixuikxylhljfjqlqmde.exe*."
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\aykepoywgzavoptln.exe*."
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\wyombesuifkjgltpvskmc.exe*."
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\jivqccnmxrtpjlqjmg.exe*."
C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe
C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\wyombesuifkjgltpvskmc.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe
C:\Windows\wyombesuifkjgltpvskmc.exe
wyombesuifkjgltpvskmc.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe .
C:\Windows\tqbueclirjjdvvyp.exe
tqbueclirjjdvvyp.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe
C:\Windows\hixuikxylhljfjqlqmde.exe
hixuikxylhljfjqlqmde.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\tqbueclirjjdvvyp.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c jivqccnmxrtpjlqjmg.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe .
C:\Windows\jivqccnmxrtpjlqjmg.exe
jivqccnmxrtpjlqjmg.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c jivqccnmxrtpjlqjmg.exe .
C:\Windows\hixuikxylhljfjqlqmde.exe
hixuikxylhljfjqlqmde.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Windows\jivqccnmxrtpjlqjmg.exe
jivqccnmxrtpjlqjmg.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c aykepoywgzavoptln.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c aykepoywgzavoptln.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\hixuikxylhljfjqlqmde.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\jivqccnmxrtpjlqjmg.exe*."
C:\Windows\aykepoywgzavoptln.exe
aykepoywgzavoptln.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe
C:\Windows\aykepoywgzavoptln.exe
aykepoywgzavoptln.exe .
C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe
C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c jivqccnmxrtpjlqjmg.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .
C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe
C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\aykepoywgzavoptln.exe*."
C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe
C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\hixuikxylhljfjqlqmde.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c aykepoywgzavoptln.exe .
C:\Windows\jivqccnmxrtpjlqjmg.exe
jivqccnmxrtpjlqjmg.exe .
C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe
C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .
C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe
C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\hixuikxylhljfjqlqmde.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\jivqccnmxrtpjlqjmg.exe*."
C:\Windows\aykepoywgzavoptln.exe
aykepoywgzavoptln.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\uuierseeqlolgjpjniy.exe*."
C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .
C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe
C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\aykepoywgzavoptln.exe*."
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\wyombesuifkjgltpvskmc.exe*."
C:\Windows\tqbueclirjjdvvyp.exe
tqbueclirjjdvvyp.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe*."
C:\Windows\tqbueclirjjdvvyp.exe
tqbueclirjjdvvyp.exe
C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .
C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe
C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe
C:\Windows\uuierseeqlolgjpjniy.exe
uuierseeqlolgjpjniy.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe .
C:\Windows\uuierseeqlolgjpjniy.exe
uuierseeqlolgjpjniy.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\uuierseeqlolgjpjniy.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c jivqccnmxrtpjlqjmg.exe
C:\Windows\uuierseeqlolgjpjniy.exe
uuierseeqlolgjpjniy.exe
C:\Windows\jivqccnmxrtpjlqjmg.exe
jivqccnmxrtpjlqjmg.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c aykepoywgzavoptln.exe .
C:\Windows\aykepoywgzavoptln.exe
aykepoywgzavoptln.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\aykepoywgzavoptln.exe*."
C:\Windows\hixuikxylhljfjqlqmde.exe
hixuikxylhljfjqlqmde.exe .
C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe .
C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c aykepoywgzavoptln.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\hixuikxylhljfjqlqmde.exe*."
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\aykepoywgzavoptln.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe .
C:\Windows\hixuikxylhljfjqlqmde.exe
hixuikxylhljfjqlqmde.exe
C:\Windows\aykepoywgzavoptln.exe
aykepoywgzavoptln.exe
C:\Windows\hixuikxylhljfjqlqmde.exe
hixuikxylhljfjqlqmde.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe
C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\hixuikxylhljfjqlqmde.exe*."
C:\Windows\wyombesuifkjgltpvskmc.exe
wyombesuifkjgltpvskmc.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .
C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe
C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c jivqccnmxrtpjlqjmg.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\wyombesuifkjgltpvskmc.exe*."
C:\Windows\uuierseeqlolgjpjniy.exe
uuierseeqlolgjpjniy.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\wyombesuifkjgltpvskmc.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe*."
C:\Windows\jivqccnmxrtpjlqjmg.exe
jivqccnmxrtpjlqjmg.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\jivqccnmxrtpjlqjmg.exe*."
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe .
C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe
C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\jivqccnmxrtpjlqjmg.exe*."
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\hixuikxylhljfjqlqmde.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .
C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe
C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\hixuikxylhljfjqlqmde.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c jivqccnmxrtpjlqjmg.exe
C:\Windows\jivqccnmxrtpjlqjmg.exe
jivqccnmxrtpjlqjmg.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe .
C:\Windows\wyombesuifkjgltpvskmc.exe
wyombesuifkjgltpvskmc.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\wyombesuifkjgltpvskmc.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe
C:\Windows\wyombesuifkjgltpvskmc.exe
wyombesuifkjgltpvskmc.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe .
C:\Windows\hixuikxylhljfjqlqmde.exe
hixuikxylhljfjqlqmde.exe
C:\Windows\wyombesuifkjgltpvskmc.exe
wyombesuifkjgltpvskmc.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\wyombesuifkjgltpvskmc.exe*."
C:\Windows\hixuikxylhljfjqlqmde.exe
hixuikxylhljfjqlqmde.exe .
C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe
C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c aykepoywgzavoptln.exe
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe .
C:\Windows\hixuikxylhljfjqlqmde.exe
hixuikxylhljfjqlqmde.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\hixuikxylhljfjqlqmde.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe .
C:\Windows\aykepoywgzavoptln.exe
aykepoywgzavoptln.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\wyombesuifkjgltpvskmc.exe*."
C:\Windows\uuierseeqlolgjpjniy.exe
uuierseeqlolgjpjniy.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe .
C:\Windows\uuierseeqlolgjpjniy.exe
uuierseeqlolgjpjniy.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\uuierseeqlolgjpjniy.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .
C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe .
C:\Windows\tqbueclirjjdvvyp.exe
tqbueclirjjdvvyp.exe
C:\Windows\tqbueclirjjdvvyp.exe
tqbueclirjjdvvyp.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\uuierseeqlolgjpjniy.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe
C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe
C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .
C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe
C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\aykepoywgzavoptln.exe*."
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\jivqccnmxrtpjlqjmg.exe*."
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\tqbueclirjjdvvyp.exe*."
C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe
C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .
C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe
C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe
C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe
C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe*."
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\hixuikxylhljfjqlqmde.exe*."
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c aykepoywgzavoptln.exe
C:\Windows\aykepoywgzavoptln.exe
aykepoywgzavoptln.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe .
C:\Windows\uuierseeqlolgjpjniy.exe
uuierseeqlolgjpjniy.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\uuierseeqlolgjpjniy.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe
C:\Windows\wyombesuifkjgltpvskmc.exe
wyombesuifkjgltpvskmc.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe .
C:\Windows\hixuikxylhljfjqlqmde.exe
hixuikxylhljfjqlqmde.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe
C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe
C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\hixuikxylhljfjqlqmde.exe*."
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\wyombesuifkjgltpvskmc.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .
C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe
C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\uuierseeqlolgjpjniy.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe
C:\Windows\uuierseeqlolgjpjniy.exe
uuierseeqlolgjpjniy.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe .
C:\Windows\tqbueclirjjdvvyp.exe
tqbueclirjjdvvyp.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\tqbueclirjjdvvyp.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe
C:\Windows\tqbueclirjjdvvyp.exe
tqbueclirjjdvvyp.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe .
C:\Windows\wyombesuifkjgltpvskmc.exe
wyombesuifkjgltpvskmc.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\wyombesuifkjgltpvskmc.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .
C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Windows\wyombesuifkjgltpvskmc.exe
wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe
C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c jivqccnmxrtpjlqjmg.exe
C:\Windows\hixuikxylhljfjqlqmde.exe
hixuikxylhljfjqlqmde.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe*."
C:\Windows\jivqccnmxrtpjlqjmg.exe
jivqccnmxrtpjlqjmg.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\hixuikxylhljfjqlqmde.exe*."
C:\Windows\tqbueclirjjdvvyp.exe
tqbueclirjjdvvyp.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c aykepoywgzavoptln.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .
C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe
C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe
C:\Windows\hixuikxylhljfjqlqmde.exe
hixuikxylhljfjqlqmde.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe
C:\Windows\aykepoywgzavoptln.exe
aykepoywgzavoptln.exe .
C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe
C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\hixuikxylhljfjqlqmde.exe*."
C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\aykepoywgzavoptln.exe*."
C:\Windows\hixuikxylhljfjqlqmde.exe
hixuikxylhljfjqlqmde.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .
C:\Windows\wyombesuifkjgltpvskmc.exe
wyombesuifkjgltpvskmc.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\hixuikxylhljfjqlqmde.exe*."
C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe
C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe .
C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe
C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\wyombesuifkjgltpvskmc.exe*."
C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\uuierseeqlolgjpjniy.exe*."
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\hixuikxylhljfjqlqmde.exe*."
C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe
C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\jivqccnmxrtpjlqjmg.exe*."
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\jivqccnmxrtpjlqjmg.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c aykepoywgzavoptln.exe
C:\Windows\aykepoywgzavoptln.exe
aykepoywgzavoptln.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe .
C:\Windows\tqbueclirjjdvvyp.exe
tqbueclirjjdvvyp.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\tqbueclirjjdvvyp.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe
C:\Windows\tqbueclirjjdvvyp.exe
tqbueclirjjdvvyp.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe .
C:\Windows\tqbueclirjjdvvyp.exe
tqbueclirjjdvvyp.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\tqbueclirjjdvvyp.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .
C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe
C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\uuierseeqlolgjpjniy.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe
C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe
C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .
C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe
C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\uuierseeqlolgjpjniy.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c aykepoywgzavoptln.exe
C:\Windows\aykepoywgzavoptln.exe
aykepoywgzavoptln.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe .
C:\Windows\tqbueclirjjdvvyp.exe
tqbueclirjjdvvyp.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\tqbueclirjjdvvyp.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe
C:\Windows\wyombesuifkjgltpvskmc.exe
wyombesuifkjgltpvskmc.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe
C:\Windows\uuierseeqlolgjpjniy.exe
uuierseeqlolgjpjniy.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .
C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe
C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\uuierseeqlolgjpjniy.exe*."
C:\Windows\hixuikxylhljfjqlqmde.exe
hixuikxylhljfjqlqmde.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c jivqccnmxrtpjlqjmg.exe
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Windows\jivqccnmxrtpjlqjmg.exe
jivqccnmxrtpjlqjmg.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\wyombesuifkjgltpvskmc.exe*."
C:\Windows\tqbueclirjjdvvyp.exe
tqbueclirjjdvvyp.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe .
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c aykepoywgzavoptln.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe .
C:\Windows\uuierseeqlolgjpjniy.exe
uuierseeqlolgjpjniy.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c aykepoywgzavoptln.exe .
C:\Windows\uuierseeqlolgjpjniy.exe
uuierseeqlolgjpjniy.exe .
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe
C:\Windows\wyombesuifkjgltpvskmc.exe
wyombesuifkjgltpvskmc.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\tqbueclirjjdvvyp.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Windows\aykepoywgzavoptln.exe
aykepoywgzavoptln.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\aykepoywgzavoptln.exe*."
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\uuierseeqlolgjpjniy.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\wyombesuifkjgltpvskmc.exe*."
C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Windows\aykepoywgzavoptln.exe
aykepoywgzavoptln.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .
C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe
C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .
C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe
C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .
C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe
C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe .
C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe
C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe*."
C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe
C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\uuierseeqlolgjpjniy.exe*."
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\aykepoywgzavoptln.exe*."
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\jivqccnmxrtpjlqjmg.exe*."
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c jivqccnmxrtpjlqjmg.exe
C:\Windows\jivqccnmxrtpjlqjmg.exe
jivqccnmxrtpjlqjmg.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c jivqccnmxrtpjlqjmg.exe .
C:\Windows\jivqccnmxrtpjlqjmg.exe
jivqccnmxrtpjlqjmg.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tpftezlithjdvvyp.exe
C:\Windows\tpftezlithjdvvyp.exe
tpftezlithjdvvyp.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\jivqccnmxrtpjlqjmg.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c hhbtihxynfljfjqlqmdd.exe .
C:\Windows\tqbueclirjjdvvyp.exe
tqbueclirjjdvvyp.exe
C:\Windows\hhbtihxynfljfjqlqmdd.exe
hhbtihxynfljfjqlqmdd.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c jivqccnmxrtpjlqjmg.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c axodplywixavoptln.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .
C:\Windows\jivqccnmxrtpjlqjmg.exe
jivqccnmxrtpjlqjmg.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c jhzpcznmzptpjlqjmg.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\hhbtihxynfljfjqlqmdd.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hhbtihxynfljfjqlqmdd.exe
C:\Windows\axodplywixavoptln.exe
axodplywixavoptln.exe
C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe
C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\jivqccnmxrtpjlqjmg.exe*."
C:\Windows\jhzpcznmzptpjlqjmg.exe
jhzpcznmzptpjlqjmg.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\utmdrpeesjolgjpjniy.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\hhbtihxynfljfjqlqmdd.exe
C:\Users\Admin\AppData\Local\Temp\hhbtihxynfljfjqlqmdd.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\jhzpcznmzptpjlqjmg.exe*."
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\uuierseeqlolgjpjniy.exe*."
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\utmdrpeesjolgjpjniy.exe
C:\Users\Admin\AppData\Local\Temp\utmdrpeesjolgjpjniy.exe
C:\Users\Admin\AppData\Local\Temp\utmdrpeesjolgjpjniy.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jhzpcznmzptpjlqjmg.exe .
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\utmdrpeesjolgjpjniy.exe*."
C:\Users\Admin\AppData\Local\Temp\utmdrpeesjolgjpjniy.exe
C:\Users\Admin\AppData\Local\Temp\utmdrpeesjolgjpjniy.exe
C:\Users\Admin\AppData\Local\Temp\jhzpcznmzptpjlqjmg.exe
C:\Users\Admin\AppData\Local\Temp\jhzpcznmzptpjlqjmg.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\jivqccnmxrtpjlqjmg.exe*."
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\jhzpcznmzptpjlqjmg.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe
C:\Windows\wyombesuifkjgltpvskmc.exe
wyombesuifkjgltpvskmc.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe .
C:\Windows\tqbueclirjjdvvyp.exe
tqbueclirjjdvvyp.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\tqbueclirjjdvvyp.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c jivqccnmxrtpjlqjmg.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\wyombesuifkjgltpvskmc.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe
C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe
C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe
C:\Windows\hixuikxylhljfjqlqmde.exe
hixuikxylhljfjqlqmde.exe
C:\Windows\jivqccnmxrtpjlqjmg.exe
jivqccnmxrtpjlqjmg.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .
C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe
"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"
C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe
"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\jivqccnmxrtpjlqjmg.exe*."
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\wyombesuifkjgltpvskmc.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe
C:\Windows\hixuikxylhljfjqlqmde.exe
hixuikxylhljfjqlqmde.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c wxslbbsukdkjgltpvsklg.exe
C:\Windows\wxslbbsukdkjgltpvsklg.exe
wxslbbsukdkjgltpvsklg.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c aykepoywgzavoptln.exe .
C:\Windows\aykepoywgzavoptln.exe
aykepoywgzavoptln.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c utmdrpeesjolgjpjniy.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\aykepoywgzavoptln.exe*."
C:\Windows\utmdrpeesjolgjpjniy.exe
utmdrpeesjolgjpjniy.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c aykepoywgzavoptln.exe
C:\Windows\aykepoywgzavoptln.exe
aykepoywgzavoptln.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\utmdrpeesjolgjpjniy.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tpftezlithjdvvyp.exe
C:\Windows\tpftezlithjdvvyp.exe
tpftezlithjdvvyp.exe
C:\Windows\wyombesuifkjgltpvskmc.exe
wyombesuifkjgltpvskmc.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c axodplywixavoptln.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\axodplywixavoptln.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .
C:\Windows\axodplywixavoptln.exe
axodplywixavoptln.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\wyombesuifkjgltpvskmc.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jhzpcznmzptpjlqjmg.exe .
C:\Users\Admin\AppData\Local\Temp\axodplywixavoptln.exe
C:\Users\Admin\AppData\Local\Temp\axodplywixavoptln.exe
C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe
C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .
C:\Users\Admin\AppData\Local\Temp\jhzpcznmzptpjlqjmg.exe
C:\Users\Admin\AppData\Local\Temp\jhzpcznmzptpjlqjmg.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\axodplywixavoptln.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\hixuikxylhljfjqlqmde.exe*."
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\jhzpcznmzptpjlqjmg.exe*."
C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe
C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\utmdrpeesjolgjpjniy.exe
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe
"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"
C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe
C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .
C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe
"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\axodplywixavoptln.exe .
C:\Users\Admin\AppData\Local\Temp\utmdrpeesjolgjpjniy.exe
C:\Users\Admin\AppData\Local\Temp\utmdrpeesjolgjpjniy.exe
C:\Users\Admin\AppData\Local\Temp\axodplywixavoptln.exe
C:\Users\Admin\AppData\Local\Temp\axodplywixavoptln.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe*."
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\axodplywixavoptln.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe
C:\Windows\hixuikxylhljfjqlqmde.exe
hixuikxylhljfjqlqmde.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe .
C:\Windows\uuierseeqlolgjpjniy.exe
uuierseeqlolgjpjniy.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\uuierseeqlolgjpjniy.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c aykepoywgzavoptln.exe
C:\Windows\aykepoywgzavoptln.exe
aykepoywgzavoptln.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe .
C:\Windows\wyombesuifkjgltpvskmc.exe
wyombesuifkjgltpvskmc.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\wyombesuifkjgltpvskmc.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe .
C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\aykepoywgzavoptln.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe .
C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe .
C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe
"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"
C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe
"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\aykepoywgzavoptln.exe*."
C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe
"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"
C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe
"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe
C:\Windows\uuierseeqlolgjpjniy.exe
uuierseeqlolgjpjniy.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe .
C:\Windows\wyombesuifkjgltpvskmc.exe
wyombesuifkjgltpvskmc.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\wyombesuifkjgltpvskmc.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe .
C:\Windows\hixuikxylhljfjqlqmde.exe
hixuikxylhljfjqlqmde.exe
C:\Windows\hixuikxylhljfjqlqmde.exe
hixuikxylhljfjqlqmde.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\hixuikxylhljfjqlqmde.exe*."
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\wyombesuifkjgltpvskmc.exe*."
C:\Windows\uuierseeqlolgjpjniy.exe
uuierseeqlolgjpjniy.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c aykepoywgzavoptln.exe
C:\Windows\aykepoywgzavoptln.exe
aykepoywgzavoptln.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c jivqccnmxrtpjlqjmg.exe .
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .
C:\Windows\jivqccnmxrtpjlqjmg.exe
jivqccnmxrtpjlqjmg.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe .
C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe
C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\jivqccnmxrtpjlqjmg.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe
C:\Windows\uuierseeqlolgjpjniy.exe
uuierseeqlolgjpjniy.exe .
C:\Windows\wyombesuifkjgltpvskmc.exe
wyombesuifkjgltpvskmc.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe .
C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe
"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"
C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe
"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\hixuikxylhljfjqlqmde.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe
C:\Windows\wyombesuifkjgltpvskmc.exe
wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\uuierseeqlolgjpjniy.exe*."
C:\Windows\tqbueclirjjdvvyp.exe
tqbueclirjjdvvyp.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .
C:\Windows\uuierseeqlolgjpjniy.exe
uuierseeqlolgjpjniy.exe .
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe .
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .
C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe
C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\tqbueclirjjdvvyp.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\uuierseeqlolgjpjniy.exe*."
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\jaffacakes118_ba533ed647781b66a16904d7c4224982.exe"
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\jivqccnmxrtpjlqjmg.exe*."
C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe
C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\wyombesuifkjgltpvskmc.exe*."
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .
C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe
C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\wyombesuifkjgltpvskmc.exe*."
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c jivqccnmxrtpjlqjmg.exe
C:\Windows\jivqccnmxrtpjlqjmg.exe
jivqccnmxrtpjlqjmg.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe .
C:\Windows\uuierseeqlolgjpjniy.exe
uuierseeqlolgjpjniy.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\uuierseeqlolgjpjniy.exe*."
C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe
"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"
C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe
"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c aykepoywgzavoptln.exe
C:\Windows\aykepoywgzavoptln.exe
aykepoywgzavoptln.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe .
C:\Windows\uuierseeqlolgjpjniy.exe
uuierseeqlolgjpjniy.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe
C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe
C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\uuierseeqlolgjpjniy.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe .
C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\aykepoywgzavoptln.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe .
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\jivqccnmxrtpjlqjmg.exe*."
C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe
"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"
C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe
"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"
C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe
"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"
C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe
"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c hhbtihxynfljfjqlqmdd.exe
C:\Windows\hhbtihxynfljfjqlqmdd.exe
hhbtihxynfljfjqlqmdd.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tpftezlithjdvvyp.exe .
C:\Windows\tpftezlithjdvvyp.exe
tpftezlithjdvvyp.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\tpftezlithjdvvyp.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tpftezlithjdvvyp.exe
C:\Windows\tpftezlithjdvvyp.exe
tpftezlithjdvvyp.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c axodplywixavoptln.exe .
C:\Windows\axodplywixavoptln.exe
axodplywixavoptln.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tpftezlithjdvvyp.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\axodplywixavoptln.exe*."
C:\Users\Admin\AppData\Local\Temp\tpftezlithjdvvyp.exe
C:\Users\Admin\AppData\Local\Temp\tpftezlithjdvvyp.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tpftezlithjdvvyp.exe .
C:\Users\Admin\AppData\Local\Temp\tpftezlithjdvvyp.exe
C:\Users\Admin\AppData\Local\Temp\tpftezlithjdvvyp.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c aykepoywgzavoptln.exe
C:\Windows\aykepoywgzavoptln.exe
aykepoywgzavoptln.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\tpftezlithjdvvyp.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe .
C:\Windows\hixuikxylhljfjqlqmde.exe
hixuikxylhljfjqlqmde.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hhbtihxynfljfjqlqmdd.exe
C:\Users\Admin\AppData\Local\Temp\hhbtihxynfljfjqlqmdd.exe
C:\Users\Admin\AppData\Local\Temp\hhbtihxynfljfjqlqmdd.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\hixuikxylhljfjqlqmde.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\axodplywixavoptln.exe .
C:\Users\Admin\AppData\Local\Temp\axodplywixavoptln.exe
C:\Users\Admin\AppData\Local\Temp\axodplywixavoptln.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe
C:\Windows\hixuikxylhljfjqlqmde.exe
hixuikxylhljfjqlqmde.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\axodplywixavoptln.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe .
C:\Windows\wyombesuifkjgltpvskmc.exe
wyombesuifkjgltpvskmc.exe .
C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe
"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"
C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe
"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\wyombesuifkjgltpvskmc.exe*."
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\wyombesuifkjgltpvskmc.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe
C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe
C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\wyombesuifkjgltpvskmc.exe*."
C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe
"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"
C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe
"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"
C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe
"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"
C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe
"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe
C:\Windows\hixuikxylhljfjqlqmde.exe
hixuikxylhljfjqlqmde.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe .
C:\Windows\tqbueclirjjdvvyp.exe
tqbueclirjjdvvyp.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\tqbueclirjjdvvyp.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe
C:\Windows\uuierseeqlolgjpjniy.exe
uuierseeqlolgjpjniy.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c jivqccnmxrtpjlqjmg.exe .
C:\Windows\jivqccnmxrtpjlqjmg.exe
jivqccnmxrtpjlqjmg.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\jivqccnmxrtpjlqjmg.exe*."
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .
C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe
C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe
C:\Windows\hixuikxylhljfjqlqmde.exe
hixuikxylhljfjqlqmde.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\uuierseeqlolgjpjniy.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe .
C:\Windows\tqbueclirjjdvvyp.exe
tqbueclirjjdvvyp.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\tqbueclirjjdvvyp.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe .
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe
C:\Windows\hixuikxylhljfjqlqmde.exe
hixuikxylhljfjqlqmde.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c jivqccnmxrtpjlqjmg.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\jivqccnmxrtpjlqjmg.exe*."
C:\Windows\uuierseeqlolgjpjniy.exe
uuierseeqlolgjpjniy.exe
C:\Windows\jivqccnmxrtpjlqjmg.exe
jivqccnmxrtpjlqjmg.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .
C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Windows\uuierseeqlolgjpjniy.exe
uuierseeqlolgjpjniy.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\jivqccnmxrtpjlqjmg.exe*."
C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe
C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe
C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe
"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\uuierseeqlolgjpjniy.exe*."
C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe
"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"
C:\Windows\hixuikxylhljfjqlqmde.exe
hixuikxylhljfjqlqmde.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\uuierseeqlolgjpjniy.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Windows\wyombesuifkjgltpvskmc.exe
wyombesuifkjgltpvskmc.exe .
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe .
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\wyombesuifkjgltpvskmc.exe*."
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe .
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\jivqccnmxrtpjlqjmg.exe*."
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\wyombesuifkjgltpvskmc.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .
C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe
C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\hixuikxylhljfjqlqmde.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe
C:\Windows\hixuikxylhljfjqlqmde.exe
hixuikxylhljfjqlqmde.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe .
C:\Windows\uuierseeqlolgjpjniy.exe
uuierseeqlolgjpjniy.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\uuierseeqlolgjpjniy.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c aykepoywgzavoptln.exe
C:\Windows\aykepoywgzavoptln.exe
aykepoywgzavoptln.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c jivqccnmxrtpjlqjmg.exe .
C:\Windows\jivqccnmxrtpjlqjmg.exe
jivqccnmxrtpjlqjmg.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\jivqccnmxrtpjlqjmg.exe*."
C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe
C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .
C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe
C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe*."
C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe
"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"
C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe
"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .
C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe
C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\uuierseeqlolgjpjniy.exe*."
C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe
"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"
C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe
"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"
C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe
"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"
C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe
"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tpftezlithjdvvyp.exe
C:\Windows\tpftezlithjdvvyp.exe
tpftezlithjdvvyp.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c axodplywixavoptln.exe .
C:\Windows\axodplywixavoptln.exe
axodplywixavoptln.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\axodplywixavoptln.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c axodplywixavoptln.exe
C:\Windows\axodplywixavoptln.exe
axodplywixavoptln.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c tpftezlithjdvvyp.exe .
C:\Windows\tpftezlithjdvvyp.exe
tpftezlithjdvvyp.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wxslbbsukdkjgltpvsklg.exe
C:\Users\Admin\AppData\Local\Temp\wxslbbsukdkjgltpvsklg.exe
C:\Users\Admin\AppData\Local\Temp\wxslbbsukdkjgltpvsklg.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\tpftezlithjdvvyp.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wxslbbsukdkjgltpvsklg.exe .
C:\Users\Admin\AppData\Local\Temp\wxslbbsukdkjgltpvsklg.exe
C:\Users\Admin\AppData\Local\Temp\wxslbbsukdkjgltpvsklg.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe
C:\Windows\hixuikxylhljfjqlqmde.exe
hixuikxylhljfjqlqmde.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\wxslbbsukdkjgltpvsklg.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe .
C:\Windows\uuierseeqlolgjpjniy.exe
uuierseeqlolgjpjniy.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hhbtihxynfljfjqlqmdd.exe
C:\Users\Admin\AppData\Local\Temp\hhbtihxynfljfjqlqmdd.exe
C:\Users\Admin\AppData\Local\Temp\hhbtihxynfljfjqlqmdd.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\uuierseeqlolgjpjniy.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hhbtihxynfljfjqlqmdd.exe .
C:\Users\Admin\AppData\Local\Temp\hhbtihxynfljfjqlqmdd.exe
C:\Users\Admin\AppData\Local\Temp\hhbtihxynfljfjqlqmdd.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe
C:\Windows\wyombesuifkjgltpvskmc.exe
wyombesuifkjgltpvskmc.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c jivqccnmxrtpjlqjmg.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\hhbtihxynfljfjqlqmdd.exe*."
C:\Windows\jivqccnmxrtpjlqjmg.exe
jivqccnmxrtpjlqjmg.exe .
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\jivqccnmxrtpjlqjmg.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .
C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe
C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .
C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe
"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"
C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe
"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\hixuikxylhljfjqlqmde.exe*."
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe
C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe
C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .
C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe
C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe*."
C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe
"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"
C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe
"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | whatismyipaddress.com | udp |
| US | 104.19.222.79:80 | whatismyipaddress.com | tcp |
| US | 172.66.40.87:80 | www.whatismyip.com | tcp |
| US | 172.66.40.87:80 | www.whatismyip.com | tcp |
| US | 172.66.40.87:80 | www.whatismyip.com | tcp |
| US | 104.21.74.56:80 | www.showmyipaddress.com | tcp |
| US | 104.19.222.79:80 | whatismyipaddress.com | tcp |
| US | 104.21.74.56:80 | www.showmyipaddress.com | tcp |
| US | 104.21.74.56:80 | www.showmyipaddress.com | tcp |
| US | 104.21.74.56:80 | www.showmyipaddress.com | tcp |
| US | 104.19.222.79:80 | whatismyipaddress.com | tcp |
| US | 104.21.74.56:80 | www.showmyipaddress.com | tcp |
| US | 172.66.40.87:80 | www.whatismyip.com | tcp |
| US | 104.21.74.56:80 | www.showmyipaddress.com | tcp |
| US | 104.21.74.56:80 | www.showmyipaddress.com | tcp |
| GB | 2.18.190.16:80 | www.adobe.com | tcp |
| NL | 142.251.31.191:80 | www.blogger.com | tcp |
| BG | 77.70.86.216:27898 | tcp | |
| DE | 85.214.228.140:80 | gyuuym.org | tcp |
| SG | 18.142.91.111:80 | unxfuild.info | tcp |
| US | 104.156.155.94:80 | cydlrge.info | tcp |
| BG | 130.204.14.137:40490 | tcp | |
| US | 8.8.8.8:53 | dkouvubcpovf.info | udp |
| BG | 93.123.117.137:37152 | tcp | |
| US | 8.8.8.8:53 | shkwzbzvtq.net | udp |
| US | 8.8.8.8:53 | obbszgo.net | udp |
| LT | 78.60.144.178:22356 | tcp | |
| US | 8.8.8.8:53 | tznhqmcudnp.net | udp |
| US | 8.8.8.8:53 | qtgqqinahbp.info | udp |
| US | 8.8.8.8:53 | zhowjanoqoz.com | udp |
| LT | 78.58.69.254:21366 | tcp | |
| US | 8.8.8.8:53 | aklexmh.info | udp |
| US | 8.8.8.8:53 | juhlnsnj.net | udp |
| BG | 212.104.116.212:26364 | tcp | |
| US | 8.8.8.8:53 | gmwmaq.com | udp |
| LT | 85.232.129.77:42551 | tcp | |
| US | 8.8.8.8:53 | ymtifby.net | udp |
| US | 8.8.8.8:53 | fsjetusuqou.org | udp |
| US | 8.8.8.8:53 | rqndcgnz.net | udp |
| US | 8.8.8.8:53 | swudbkx.net | udp |
| LV | 87.226.55.160:13302 | tcp | |
| US | 8.8.8.8:53 | ycrgpbohfjxe.info | udp |
| US | 8.8.8.8:53 | ceaoygcy.org | udp |
| US | 8.8.8.8:53 | mzmnhc.net | udp |
| US | 8.8.8.8:53 | wkygqmmueoum.org | udp |
| US | 8.8.8.8:53 | xsmoqckjdalf.net | udp |
| US | 8.8.8.8:53 | xmlymtnez.org | udp |
| US | 8.8.8.8:53 | wyatnhwcrd.info | udp |
| US | 8.8.8.8:53 | yacuec.com | udp |
| US | 8.8.8.8:53 | odzbrjqoy.info | udp |
| US | 8.8.8.8:53 | tpsleabzwt.net | udp |
| BG | 46.237.76.193:14690 | tcp | |
| US | 8.8.8.8:53 | wkrezkqou.info | udp |
| US | 8.8.8.8:53 | dsjrtuyu.info | udp |
| US | 8.8.8.8:53 | amrdmwbgvlpy.info | udp |
| US | 8.8.8.8:53 | mcgccnhqx.net | udp |
| US | 8.8.8.8:53 | dcjztqe.org | udp |
| US | 8.8.8.8:53 | wulevitknsr.info | udp |
| US | 8.8.8.8:53 | aalijqi.info | udp |
| US | 8.8.8.8:53 | wohvtggswc.net | udp |
| US | 8.8.8.8:53 | lxaqqgqteb.info | udp |
| US | 8.8.8.8:53 | wqagiaoesm.com | udp |
| US | 8.8.8.8:53 | odqisf.info | udp |
| US | 8.8.8.8:53 | zuxwxedwiz.net | udp |
| US | 8.8.8.8:53 | jkluafvavt.info | udp |
| US | 8.8.8.8:53 | ncpmyszzt.info | udp |
| US | 8.8.8.8:53 | lwnrxkmfyxdm.net | udp |
| US | 8.8.8.8:53 | dmyivsoe.net | udp |
| US | 8.8.8.8:53 | amoaksmnzpg.info | udp |
| US | 8.8.8.8:53 | xefhntnqlzid.info | udp |
| US | 8.8.8.8:53 | iwynktft.info | udp |
| US | 8.8.8.8:53 | emugmamy.com | udp |
| US | 8.8.8.8:53 | ayskdej.info | udp |
| US | 8.8.8.8:53 | qllzylttij.info | udp |
| US | 8.8.8.8:53 | ybxsqlwexbnh.info | udp |
| US | 8.8.8.8:53 | vtpvzvyr.net | udp |
| US | 8.8.8.8:53 | xaxdte.net | udp |
| US | 8.8.8.8:53 | oxlkbbn.info | udp |
| US | 8.8.8.8:53 | xhmnyh.net | udp |
| US | 8.8.8.8:53 | kkiamiym.com | udp |
| US | 8.8.8.8:53 | aqaxfmzzhf.info | udp |
| US | 8.8.8.8:53 | kbujjwmp.info | udp |
| US | 8.8.8.8:53 | rqlmtwczxcj.info | udp |
| US | 8.8.8.8:53 | ukzdgwrr.info | udp |
| US | 8.8.8.8:53 | weqalejos.net | udp |
| US | 8.8.8.8:53 | wltdfb.info | udp |
| US | 8.8.8.8:53 | oaykua.org | udp |
| US | 8.8.8.8:53 | jatdaajehomt.net | udp |
| US | 8.8.8.8:53 | ceyemmcsec.com | udp |
| US | 8.8.8.8:53 | wwqekgiaoo.org | udp |
| US | 8.8.8.8:53 | xgqiraqkg.net | udp |
| US | 8.8.8.8:53 | lxzkvlxv.info | udp |
| US | 8.8.8.8:53 | mwgkuyee.org | udp |
| US | 8.8.8.8:53 | ccaoikuaak.org | udp |
| US | 8.8.8.8:53 | luqmqmvtdotq.info | udp |
| US | 8.8.8.8:53 | mqpwpsb.info | udp |
| US | 8.8.8.8:53 | fmzshjzsh.info | udp |
| US | 8.8.8.8:53 | uiceesz.info | udp |
| US | 8.8.8.8:53 | mhuaeblg.info | udp |
| US | 8.8.8.8:53 | uglgysz.net | udp |
| US | 8.8.8.8:53 | rrzzjmp.org | udp |
| US | 8.8.8.8:53 | jdxzvf.info | udp |
| US | 8.8.8.8:53 | svlxsb.info | udp |
| US | 8.8.8.8:53 | bzaydhbkyko.info | udp |
| US | 8.8.8.8:53 | nmrmhfg.com | udp |
| US | 8.8.8.8:53 | cqoqzsjyv.info | udp |
| US | 8.8.8.8:53 | uoxjsmld.info | udp |
| US | 8.8.8.8:53 | vzopzr.net | udp |
| US | 8.8.8.8:53 | magkcs.org | udp |
| US | 8.8.8.8:53 | lufehavwf.com | udp |
| US | 8.8.8.8:53 | nusgja.info | udp |
| US | 8.8.8.8:53 | uamsxmb.info | udp |
| US | 8.8.8.8:53 | wefdsas.info | udp |
| US | 8.8.8.8:53 | jvvnojgo.info | udp |
| US | 8.8.8.8:53 | amwcuq.org | udp |
| US | 8.8.8.8:53 | znpajjjf.net | udp |
| US | 8.8.8.8:53 | bjpwlrlwpx.net | udp |
| US | 8.8.8.8:53 | eeficnc.net | udp |
| US | 8.8.8.8:53 | zgjids.info | udp |
| US | 8.8.8.8:53 | votutgz.org | udp |
| US | 8.8.8.8:53 | xoplhvnkl.org | udp |
| US | 8.8.8.8:53 | qwyqykuuke.com | udp |
| US | 8.8.8.8:53 | bfpngizcbysc.info | udp |
| US | 8.8.8.8:53 | wesuek.org | udp |
| US | 8.8.8.8:53 | xfhytbpfhgtl.net | udp |
| US | 8.8.8.8:53 | fnxlvlzveg.net | udp |
| US | 8.8.8.8:53 | ielwtwggm.net | udp |
| US | 8.8.8.8:53 | sewuvwb.net | udp |
| US | 8.8.8.8:53 | cmquys.com | udp |
| US | 8.8.8.8:53 | oaewcmmi.com | udp |
| US | 8.8.8.8:53 | qywoaooq.com | udp |
| US | 8.8.8.8:53 | xmfklibnpwx.info | udp |
| US | 8.8.8.8:53 | awtkltffriwv.net | udp |
| US | 8.8.8.8:53 | ryjuxr.net | udp |
| US | 8.8.8.8:53 | txmexi.info | udp |
| US | 8.8.8.8:53 | akwcwcokomwc.com | udp |
| US | 8.8.8.8:53 | oalwpcngx.info | udp |
| US | 8.8.8.8:53 | ndskzjkz.info | udp |
| US | 8.8.8.8:53 | komdnvwjqn.info | udp |
| US | 8.8.8.8:53 | amvzinfdpif.net | udp |
| US | 8.8.8.8:53 | eoronncfjrvp.info | udp |
| US | 8.8.8.8:53 | xcrfxbihvn.info | udp |
| US | 8.8.8.8:53 | lqgwpivc.info | udp |
| US | 8.8.8.8:53 | qegmeoyoce.com | udp |
| US | 8.8.8.8:53 | zywafih.org | udp |
| US | 8.8.8.8:53 | pvesxitaordl.info | udp |
| US | 8.8.8.8:53 | jkxhcxdw.info | udp |
| US | 8.8.8.8:53 | lfvmkwjktkrd.info | udp |
| US | 8.8.8.8:53 | lzkejad.net | udp |
| US | 8.8.8.8:53 | wagnkr.net | udp |
| US | 8.8.8.8:53 | zmtakgjyi.info | udp |
| US | 8.8.8.8:53 | mkvidwfwn.net | udp |
| US | 8.8.8.8:53 | dzrmxez.com | udp |
| US | 8.8.8.8:53 | sejhfet.net | udp |
| US | 8.8.8.8:53 | xxippgqmf.info | udp |
| US | 8.8.8.8:53 | eotjvfxkslqt.info | udp |
| US | 8.8.8.8:53 | bmbwdylrepz.info | udp |
| US | 8.8.8.8:53 | kxldwaoqfn.info | udp |
| US | 8.8.8.8:53 | keooma.com | udp |
| US | 8.8.8.8:53 | burebifkger.info | udp |
| US | 8.8.8.8:53 | hovsfqats.org | udp |
| US | 8.8.8.8:53 | xxbuvavqnao.net | udp |
| US | 8.8.8.8:53 | gzdmvu.info | udp |
| US | 8.8.8.8:53 | yupaygisawr.net | udp |
| US | 8.8.8.8:53 | tgzzsilpuoyu.info | udp |
| US | 8.8.8.8:53 | qkimmsqs.com | udp |
| US | 8.8.8.8:53 | vgjkbrcihsgz.info | udp |
| US | 8.8.8.8:53 | jyadjhdov.net | udp |
| US | 8.8.8.8:53 | rejwrwpoa.info | udp |
| US | 8.8.8.8:53 | xcbaidt.org | udp |
| US | 8.8.8.8:53 | lclvhl.net | udp |
| LT | 87.247.122.120:16314 | tcp | |
| US | 8.8.8.8:53 | ykpkjnt.info | udp |
| US | 8.8.8.8:53 | seysumkoeq.com | udp |
| US | 8.8.8.8:53 | ocvixolcl.info | udp |
| US | 8.8.8.8:53 | kqwnmebvkl.info | udp |
| US | 8.8.8.8:53 | wojwpctclqr.info | udp |
| US | 8.8.8.8:53 | bqhkyvky.net | udp |
| US | 8.8.8.8:53 | nnwrbnbfrr.info | udp |
| US | 8.8.8.8:53 | jmuyzwjxj.net | udp |
| US | 8.8.8.8:53 | oyysmggssu.com | udp |
Files
C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe
| MD5 | 5203b6ea0901877fbf2d8d6f6d8d338e |
| SHA1 | c803e92561921b38abe13239c1fd85605b570936 |
| SHA256 | 0cc02d34d5fd4cf892fed282f98c1ad3e7dd6159a8877ae5c46d3f834ed36060 |
| SHA512 | d48a41b4fc4c38a6473f789c02918fb7353a4b4199768a3624f3b685d91d38519887a1ccd3616e0d2b079a346afaec5a0f2ef2c46d72d3097ef561cedb476471 |
C:\Windows\SysWOW64\jivqccnmxrtpjlqjmg.exe
| MD5 | ba533ed647781b66a16904d7c4224982 |
| SHA1 | b066d05818ed3d018f37e96181e483b4db6d044a |
| SHA256 | a667e8a91cbf3fb5b36ba4f31982e8315cd391968abb73bc038b4398b2693ffb |
| SHA512 | e63ca8095183da04fea8f3ddef58b4aa852ca27b5ad18a38e697b94de45331e1f8a13351838936eefe6127e17e02bf221c0d7c71f3c747665770baf36f842f1f |
C:\Users\Admin\AppData\Local\Temp\uikuvkk.exe
| MD5 | abc1dc99856172ac71fa90d6b15221a8 |
| SHA1 | ef0f673cbe9d389afc11fd833e133d3348921df7 |
| SHA256 | d4bbfb7fad353baa9609389dcfdcccbb3aaba7ee308f04413b9a2a80e7483dab |
| SHA512 | 1d52971155884ddfa2ba56d1ca0c99c638070cd9dd75da507ed71e96eefe910c724bde25590a313dd13a30201c9223433cba8efa5c687ceb0503969cf0afcf84 |
C:\Users\Admin\AppData\Local\okumvsawevunedfvvmyuewfckgofexonpffwi.ogp
| MD5 | 1a889b449c8672cfeeaf256505ae5d42 |
| SHA1 | a48b8075f5aae2dac4c6dd3288423bfd4893ff26 |
| SHA256 | f774d45ee822b04ea886f70ccdc86ee22796fa28e9adc86fa0a79c1774706dac |
| SHA512 | 4fd8835d0db5873acee6ae289aa26e61b897774a80bd45cccc993f37e262c8e646dc9e93f48cab7e56445b5e09234f80391693baa96d0dc53efead2259f540bf |
C:\Users\Admin\AppData\Local\nyxecolwtznvbpglaghsrywifq.thp
| MD5 | f773f66ccfb5a2556b762c0d2ab82633 |
| SHA1 | 5710911f95258c67c89950ca4b622deec64d3106 |
| SHA256 | de1bd071c0e0dd3cb8bfa3396b01e537cdfd93d5b047edec47cc51b293008557 |
| SHA512 | 25e4bd804cffd5c35edff72ceec6ddc5ed5fe07172f83dca10256fb6fcbb12e734ac7fc917fe73ebc7d2215bcbc45c91dbff2abf8c9b023d072c2491ff379ffa |
C:\Program Files (x86)\nyxecolwtznvbpglaghsrywifq.thp
| MD5 | 465c66a1bce818f5388dd4a84860cdf9 |
| SHA1 | 6d180384ecda63459a8f28c8df0062d515b90b56 |
| SHA256 | b45ca98b36f1aad55263e3b6374384faad3fdd301bdb1e2d1b2a8b64f576c6f7 |
| SHA512 | 78475ec62117540cdd7d7960c623dcd671671edb8ba19199d8702c0e24541ac9fff07c098b30586986280000f9adc77695a1c8f2c1751eb29e08d9ce216df059 |
C:\Users\Admin\AppData\Local\nyxecolwtznvbpglaghsrywifq.thp
| MD5 | 999af9517fb9cbebfa5b971b8b343418 |
| SHA1 | 1bb77918e9fa2c1e2e8882dddd943eba74316824 |
| SHA256 | 41d202b06a4a8fd035feadf7132475ea68aa554daefdcae95f33c35185995204 |
| SHA512 | 51cd963dae13504ae7fb0945eab4eacc8bc24e43923c5fbb2d629a74e67ce1abcb705578433736162dd4f4fff0279f517fa96160818e9b433d474c8875591486 |
C:\Program Files (x86)\nyxecolwtznvbpglaghsrywifq.thp
| MD5 | e0159dfb5742ed6cf4ca506c39c13814 |
| SHA1 | 25a5ea71c5ed9f8d8d994cdc2a5bed2350ffb133 |
| SHA256 | 812bf9f81fbd97dab635f90382ffada4f518ba17c58237211150ee9bd6acd5b5 |
| SHA512 | 31aa947fc6d558ba3a36db65d3095c64b8524640ac7a5b2c71e5ab5b014f8e20358b4e8d9f4c75fef263db623eae7c2c9ba5ab0756fabf724cd142057d4c1351 |
C:\Program Files (x86)\nyxecolwtznvbpglaghsrywifq.thp
| MD5 | a978d7054938281c5c14bbc3789ef7eb |
| SHA1 | b35ad0c7e55ee3a99a890d66ef1564e39964f005 |
| SHA256 | d7469ac7c78e210d65f451b64ca01d5d083349e4a97fb43b13e47c9808ed6633 |
| SHA512 | f18a0688e723445cf543a2b77928d851f805b1e88a46466c45672a67a7013e216992c243fe762258ef62df61743bce4bcee101d0ad01f194464c2322ae62534e |