Malware Analysis Report

2025-08-10 16:34

Sample ID 250417-vc161axlw3
Target JaffaCakes118_ba533ed647781b66a16904d7c4224982
SHA256 a667e8a91cbf3fb5b36ba4f31982e8315cd391968abb73bc038b4398b2693ffb
Tags
pykspa discovery worm
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V16

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

a667e8a91cbf3fb5b36ba4f31982e8315cd391968abb73bc038b4398b2693ffb

Threat Level: Known bad

The file JaffaCakes118_ba533ed647781b66a16904d7c4224982 was found to be: Known bad.

Malicious Activity Summary

pykspa discovery worm

Pykspa

Pykspa family

Detect Pykspa worm

Looks up external IP address via web service

Unsigned PE

System Location Discovery: System Language Discovery

Suspicious behavior: EnumeratesProcesses

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2025-04-17 16:51

Signatures

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2025-04-17 16:51

Reported

2025-04-17 16:54

Platform

win10v2004-20250314-en

Max time kernel

2s

Max time network

152s

Command Line

"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_ba533ed647781b66a16904d7c4224982.exe"

Signatures

Pykspa

worm pykspa

Pykspa family

pykspa

Detect Pykspa worm

worm
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

Looks up external IP address via web service

Description Indicator Process Target
N/A www.whatismyip.ca N/A N/A
N/A whatismyip.everdot.org N/A N/A
N/A whatismyipaddress.com N/A N/A
N/A whatismyip.everdot.org N/A N/A
N/A www.showmyipaddress.com N/A N/A
N/A www.whatismyip.ca N/A N/A
N/A www.whatismyip.ca N/A N/A

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_ba533ed647781b66a16904d7c4224982.exe N/A

Processes

C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_ba533ed647781b66a16904d7c4224982.exe

"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_ba533ed647781b66a16904d7c4224982.exe"

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\jaffacakes118_ba533ed647781b66a16904d7c4224982.exe*"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c sqgwecshruzbobjh.exe

C:\Windows\sqgwecshruzbobjh.exe

sqgwecshruzbobjh.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe .

C:\Windows\tungrsldqwejzpabkef.exe

tungrsldqwejzpabkef.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\tungrsldqwejzpabkef.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c sqgwecshruzbobjh.exe .

C:\Windows\zypgpofvgkqthvedk.exe

zypgpofvgkqthvedk.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe

C:\Windows\sqgwecshruzbobjh.exe

sqgwecshruzbobjh.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe .

C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe

C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\sqgwecshruzbobjh.exe*."

C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe

C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\vytobeztiqahzrehsormh.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .

C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe

C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\tungrsldqwejzpabkef.exe*."

C:\Users\Admin\AppData\Local\Temp\guages.exe

"C:\Users\Admin\AppData\Local\Temp\guages.exe" "-c:\users\admin\appdata\local\temp\jaffacakes118_ba533ed647781b66a16904d7c4224982.exe"

C:\Users\Admin\AppData\Local\Temp\guages.exe

"C:\Users\Admin\AppData\Local\Temp\guages.exe" "-c:\users\admin\appdata\local\temp\jaffacakes118_ba533ed647781b66a16904d7c4224982.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c sqgwecshruzbobjh.exe

C:\Windows\tungrsldqwejzpabkef.exe

tungrsldqwejzpabkef.exe

C:\Windows\sqgwecshruzbobjh.exe

sqgwecshruzbobjh.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c iiascculxcjncrbbjc.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c zypgpofvgkqthvedk.exe .

C:\Windows\iiascculxcjncrbbjc.exe

iiascculxcjncrbbjc.exe .

C:\Windows\zypgpofvgkqthvedk.exe

zypgpofvgkqthvedk.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c zypgpofvgkqthvedk.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c sqgwecshruzbobjh.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\iiascculxcjncrbbjc.exe*."

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\zypgpofvgkqthvedk.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .

C:\Windows\zypgpofvgkqthvedk.exe

zypgpofvgkqthvedk.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe

C:\Windows\sqgwecshruzbobjh.exe

sqgwecshruzbobjh.exe .

C:\Windows\tungrsldqwejzpabkef.exe

tungrsldqwejzpabkef.exe .

C:\Windows\vytobeztiqahzrehsormh.exe

vytobeztiqahzrehsormh.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe

C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\sqgwecshruzbobjh.exe*."

C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe

C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\tungrsldqwejzpabkef.exe*."

C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe

C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe .

C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe

C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .

C:\Windows\vytobeztiqahzrehsormh.exe

vytobeztiqahzrehsormh.exe

C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe

C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\tungrsldqwejzpabkef.exe*."

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\sqgwecshruzbobjh.exe*."

C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe

C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe

C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe

C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\gicwikexlsbhypbdnike.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\gicwikexlsbhypbdnike.exe*."

C:\Windows\gicwikexlsbhypbdnike.exe

gicwikexlsbhypbdnike.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c zypgpofvgkqthvedk.exe .

C:\Windows\zypgpofvgkqthvedk.exe

zypgpofvgkqthvedk.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\zypgpofvgkqthvedk.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Windows\iiascculxcjncrbbjc.exe

iiascculxcjncrbbjc.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Windows\vytobeztiqahzrehsormh.exe

vytobeztiqahzrehsormh.exe .

C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe

C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\vytobeztiqahzrehsormh.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\tungrsldqwejzpabkef.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\iiascculxcjncrbbjc.exe*."

C:\Windows\zypgpofvgkqthvedk.exe

zypgpofvgkqthvedk.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c zypgpofvgkqthvedk.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c iiascculxcjncrbbjc.exe

C:\Windows\zypgpofvgkqthvedk.exe

zypgpofvgkqthvedk.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c sqgwecshruzbobjh.exe .

C:\Windows\gicwikexlsbhypbdnike.exe

gicwikexlsbhypbdnike.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c sqgwecshruzbobjh.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c sqgwecshruzbobjh.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .

C:\Windows\vytobeztiqahzrehsormh.exe

vytobeztiqahzrehsormh.exe .

C:\Windows\iiascculxcjncrbbjc.exe

iiascculxcjncrbbjc.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\gicwikexlsbhypbdnike.exe*."

C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe

C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe

C:\Windows\sqgwecshruzbobjh.exe

sqgwecshruzbobjh.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\vytobeztiqahzrehsormh.exe*."

C:\Windows\sqgwecshruzbobjh.exe

sqgwecshruzbobjh.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\sqgwecshruzbobjh.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe

C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .

C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe

C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe

C:\Windows\gicwikexlsbhypbdnike.exe

gicwikexlsbhypbdnike.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe .

C:\Windows\sqgwecshruzbobjh.exe

sqgwecshruzbobjh.exe

C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe

C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe

C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\sqgwecshruzbobjh.exe*."

C:\Windows\tungrsldqwejzpabkef.exe

tungrsldqwejzpabkef.exe .

C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe

C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe

C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe

C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .

C:\Windows\vytobeztiqahzrehsormh.exe

vytobeztiqahzrehsormh.exe

C:\Windows\vytobeztiqahzrehsormh.exe

vytobeztiqahzrehsormh.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\tungrsldqwejzpabkef.exe*."

C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe

C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\tungrsldqwejzpabkef.exe*."

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\tungrsldqwejzpabkef.exe*."

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\tungrsldqwejzpabkef.exe*."

C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe

C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\vytobeztiqahzrehsormh.exe*."

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\iiascculxcjncrbbjc.exe*."

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\gicwikexlsbhypbdnike.exe*."

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\sqgwecshruzbobjh.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe

C:\Windows\gicwikexlsbhypbdnike.exe

gicwikexlsbhypbdnike.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe .

C:\Windows\vytobeztiqahzrehsormh.exe

vytobeztiqahzrehsormh.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\vytobeztiqahzrehsormh.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe .

C:\Windows\gicwikexlsbhypbdnike.exe

gicwikexlsbhypbdnike.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe

C:\Windows\tungrsldqwejzpabkef.exe

tungrsldqwejzpabkef.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .

C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe

C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\tungrsldqwejzpabkef.exe*."

C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe

C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\gicwikexlsbhypbdnike.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\iiascculxcjncrbbjc.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c sqgwecshruzbobjh.exe

C:\Windows\sqgwecshruzbobjh.exe

sqgwecshruzbobjh.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe .

C:\Windows\tungrsldqwejzpabkef.exe

tungrsldqwejzpabkef.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\tungrsldqwejzpabkef.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c iiascculxcjncrbbjc.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe .

C:\Windows\tungrsldqwejzpabkef.exe

tungrsldqwejzpabkef.exe

C:\Windows\tungrsldqwejzpabkef.exe

tungrsldqwejzpabkef.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe .

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe

C:\Windows\iiascculxcjncrbbjc.exe

iiascculxcjncrbbjc.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c zypgpofvgkqthvedk.exe

C:\Windows\tungrsldqwejzpabkef.exe

tungrsldqwejzpabkef.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe .

C:\Windows\tungrsldqwejzpabkef.exe

tungrsldqwejzpabkef.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\iiascculxcjncrbbjc.exe*."

C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe

C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\tungrsldqwejzpabkef.exe*."

C:\Windows\zypgpofvgkqthvedk.exe

zypgpofvgkqthvedk.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe

C:\Windows\tungrsldqwejzpabkef.exe

tungrsldqwejzpabkef.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe .

C:\Windows\vytobeztiqahzrehsormh.exe

vytobeztiqahzrehsormh.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .

C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe

C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe

C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe

C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe .

C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe

C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\sqgwecshruzbobjh.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\tungrsldqwejzpabkef.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\vytobeztiqahzrehsormh.exe*."

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\vytobeztiqahzrehsormh.exe*."

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\gicwikexlsbhypbdnike.exe*."

C:\Windows\gicwikexlsbhypbdnike.exe

gicwikexlsbhypbdnike.exe

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .

C:\Windows\vytobeztiqahzrehsormh.exe

vytobeztiqahzrehsormh.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .

C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe

C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\iiascculxcjncrbbjc.exe*."

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\iiascculxcjncrbbjc.exe*."

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\vytobeztiqahzrehsormh.exe*."

C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe

C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\gicwikexlsbhypbdnike.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe

C:\Windows\tungrsldqwejzpabkef.exe

tungrsldqwejzpabkef.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c zypgpofvgkqthvedk.exe .

C:\Windows\zypgpofvgkqthvedk.exe

zypgpofvgkqthvedk.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\zypgpofvgkqthvedk.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c iiascculxcjncrbbjc.exe

C:\Windows\iiascculxcjncrbbjc.exe

iiascculxcjncrbbjc.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c iiascculxcjncrbbjc.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe

C:\Windows\iiascculxcjncrbbjc.exe

iiascculxcjncrbbjc.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe .

C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe

C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\iiascculxcjncrbbjc.exe*."

C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe

C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\vytobeztiqahzrehsormh.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe

C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe

C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\zypgpofvgkqthvedk.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c zypgpofvgkqthvedk.exe

C:\Windows\zypgpofvgkqthvedk.exe

zypgpofvgkqthvedk.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe .

C:\Windows\vytobeztiqahzrehsormh.exe

vytobeztiqahzrehsormh.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\vytobeztiqahzrehsormh.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c zypgpofvgkqthvedk.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c iiascculxcjncrbbjc.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe

C:\Windows\zypgpofvgkqthvedk.exe

zypgpofvgkqthvedk.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe

C:\Windows\iiascculxcjncrbbjc.exe

iiascculxcjncrbbjc.exe .

C:\Windows\vytobeztiqahzrehsormh.exe

vytobeztiqahzrehsormh.exe

C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe

C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c iiascculxcjncrbbjc.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe .

C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe

C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe

C:\Windows\tungrsldqwejzpabkef.exe

tungrsldqwejzpabkef.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\gicwikexlsbhypbdnike.exe*."

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\iiascculxcjncrbbjc.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .

C:\Windows\vytobeztiqahzrehsormh.exe

vytobeztiqahzrehsormh.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c sqgwecshruzbobjh.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c zypgpofvgkqthvedk.exe .

C:\Windows\tungrsldqwejzpabkef.exe

tungrsldqwejzpabkef.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe

C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe

C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\tungrsldqwejzpabkef.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .

C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe

C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .

C:\Windows\gicwikexlsbhypbdnike.exe

gicwikexlsbhypbdnike.exe .

C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe

C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe

C:\Windows\zypgpofvgkqthvedk.exe

zypgpofvgkqthvedk.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe

C:\Windows\sqgwecshruzbobjh.exe

sqgwecshruzbobjh.exe

C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe

C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe .

C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe

C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe

C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe

C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\zypgpofvgkqthvedk.exe*."

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\gicwikexlsbhypbdnike.exe*."

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\zypgpofvgkqthvedk.exe*."

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\tungrsldqwejzpabkef.exe*."

C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe

C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe .

C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe

C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\gicwikexlsbhypbdnike.exe*."

C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe

C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\sqgwecshruzbobjh.exe*."

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\vytobeztiqahzrehsormh.exe*."

C:\Windows\iiascculxcjncrbbjc.exe

iiascculxcjncrbbjc.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\iiascculxcjncrbbjc.exe*."

C:\Windows\vytobeztiqahzrehsormh.exe

vytobeztiqahzrehsormh.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c sqgwecshruzbobjh.exe .

C:\Windows\sqgwecshruzbobjh.exe

sqgwecshruzbobjh.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\sqgwecshruzbobjh.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c iiascculxcjncrbbjc.exe .

C:\Windows\gicwikexlsbhypbdnike.exe

gicwikexlsbhypbdnike.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe

C:\Windows\iiascculxcjncrbbjc.exe

iiascculxcjncrbbjc.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .

C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe

C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\iiascculxcjncrbbjc.exe*."

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\zypgpofvgkqthvedk.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe

C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe

C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .

C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe

C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\gicwikexlsbhypbdnike.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c iiascculxcjncrbbjc.exe

C:\Windows\iiascculxcjncrbbjc.exe

iiascculxcjncrbbjc.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe .

C:\Windows\tungrsldqwejzpabkef.exe

tungrsldqwejzpabkef.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\tungrsldqwejzpabkef.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c iiascculxcjncrbbjc.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe .

C:\Windows\iiascculxcjncrbbjc.exe

iiascculxcjncrbbjc.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Windows\vytobeztiqahzrehsormh.exe

vytobeztiqahzrehsormh.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\vytobeztiqahzrehsormh.exe*."

C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe

C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c zypgpofvgkqthvedk.exe .

C:\Windows\vytobeztiqahzrehsormh.exe

vytobeztiqahzrehsormh.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Windows\gicwikexlsbhypbdnike.exe

gicwikexlsbhypbdnike.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c sqgwecshruzbobjh.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\tungrsldqwejzpabkef.exe*."

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe

C:\Windows\zypgpofvgkqthvedk.exe

zypgpofvgkqthvedk.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe

C:\Windows\sqgwecshruzbobjh.exe

sqgwecshruzbobjh.exe

C:\Windows\vytobeztiqahzrehsormh.exe

vytobeztiqahzrehsormh.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c sqgwecshruzbobjh.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\zypgpofvgkqthvedk.exe*."

C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe

C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\vytobeztiqahzrehsormh.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Windows\gicwikexlsbhypbdnike.exe

gicwikexlsbhypbdnike.exe .

C:\Windows\gicwikexlsbhypbdnike.exe

gicwikexlsbhypbdnike.exe

C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe

C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .

C:\Windows\sqgwecshruzbobjh.exe

sqgwecshruzbobjh.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\gicwikexlsbhypbdnike.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\gicwikexlsbhypbdnike.exe*."

C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe

C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\iiascculxcjncrbbjc.exe*."

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\zypgpofvgkqthvedk.exe*."

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\sqgwecshruzbobjh.exe*."

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .

C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe

C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\iiascculxcjncrbbjc.exe*."

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\iiascculxcjncrbbjc.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe

C:\Windows\gicwikexlsbhypbdnike.exe

gicwikexlsbhypbdnike.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c iiascculxcjncrbbjc.exe .

C:\Windows\iiascculxcjncrbbjc.exe

iiascculxcjncrbbjc.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\iiascculxcjncrbbjc.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe

C:\Windows\gicwikexlsbhypbdnike.exe

gicwikexlsbhypbdnike.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe .

C:\Windows\tungrsldqwejzpabkef.exe

tungrsldqwejzpabkef.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\tungrsldqwejzpabkef.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .

C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe

C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\iiascculxcjncrbbjc.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe

C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe

C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe .

C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe

C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\vytobeztiqahzrehsormh.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c sqgwecshruzbobjh.exe

C:\Windows\sqgwecshruzbobjh.exe

sqgwecshruzbobjh.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c zypgpofvgkqthvedk.exe .

C:\Windows\zypgpofvgkqthvedk.exe

zypgpofvgkqthvedk.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\zypgpofvgkqthvedk.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c iiascculxcjncrbbjc.exe

C:\Windows\iiascculxcjncrbbjc.exe

iiascculxcjncrbbjc.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe .

C:\Windows\tungrsldqwejzpabkef.exe

tungrsldqwejzpabkef.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\tungrsldqwejzpabkef.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .

C:\Windows\tungrsldqwejzpabkef.exe

tungrsldqwejzpabkef.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\zypgpofvgkqthvedk.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c sqgwecshruzbobjh.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Windows\sqgwecshruzbobjh.exe

sqgwecshruzbobjh.exe

C:\Windows\gicwikexlsbhypbdnike.exe

gicwikexlsbhypbdnike.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c zypgpofvgkqthvedk.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c iiascculxcjncrbbjc.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe .

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\gicwikexlsbhypbdnike.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .

C:\Windows\zypgpofvgkqthvedk.exe

zypgpofvgkqthvedk.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe .

C:\Windows\gicwikexlsbhypbdnike.exe

gicwikexlsbhypbdnike.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\iiascculxcjncrbbjc.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\zypgpofvgkqthvedk.exe*."

C:\Windows\vytobeztiqahzrehsormh.exe

vytobeztiqahzrehsormh.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe

C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe

C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe .

C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe

C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\gicwikexlsbhypbdnike.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Windows\vytobeztiqahzrehsormh.exe

vytobeztiqahzrehsormh.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\vytobeztiqahzrehsormh.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .

C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe

C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe

C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe

C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\vytobeztiqahzrehsormh.exe*."

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe

C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\zypgpofvgkqthvedk.exe*."

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\gicwikexlsbhypbdnike.exe*."

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\gicwikexlsbhypbdnike.exe*."

C:\Windows\iiascculxcjncrbbjc.exe

iiascculxcjncrbbjc.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe

C:\Windows\vytobeztiqahzrehsormh.exe

vytobeztiqahzrehsormh.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c sqgwecshruzbobjh.exe .

C:\Windows\sqgwecshruzbobjh.exe

sqgwecshruzbobjh.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\sqgwecshruzbobjh.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c zypgpofvgkqthvedk.exe

C:\Windows\zypgpofvgkqthvedk.exe

zypgpofvgkqthvedk.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe .

C:\Windows\gicwikexlsbhypbdnike.exe

gicwikexlsbhypbdnike.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\gicwikexlsbhypbdnike.exe*."

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .

C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe

C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\tungrsldqwejzpabkef.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\zypgpofvgkqthvedk.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe

C:\Windows\tungrsldqwejzpabkef.exe

tungrsldqwejzpabkef.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe .

C:\Windows\tungrsldqwejzpabkef.exe

tungrsldqwejzpabkef.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\tungrsldqwejzpabkef.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe

C:\Windows\vytobeztiqahzrehsormh.exe

vytobeztiqahzrehsormh.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Windows\tungrsldqwejzpabkef.exe

tungrsldqwejzpabkef.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\tungrsldqwejzpabkef.exe*."

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\zypgpofvgkqthvedk.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe

C:\Windows\gicwikexlsbhypbdnike.exe

gicwikexlsbhypbdnike.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c zypgpofvgkqthvedk.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe

C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe .

C:\Windows\zypgpofvgkqthvedk.exe

zypgpofvgkqthvedk.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe

C:\Windows\zypgpofvgkqthvedk.exe

zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\sqgwecshruzbobjh.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c zypgpofvgkqthvedk.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\zypgpofvgkqthvedk.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c sqgwecshruzbobjh.exe .

C:\Windows\tungrsldqwejzpabkef.exe

tungrsldqwejzpabkef.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe

C:\Windows\sqgwecshruzbobjh.exe

sqgwecshruzbobjh.exe .

C:\Windows\zypgpofvgkqthvedk.exe

zypgpofvgkqthvedk.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c iiascculxcjncrbbjc.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\sqgwecshruzbobjh.exe*."

C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe

C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\zypgpofvgkqthvedk.exe*."

C:\Windows\iiascculxcjncrbbjc.exe

iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe

C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe

C:\Windows\gicwikexlsbhypbdnike.exe

gicwikexlsbhypbdnike.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .

C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe

C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\gicwikexlsbhypbdnike.exe*."

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\gicwikexlsbhypbdnike.exe*."

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe

C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe

C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe

C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\gicwikexlsbhypbdnike.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .

C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe

C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\sqgwecshruzbobjh.exe*."

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\iiascculxcjncrbbjc.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe

C:\Windows\gicwikexlsbhypbdnike.exe

gicwikexlsbhypbdnike.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c zypgpofvgkqthvedk.exe .

C:\Windows\zypgpofvgkqthvedk.exe

zypgpofvgkqthvedk.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\zypgpofvgkqthvedk.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe

C:\Windows\vytobeztiqahzrehsormh.exe

vytobeztiqahzrehsormh.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe .

C:\Windows\tungrsldqwejzpabkef.exe

tungrsldqwejzpabkef.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\tungrsldqwejzpabkef.exe*."

C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe

C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\iiascculxcjncrbbjc.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe

C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe

C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\zypgpofvgkqthvedk.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c sqgwecshruzbobjh.exe

C:\Windows\sqgwecshruzbobjh.exe

sqgwecshruzbobjh.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c sqgwecshruzbobjh.exe .

C:\Windows\sqgwecshruzbobjh.exe

sqgwecshruzbobjh.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\sqgwecshruzbobjh.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe

C:\Windows\tungrsldqwejzpabkef.exe

tungrsldqwejzpabkef.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Windows\vytobeztiqahzrehsormh.exe

vytobeztiqahzrehsormh.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\vytobeztiqahzrehsormh.exe*."

C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe

C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\gicwikexlsbhypbdnike.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe

C:\Windows\vytobeztiqahzrehsormh.exe

vytobeztiqahzrehsormh.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe

C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe

C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c zypgpofvgkqthvedk.exe .

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .

C:\Windows\zypgpofvgkqthvedk.exe

zypgpofvgkqthvedk.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\zypgpofvgkqthvedk.exe*."

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\zypgpofvgkqthvedk.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c zypgpofvgkqthvedk.exe

C:\Windows\zypgpofvgkqthvedk.exe

zypgpofvgkqthvedk.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe

C:\Windows\zypgpofvgkqthvedk.exe

zypgpofvgkqthvedk.exe

C:\Windows\tungrsldqwejzpabkef.exe

tungrsldqwejzpabkef.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c iiascculxcjncrbbjc.exe .

C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe

C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe

C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe

C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe .

C:\Windows\iiascculxcjncrbbjc.exe

iiascculxcjncrbbjc.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\tungrsldqwejzpabkef.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\iiascculxcjncrbbjc.exe*."

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\vytobeztiqahzrehsormh.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c sqgwecshruzbobjh.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe

C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe

C:\Windows\sqgwecshruzbobjh.exe

sqgwecshruzbobjh.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe .

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .

C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe

C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\sqgwecshruzbobjh.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\iiascculxcjncrbbjc.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\vytobeztiqahzrehsormh.exe*."

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe

C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .

C:\Windows\tungrsldqwejzpabkef.exe

tungrsldqwejzpabkef.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\tungrsldqwejzpabkef.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe

C:\Windows\gicwikexlsbhypbdnike.exe

gicwikexlsbhypbdnike.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe .

C:\Windows\tungrsldqwejzpabkef.exe

tungrsldqwejzpabkef.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\tungrsldqwejzpabkef.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe

C:\Windows\gicwikexlsbhypbdnike.exe

gicwikexlsbhypbdnike.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c iiascculxcjncrbbjc.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe

C:\Windows\iiascculxcjncrbbjc.exe

iiascculxcjncrbbjc.exe .

C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe

C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\iiascculxcjncrbbjc.exe*."

C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe

C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\vytobeztiqahzrehsormh.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .

C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe

C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\tungrsldqwejzpabkef.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe

C:\Windows\tungrsldqwejzpabkef.exe

tungrsldqwejzpabkef.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe .

C:\Windows\vytobeztiqahzrehsormh.exe

vytobeztiqahzrehsormh.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\vytobeztiqahzrehsormh.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe

C:\Windows\vytobeztiqahzrehsormh.exe

vytobeztiqahzrehsormh.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe .

C:\Windows\vytobeztiqahzrehsormh.exe

vytobeztiqahzrehsormh.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .

C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe

C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\vytobeztiqahzrehsormh.exe*."

C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe

C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c zypgpofvgkqthvedk.exe

C:\Windows\zypgpofvgkqthvedk.exe

zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\tungrsldqwejzpabkef.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe .

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .

C:\Windows\gicwikexlsbhypbdnike.exe

gicwikexlsbhypbdnike.exe .

C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe

C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\gicwikexlsbhypbdnike.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c zypgpofvgkqthvedk.exe .

C:\Windows\iiascculxcjncrbbjc.exe

iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\tungrsldqwejzpabkef.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Windows\zypgpofvgkqthvedk.exe

zypgpofvgkqthvedk.exe .

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\zypgpofvgkqthvedk.exe*."

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\zypgpofvgkqthvedk.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c iiascculxcjncrbbjc.exe

C:\Windows\iiascculxcjncrbbjc.exe

iiascculxcjncrbbjc.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .

C:\Windows\tungrsldqwejzpabkef.exe

tungrsldqwejzpabkef.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe

C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\tungrsldqwejzpabkef.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe .

C:\Windows\iiascculxcjncrbbjc.exe

iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\tungrsldqwejzpabkef.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Windows\vytobeztiqahzrehsormh.exe

vytobeztiqahzrehsormh.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\vytobeztiqahzrehsormh.exe*."

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\iiascculxcjncrbbjc.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe

C:\Windows\vytobeztiqahzrehsormh.exe

vytobeztiqahzrehsormh.exe

C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe

C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c sqgwecshruzbobjh.exe .

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .

C:\Windows\sqgwecshruzbobjh.exe

sqgwecshruzbobjh.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\zypgpofvgkqthvedk.exe*."

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\sqgwecshruzbobjh.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe

C:\Windows\vytobeztiqahzrehsormh.exe

vytobeztiqahzrehsormh.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c sqgwecshruzbobjh.exe .

C:\Windows\sqgwecshruzbobjh.exe

sqgwecshruzbobjh.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\sqgwecshruzbobjh.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe .

C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe

C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\sqgwecshruzbobjh.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe

C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe

C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\zypgpofvgkqthvedk.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c zypgpofvgkqthvedk.exe

C:\Windows\zypgpofvgkqthvedk.exe

zypgpofvgkqthvedk.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe .

C:\Windows\vytobeztiqahzrehsormh.exe

vytobeztiqahzrehsormh.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\vytobeztiqahzrehsormh.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c iiascculxcjncrbbjc.exe

C:\Windows\iiascculxcjncrbbjc.exe

iiascculxcjncrbbjc.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Windows\gicwikexlsbhypbdnike.exe

gicwikexlsbhypbdnike.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\gicwikexlsbhypbdnike.exe*."

C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe

C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe

C:\Windows\vytobeztiqahzrehsormh.exe

vytobeztiqahzrehsormh.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\gicwikexlsbhypbdnike.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c sqgwecshruzbobjh.exe .

C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe

C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe .

C:\Windows\sqgwecshruzbobjh.exe

sqgwecshruzbobjh.exe .

C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe

C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\sqgwecshruzbobjh.exe*."

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\vytobeztiqahzrehsormh.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe .

C:\Windows\tungrsldqwejzpabkef.exe

tungrsldqwejzpabkef.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\jaffacakes118_ba533ed647781b66a16904d7c4224982.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe

C:\Windows\tungrsldqwejzpabkef.exe

tungrsldqwejzpabkef.exe .

C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe

C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\tungrsldqwejzpabkef.exe*."

C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe

C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\vytobeztiqahzrehsormh.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe

C:\Windows\gicwikexlsbhypbdnike.exe

gicwikexlsbhypbdnike.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe .

C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe

C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe .

C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe

C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe .

C:\Windows\vytobeztiqahzrehsormh.exe

vytobeztiqahzrehsormh.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\vytobeztiqahzrehsormh.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c iiascculxcjncrbbjc.exe .

C:\Windows\iiascculxcjncrbbjc.exe

iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\vytobeztiqahzrehsormh.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Windows\iiascculxcjncrbbjc.exe

iiascculxcjncrbbjc.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe .

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\iiascculxcjncrbbjc.exe*."

C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe

C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\vytobeztiqahzrehsormh.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Windows\tungrsldqwejzpabkef.exe

tungrsldqwejzpabkef.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c sqgwecshruzbobjh.exe .

C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe

C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .

C:\Windows\sqgwecshruzbobjh.exe

sqgwecshruzbobjh.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\tungrsldqwejzpabkef.exe*."

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\sqgwecshruzbobjh.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe

C:\Windows\tungrsldqwejzpabkef.exe

tungrsldqwejzpabkef.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe .

C:\Windows\gicwikexlsbhypbdnike.exe

gicwikexlsbhypbdnike.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe

C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe

C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\gicwikexlsbhypbdnike.exe*."

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\iiascculxcjncrbbjc.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\iiascculxcjncrbbjc.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c zypgpofvgkqthvedk.exe

C:\Windows\zypgpofvgkqthvedk.exe

zypgpofvgkqthvedk.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe .

C:\Windows\gicwikexlsbhypbdnike.exe

gicwikexlsbhypbdnike.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\gicwikexlsbhypbdnike.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe

C:\Windows\gicwikexlsbhypbdnike.exe

gicwikexlsbhypbdnike.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c sqgwecshruzbobjh.exe .

C:\Windows\sqgwecshruzbobjh.exe

sqgwecshruzbobjh.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\sqgwecshruzbobjh.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe .

C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe

C:\Users\Admin\AppData\Local\Temp\gicwikexlsbhypbdnike.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe

C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe

C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe .

C:\Windows\gicwikexlsbhypbdnike.exe

gicwikexlsbhypbdnike.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c zypgpofvgkqthvedk.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\vytobeztiqahzrehsormh.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .

C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe

C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe

C:\Windows\zypgpofvgkqthvedk.exe

zypgpofvgkqthvedk.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe .

C:\Windows\vytobeztiqahzrehsormh.exe

vytobeztiqahzrehsormh.exe

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\zypgpofvgkqthvedk.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe .

C:\Windows\gicwikexlsbhypbdnike.exe

gicwikexlsbhypbdnike.exe .

C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe

C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\zypgpofvgkqthvedk.exe*."

C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe

C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\gicwikexlsbhypbdnike.exe*."

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\sqgwecshruzbobjh.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe

C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe

C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .

C:\Windows\iiascculxcjncrbbjc.exe

iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\zypgpofvgkqthvedk.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c iiascculxcjncrbbjc.exe .

C:\Windows\iiascculxcjncrbbjc.exe

iiascculxcjncrbbjc.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\iiascculxcjncrbbjc.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c sqgwecshruzbobjh.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c vytobeztiqahzrehsormh.exe .

C:\Windows\sqgwecshruzbobjh.exe

sqgwecshruzbobjh.exe

C:\Windows\vytobeztiqahzrehsormh.exe

vytobeztiqahzrehsormh.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe

C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe

C:\Users\Admin\AppData\Local\Temp\vytobeztiqahzrehsormh.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c gicwikexlsbhypbdnike.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\vytobeztiqahzrehsormh.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe .

C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe

C:\Users\Admin\AppData\Local\Temp\sqgwecshruzbobjh.exe .

C:\Windows\gicwikexlsbhypbdnike.exe

gicwikexlsbhypbdnike.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\sqgwecshruzbobjh.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Windows\tungrsldqwejzpabkef.exe

tungrsldqwejzpabkef.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tungrsldqwejzpabkef.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c zypgpofvgkqthvedk.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\tungrsldqwejzpabkef.exe*."

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe .

C:\Windows\tungrsldqwejzpabkef.exe

tungrsldqwejzpabkef.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Windows\zypgpofvgkqthvedk.exe

zypgpofvgkqthvedk.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\zypgpofvgkqthvedk.exe

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\zypgpofvgkqthvedk.exe*."

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe

C:\Users\Admin\AppData\Local\Temp\iiascculxcjncrbbjc.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\windows\zypgpofvgkqthvedk.exe*."

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\iiascculxcjncrbbjc.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe

C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe

C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .

C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe

C:\Users\Admin\AppData\Local\Temp\tungrsldqwejzpabkef.exe .

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

"C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe" "c:\users\admin\appdata\local\temp\tungrsldqwejzpabkef.exe*."

Network

Country Destination Domain Proto
US 8.8.8.8:53 whatismyipaddress.com udp
US 104.19.223.79:80 whatismyipaddress.com tcp
US 8.8.8.8:53 whatismyip.everdot.org udp
US 8.8.8.8:53 www.showmyipaddress.com udp
US 104.21.74.56:80 www.showmyipaddress.com tcp
US 104.19.223.79:80 whatismyipaddress.com tcp
US 104.21.74.56:80 www.showmyipaddress.com tcp
US 8.8.8.8:53 www.whatismyip.ca udp
US 8.8.8.8:53 www.whatismyip.com udp
US 172.66.40.87:80 www.whatismyip.com tcp
US 104.21.74.56:80 www.showmyipaddress.com tcp
US 172.66.40.87:80 www.whatismyip.com tcp
US 104.21.74.56:80 www.showmyipaddress.com tcp
US 8.8.8.8:53 www.whatismyip.ca udp
US 104.21.74.56:80 www.showmyipaddress.com tcp
US 172.66.40.87:80 www.whatismyip.com tcp
US 172.66.40.87:80 www.whatismyip.com tcp
US 104.19.223.79:80 whatismyipaddress.com tcp
US 8.8.8.8:53 www.whatismyip.ca udp
US 104.21.74.56:80 www.showmyipaddress.com tcp
US 172.66.40.87:80 www.whatismyip.com tcp
US 104.21.74.56:80 www.showmyipaddress.com tcp
US 8.8.8.8:53 whatismyip.everdot.org udp
US 8.8.8.8:53 www.imdb.com udp
FR 52.222.159.143:80 www.imdb.com tcp
LT 78.63.122.70:26753 tcp
US 8.8.8.8:53 gyuuym.org udp
DE 85.214.228.140:80 gyuuym.org tcp
US 8.8.8.8:53 laaxpbyk.net udp
US 8.8.8.8:53 tmpqvsl.net udp
US 8.8.8.8:53 qudfory.net udp
US 8.8.8.8:53 unxfuild.info udp
SG 18.142.91.111:80 unxfuild.info tcp
US 8.8.8.8:53 ojsajt.net udp
US 8.8.8.8:53 shzszg.info udp
US 8.8.8.8:53 rjeqik.info udp
US 8.8.8.8:53 uutvvtvja.net udp
US 8.8.8.8:53 ztrfti.info udp
US 8.8.8.8:53 ysjoxmxgh.net udp
US 8.8.8.8:53 ggoiukqgsikq.org udp
US 8.8.8.8:53 orhdjp.info udp
US 8.8.8.8:53 wowlmaywol.info udp
US 8.8.8.8:53 srfrxqia.net udp
US 8.8.8.8:53 udzdjiddn.net udp
US 8.8.8.8:53 qjjwfkitzc.info udp
US 8.8.8.8:53 hqvarimyweh.info udp
US 8.8.8.8:53 xmduzmar.info udp
US 8.8.8.8:53 ygoukmwg.org udp
US 8.8.8.8:53 marpudjt.net udp
US 8.8.8.8:53 tayasqpvyok.net udp
US 8.8.8.8:53 hpjsasmosel.org udp
US 8.8.8.8:53 usjbdw.net udp
US 8.8.8.8:53 aernnaceyi.net udp
US 8.8.8.8:53 nkxqvykhbur.net udp
US 8.8.8.8:53 esssgiwayo.org udp
US 8.8.8.8:53 cydlrge.info udp
US 104.156.155.94:80 cydlrge.info tcp
US 8.8.8.8:53 zoxgctodyqfs.net udp
US 8.8.8.8:53 vsogsifgn.org udp
US 8.8.8.8:53 fbnhngruq.info udp
US 8.8.8.8:53 mjotpzfbosdh.info udp
US 8.8.8.8:53 hemxvvt.org udp
US 8.8.8.8:53 xkfkvedxk.info udp
US 8.8.8.8:53 xxwsulsce.net udp
US 8.8.8.8:53 taajbhzrfxhr.info udp
US 8.8.8.8:53 brdkxnr.info udp
US 8.8.8.8:53 luvehemiri.info udp
US 8.8.8.8:53 rogitssbdg.net udp
US 8.8.8.8:53 nlyzcerqby.net udp
US 8.8.8.8:53 zyjybhp.net udp
US 8.8.8.8:53 iydtrcjhvy.info udp
US 8.8.8.8:53 lalckpw.org udp
US 8.8.8.8:53 qyoykc.org udp
US 8.8.8.8:53 aaiwummwgy.com udp
US 8.8.8.8:53 omfvaanuj.info udp
US 8.8.8.8:53 hmfurcniz.info udp
BG 94.236.166.209:38264 tcp
US 8.8.8.8:53 uycdzn.info udp
US 8.8.8.8:53 pulhjmcehtpa.info udp
US 8.8.8.8:53 lwwwuptpmw.net udp
US 8.8.8.8:53 zepwrmgqvmb.com udp
US 8.8.8.8:53 nosqmsa.net udp
US 8.8.8.8:53 weswqscccw.org udp
US 8.8.8.8:53 xydwhwb.net udp
US 8.8.8.8:53 ssygipvbkmt.info udp
US 8.8.8.8:53 ddpobim.org udp
US 8.8.8.8:53 iusioomq.org udp
US 8.8.8.8:53 swrtdqtqk.net udp
US 8.8.8.8:53 bordvgx.info udp
BG 178.254.198.143:16311 tcp
US 8.8.8.8:53 wcsbrpz.net udp
US 8.8.8.8:53 lzfufp.info udp
US 8.8.8.8:53 jcjedutypqp.org udp
US 8.8.8.8:53 npgqiqtjg.info udp
US 8.8.8.8:53 xilqdrien.com udp
US 8.8.8.8:53 pasxgkjyvuh.net udp
US 8.8.8.8:53 uwcuws.org udp
US 8.8.8.8:53 guygewecqo.com udp
US 8.8.8.8:53 ymekiacwwqes.com udp
US 8.8.8.8:53 hxwccvskyt.info udp
US 8.8.8.8:53 azlfou.info udp
US 8.8.8.8:53 btbjewpdy.net udp
US 8.8.8.8:53 lvyvfodk.info udp
US 8.8.8.8:53 pksfioiu.info udp
US 8.8.8.8:53 nzibocagjwdd.info udp
US 8.8.8.8:53 wnfofep.info udp
US 8.8.8.8:53 umyicieyee.org udp
US 8.8.8.8:53 hsjhpazxqvct.net udp
US 8.8.8.8:53 xkjrnmvhmjnn.net udp
US 8.8.8.8:53 vmxoajpdzy.net udp
US 8.8.8.8:53 gltzjdk.info udp
US 8.8.8.8:53 ipialurefem.net udp
US 8.8.8.8:53 vcsuct.net udp
US 8.8.8.8:53 kanmsjetqybt.net udp
US 8.8.8.8:53 patagb.info udp
US 8.8.8.8:53 csbmzmxcd.net udp
US 8.8.8.8:53 fsyczawoha.info udp
US 8.8.8.8:53 jrzurmddbd.info udp
US 8.8.8.8:53 kgrjqedy.info udp
US 8.8.8.8:53 gczhlszbz.net udp
US 8.8.8.8:53 atkzfclhbift.info udp
MD 92.115.77.72:14260 tcp
US 8.8.8.8:53 otfpkctjvo.net udp
US 8.8.8.8:53 oceyewsiws.org udp
US 8.8.8.8:53 nshfrgthvm.net udp
US 8.8.8.8:53 quzymcn.info udp
US 8.8.8.8:53 bzxmsb.info udp
US 8.8.8.8:53 wueysyqiyg.org udp
US 8.8.8.8:53 mssysmf.info udp
US 8.8.8.8:53 ywilnsfcb.info udp
US 8.8.8.8:53 jjrefkv.net udp
US 8.8.8.8:53 bipqynbezc.info udp
US 8.8.8.8:53 wtflaovmps.net udp
US 8.8.8.8:53 pdpibobucap.org udp
US 8.8.8.8:53 bcgajnqgnale.net udp
US 8.8.8.8:53 vgsgaio.org udp
US 8.8.8.8:53 tjjxlutx.net udp
US 8.8.8.8:53 aiwmqyoeaq.org udp
US 8.8.8.8:53 kjskvzf.info udp
US 8.8.8.8:53 zenolprmkgr.org udp
US 8.8.8.8:53 szarccgqh.net udp
US 8.8.8.8:53 dukedcttsa.info udp
US 8.8.8.8:53 cekyowacouce.com udp
US 8.8.8.8:53 rynixel.info udp
US 8.8.8.8:53 lzbjkx.info udp
US 8.8.8.8:53 tehkruuknoo.com udp
US 8.8.8.8:53 blriytvijot.com udp
US 8.8.8.8:53 oddwkeravsr.info udp
US 8.8.8.8:53 kyilnx.net udp
US 8.8.8.8:53 kjhckstcbeq.net udp
US 8.8.8.8:53 wsrmwfe.info udp
US 8.8.8.8:53 vgbikrg.net udp
US 8.8.8.8:53 jclwnqy.com udp
US 8.8.8.8:53 dwlwgibut.net udp
US 8.8.8.8:53 qqpovsvj.net udp
US 8.8.8.8:53 gaqkygwq.org udp
US 8.8.8.8:53 pjprusldok.net udp
US 8.8.8.8:53 ptnibcbanqk.info udp
US 8.8.8.8:53 ybbkszjap.net udp
US 8.8.8.8:53 gegkesgiuy.com udp
US 8.8.8.8:53 ywiiam.com udp
US 8.8.8.8:53 gsukyeks.com udp
US 8.8.8.8:53 lcnahzh.net udp
US 8.8.8.8:53 bpsunhl.net udp
US 8.8.8.8:53 jrbulad.info udp
US 8.8.8.8:53 gclljw.net udp
US 8.8.8.8:53 qcfwyobyswu.info udp
US 8.8.8.8:53 yfrkqav.info udp
US 8.8.8.8:53 bpzorpfuhtf.org udp
US 8.8.8.8:53 pqhvrgd.org udp
US 8.8.8.8:53 vvqwhsvm.info udp
US 8.8.8.8:53 uqqmtrsqtygj.net udp
US 8.8.8.8:53 ueqckonspml.info udp
US 8.8.8.8:53 udp
US 8.8.8.8:53 ecegeakc.org udp
US 8.8.8.8:53 lcurousnjcfa.net udp
US 8.8.8.8:53 gomfycvut.net udp
US 8.8.8.8:53 qzbrbxfc.net udp
US 8.8.8.8:53 kolorbaof.net udp
US 8.8.8.8:53 bjdumxkh.info udp
US 8.8.8.8:53 ootkjdzphd.net udp
US 8.8.8.8:53 fmmwznf.net udp
US 8.8.8.8:53 jblcujtn.net udp
US 8.8.8.8:53 aararuzmj.info udp
US 8.8.8.8:53 jupalmjmj.org udp
US 8.8.8.8:53 nadzxnin.net udp
US 8.8.8.8:53 uogegscemuce.org udp
US 8.8.8.8:53 zrizzt.net udp
SG 86.38.91.213:23240 tcp
US 8.8.8.8:53 puykxk.net udp
US 8.8.8.8:53 tmhmyuj.com udp
US 8.8.8.8:53 vklvlnim.net udp
US 8.8.8.8:53 yrhglc.info udp
US 8.8.8.8:53 tiylxsi.net udp
US 8.8.8.8:53 nsjnpn.net udp
US 8.8.8.8:53 ztdytrxxvn.net udp
US 8.8.8.8:53 bgwulie.info udp
US 8.8.8.8:53 empmqt.info udp
US 8.8.8.8:53 pxljpnrb.info udp
US 8.8.8.8:53 jetjswd.info udp
US 8.8.8.8:53 ivewnr.info udp
US 8.8.8.8:53 setxymr.net udp
US 8.8.8.8:53 uxzyfla.info udp
US 8.8.8.8:53 nqxijbihvn.info udp
US 8.8.8.8:53 fkxmxzj.info udp
US 8.8.8.8:53 ekqrlkjndfpd.net udp
US 8.8.8.8:53 zilynuvcs.net udp
US 8.8.8.8:53 yspynbdonzn.net udp
US 8.8.8.8:53 fcfbfxh.net udp
US 8.8.8.8:53 iswigc.com udp
US 8.8.8.8:53 ltngsnxbab.net udp
US 8.8.8.8:53 rvvkhwak.net udp
US 8.8.8.8:53 aejttwpwebsq.net udp
US 8.8.8.8:53 xrctizgjhu.net udp
US 8.8.8.8:53 qwvulfviwf.info udp
US 8.8.8.8:53 uulwzmj.net udp
US 8.8.8.8:53 dshyudqln.info udp
US 8.8.8.8:53 eqpifea.info udp
US 8.8.8.8:53 yewqstuoq.info udp
US 8.8.8.8:53 rfcqjgcwrllk.info udp
US 8.8.8.8:53 yqtypd.info udp
US 8.8.8.8:53 fyviqsnogcy.info udp
US 8.8.8.8:53 xcgtbce.com udp
US 8.8.8.8:53 ooewwc.org udp
US 8.8.8.8:53 xnvybpnazsl.org udp
US 8.8.8.8:53 mqeoecewyias.org udp
US 8.8.8.8:53 yqdwzrdyhq.net udp
US 8.8.8.8:53 xvpwwmgt.net udp
US 8.8.8.8:53 jypigkw.net udp
US 8.8.8.8:53 gegwmskceq.org udp
US 8.8.8.8:53 suvmpbbgu.net udp
US 8.8.8.8:53 ischtjii.net udp
US 8.8.8.8:53 nqtsnnlgep.info udp
US 8.8.8.8:53 uosgssuwumyc.org udp
US 8.8.8.8:53 zzvoduwzvzzp.info udp
US 8.8.8.8:53 jphhtgd.com udp
US 8.8.8.8:53 rggedndjyozs.net udp
US 8.8.8.8:53 bavvryzl.info udp
US 8.8.8.8:53 uoikoagiku.com udp
US 8.8.8.8:53 putkrobes.info udp
US 8.8.8.8:53 wwqcueww.com udp
US 8.8.8.8:53 omierhazkhgw.net udp
US 8.8.8.8:53 nypdymbsjqp.net udp
US 8.8.8.8:53 jghfomdkkr.net udp
US 8.8.8.8:53 zqtutpdxtsa.info udp
US 8.8.8.8:53 ugokguewmgkc.com udp
US 8.8.8.8:53 kwdrqyzrhd.net udp
US 8.8.8.8:53 gfqpwerwz.net udp
US 8.8.8.8:53 kozelangx.info udp
US 8.8.8.8:53 xrjmbmgmisvh.info udp
US 8.8.8.8:53 awnekynulkd.info udp
US 8.8.8.8:53 kqqecesmceka.org udp
US 8.8.8.8:53 uvfljyomeq.net udp
US 8.8.8.8:53 jqtenkdayoy.org udp
US 8.8.8.8:53 ieemsk.com udp
US 8.8.8.8:53 jqvvnetwx.net udp
US 8.8.8.8:53 lvliwxsju.net udp
US 8.8.8.8:53 uuhpyi.info udp
US 8.8.8.8:53 tpxepmhhxo.net udp
US 8.8.8.8:53 wcgcuuiu.org udp
US 8.8.8.8:53 aouylfqj.net udp
US 8.8.8.8:53 rojkekjgxgv.com udp
US 8.8.8.8:53 abtceupkeiq.net udp
US 8.8.8.8:53 nhmyomxjv.info udp
US 8.8.8.8:53 yahkdydxbwkf.net udp
US 8.8.8.8:53 xrashk.info udp
US 8.8.8.8:53 rmmkcburkf.net udp
US 8.8.8.8:53 tyzkrdhyl.info udp
BG 78.90.150.27:18740 tcp
US 8.8.8.8:53 ryclcctqzmj.net udp
US 8.8.8.8:53 cjniohmclcvn.net udp
US 8.8.8.8:53 vyvijbihvn.info udp
US 8.8.8.8:53 ykuiww.com udp
US 8.8.8.8:53 cqkdpulihwv.net udp
US 8.8.8.8:53 aoacwkigmmks.org udp
US 8.8.8.8:53 emikcsse.com udp
US 8.8.8.8:53 kfuaxccx.info udp
US 8.8.8.8:53 dcoulqlpw.net udp
US 8.8.8.8:53 llpwlrlwpx.net udp
US 8.8.8.8:53 euhusqrqpij.info udp
US 8.8.8.8:53 bctwfgikb.org udp
US 8.8.8.8:53 ffcbtjgq.net udp
US 8.8.8.8:53 xsxpvlfr.info udp
US 8.8.8.8:53 xgbudgdfdkl.net udp
US 8.8.8.8:53 wijayyfmvwp.info udp
US 8.8.8.8:53 dqxwxaqxxrp.net udp
US 8.8.8.8:53 fzqqksnzg.net udp
US 8.8.8.8:53 qipsqplpxcx.net udp
US 8.8.8.8:53 onlohmosj.info udp
US 8.8.8.8:53 jynyrfjiknnw.net udp
US 8.8.8.8:53 hrudywtli.org udp
US 8.8.8.8:53 agnyaiwqf.net udp
US 8.8.8.8:53 xmlymtnez.org udp
US 8.8.8.8:53 woepguqcn.info udp
US 8.8.8.8:53 ourbrqmpse.net udp
US 8.8.8.8:53 odzbrjqoy.info udp
US 8.8.8.8:53 gcksakwkgoum.com udp
US 8.8.8.8:53 qeoecsuq.org udp
US 8.8.8.8:53 tpsleabzwt.net udp
US 8.8.8.8:53 sayeoywcuu.com udp
US 8.8.8.8:53 oemupsn.net udp
US 8.8.8.8:53 aalijqi.info udp
US 8.8.8.8:53 iutjjvxez.info udp
US 8.8.8.8:53 libojsjbx.com udp
US 8.8.8.8:53 odqisf.info udp
US 8.8.8.8:53 vmacnmhq.info udp
US 8.8.8.8:53 iizfvzzb.info udp
US 8.8.8.8:53 nqtvrwdez.com udp
US 8.8.8.8:53 ludfsj.info udp
US 8.8.8.8:53 ncpmyszzt.info udp
US 8.8.8.8:53 pqtyzgeskcl.net udp
US 159.148.166.6:29517 tcp
US 8.8.8.8:53 uukuvupkl.net udp
US 8.8.8.8:53 qwemwsma.org udp
US 8.8.8.8:53 tsadizxlcl.net udp
US 8.8.8.8:53 nobkwfkwvshl.info udp
US 8.8.8.8:53 jgablqj.org udp
US 8.8.8.8:53 ybxsqlwexbnh.info udp
US 8.8.8.8:53 yeidxglzl.net udp
US 8.8.8.8:53 yvhehaqyqn.info udp
US 8.8.8.8:53 glwzncdjh.info udp
US 8.8.8.8:53 zchpylnxfplx.info udp
US 8.8.8.8:53 trrrgjdnnbrm.info udp
US 8.8.8.8:53 kmukgu.org udp
US 8.8.8.8:53 kkiamiym.com udp
US 8.8.8.8:53 immpxad.net udp
US 8.8.8.8:53 ydyofq.info udp
US 8.8.8.8:53 yyemqiayao.com udp
US 8.8.8.8:53 wywazjfaa.info udp
US 8.8.8.8:53 medcnzqfno.net udp
US 8.8.8.8:53 dchmpulgv.net udp
US 8.8.8.8:53 jatdaajehomt.net udp
US 8.8.8.8:53 wvzixgncgh.net udp
US 8.8.8.8:53 wryhfbhx.net udp
US 8.8.8.8:53 jdfijutqj.info udp
US 8.8.8.8:53 uezmtt.info udp
US 8.8.8.8:53 mwgkuyee.org udp
US 8.8.8.8:53 yefawioisor.info udp
US 8.8.8.8:53 xdefsx.info udp
US 8.8.8.8:53 c.pki.goog udp
NL 173.194.69.94:80 c.pki.goog tcp
US 8.8.8.8:53 arnimu.info udp
US 8.8.8.8:53 ctkipoxh.info udp
US 8.8.8.8:53 xifoloobaf.net udp
US 8.8.8.8:53 uiceesz.info udp
US 8.8.8.8:53 tkleplbbjg.info udp
US 8.8.8.8:53 iqojmojssut.net udp
US 8.8.8.8:53 mgosug.org udp
US 8.8.8.8:53 bupdlp.info udp
US 8.8.8.8:53 dengxfrwxu.info udp
US 8.8.8.8:53 ruahpcbmpzu.net udp
US 8.8.8.8:53 vczsjaxyusm.net udp
US 8.8.8.8:53 pzotphqq.net udp
US 8.8.8.8:53 bzaydhbkyko.info udp
US 8.8.8.8:53 hmvucwy.info udp
BG 130.204.114.238:43084 tcp
US 8.8.8.8:53 wmyaxkabwvfy.net udp
US 8.8.8.8:53 cprgywzb.net udp
US 8.8.8.8:53 uoxjsmld.info udp
US 8.8.8.8:53 augyqoss.org udp
US 8.8.8.8:53 zkylfh.info udp
US 8.8.8.8:53 nusgja.info udp
US 8.8.8.8:53 ewiuauieao.com udp
US 8.8.8.8:53 csoiiemc.org udp
US 8.8.8.8:53 bnvnxfmnia.net udp
US 8.8.8.8:53 bjpwlrlwpx.net udp
US 8.8.8.8:53 ipfhvlsg.net udp
US 8.8.8.8:53 jqvtchngzoj.com udp
US 8.8.8.8:53 jprkjcocgrxl.net udp
US 8.8.8.8:53 gmmbqqr.net udp
US 8.8.8.8:53 copcsxl.net udp
US 8.8.8.8:53 ycephkmmpe.info udp
US 8.8.8.8:53 gfflluitxivt.net udp
US 8.8.8.8:53 zlhorjshpzzy.info udp
US 8.8.8.8:53 vyrazqzrtk.info udp
US 8.8.8.8:53 ngaadsfqhuf.org udp
US 8.8.8.8:53 yujzbf.info udp
US 8.8.8.8:53 sewuvwb.net udp
US 8.8.8.8:53 skrdmegyyqv.net udp
US 8.8.8.8:53 dapakzwisk.net udp
US 8.8.8.8:53 waikic.com udp
US 8.8.8.8:53 fdcnhwjfnl.info udp
US 8.8.8.8:53 vhyuyr.info udp
US 8.8.8.8:53 oaewcmmi.com udp
US 8.8.8.8:53 rdsalkv.net udp
US 8.8.8.8:53 awtkltffriwv.net udp
US 8.8.8.8:53 iywgceys.com udp
US 8.8.8.8:53 keyqkiuu.com udp
US 8.8.8.8:53 fspushloucd.com udp
US 8.8.8.8:53 oalwpcngx.info udp
US 8.8.8.8:53 ckyyzks.net udp
US 8.8.8.8:53 podkoinxlip.net udp
US 8.8.8.8:53 aklruohjej.net udp
US 8.8.8.8:53 bnprcvgmxwdu.net udp
US 8.8.8.8:53 fcmlnsd.com udp
US 8.8.8.8:53 xcrfxbihvn.info udp
US 8.8.8.8:53 yyyoykcckiey.org udp
US 8.8.8.8:53 nktomb.info udp
US 8.8.8.8:53 owmssgcy.org udp
US 8.8.8.8:53 hypsopsbj.com udp
US 8.8.8.8:53 dxcyyuq.net udp
US 8.8.8.8:53 gvhgfsn.info udp
US 8.8.8.8:53 avdpjtx.net udp
US 8.8.8.8:53 pvesxitaordl.info udp
US 8.8.8.8:53 rvlmjq.info udp
US 8.8.8.8:53 gsgywggeqg.com udp
US 8.8.8.8:53 lzkejad.net udp
US 8.8.8.8:53 omumkc.org udp
US 8.8.8.8:53 dzrmxez.com udp
US 8.8.8.8:53 yucidujkw.net udp
US 8.8.8.8:53 jycmyirzdct.org udp
US 8.8.8.8:53 wdgdbextgsho.net udp
US 8.8.8.8:53 kxldwaoqfn.info udp
US 8.8.8.8:53 lrfexnjazjkt.info udp
US 8.8.8.8:53 sksksc.org udp
US 8.8.8.8:53 lssmzecimib.com udp
US 8.8.8.8:53 fgoqql.net udp
US 8.8.8.8:53 egjealczfsdr.info udp
US 8.8.8.8:53 xxbuvavqnao.net udp
US 8.8.8.8:53 hkbvbfbks.info udp
US 8.8.8.8:53 gexirij.info udp
US 8.8.8.8:53 tgzzsilpuoyu.info udp
US 8.8.8.8:53 tilxuwdml.info udp
US 8.8.8.8:53 zfcqnktz.net udp
US 8.8.8.8:53 yujaxeb.info udp
US 8.8.8.8:53 lgoabxuuckaz.info udp
US 8.8.8.8:53 sllojeh.net udp
US 8.8.8.8:53 rejwrwpoa.info udp
US 8.8.8.8:53 uwysowoy.com udp
US 8.8.8.8:53 seysumkoeq.com udp
US 8.8.8.8:53 gguqkg.com udp
US 8.8.8.8:53 yuqsate.info udp
US 8.8.8.8:53 beouriw.net udp
US 8.8.8.8:53 dcfctpnd.info udp
US 8.8.8.8:53 lbtgyrfber.net udp
US 8.8.8.8:53 jmuyzwjxj.net udp
US 8.8.8.8:53 xkhqwah.net udp
US 8.8.8.8:53 sgescokcmo.org udp
US 8.8.8.8:53 yeakms.com udp
US 8.8.8.8:53 jvroteq.net udp
US 8.8.8.8:53 pinadye.org udp
US 8.8.8.8:53 lzwgpqnxhy.net udp
US 8.8.8.8:53 zhnghdrifb.info udp
US 8.8.8.8:53 pezgfgbvhwr.com udp
US 8.8.8.8:53 bhnbdsbtba.net udp
US 8.8.8.8:53 jehyhpbob.com udp
US 8.8.8.8:53 doxjfnhk.net udp
US 8.8.8.8:53 socqykqe.com udp
US 8.8.8.8:53 yescie.com udp
US 8.8.8.8:53 frqniu.info udp
US 8.8.8.8:53 mqficsr.info udp
US 8.8.8.8:53 vveushuoxdlp.net udp
US 8.8.8.8:53 mkgqcemqso.org udp
US 8.8.8.8:53 qqugqlrcvwsv.info udp
US 8.8.8.8:53 xaglpx.info udp
US 8.8.8.8:53 jnqvhqai.info udp
US 8.8.8.8:53 nurcpihcfpl.org udp
US 8.8.8.8:53 hsfspwfirsr.org udp
US 8.8.8.8:53 eoiuciaq.com udp
US 8.8.8.8:53 yrqmxofwicx.info udp
US 8.8.8.8:53 kekwbn.info udp
US 8.8.8.8:53 ncztumfk.info udp
US 8.8.8.8:53 toretqlvbw.info udp
US 8.8.8.8:53 itjfkixadmz.info udp
BG 79.100.42.4:16630 tcp
US 8.8.8.8:53 icbdithml.net udp
US 8.8.8.8:53 hewmikl.info udp
US 8.8.8.8:53 ckpsxcjin.info udp
US 8.8.8.8:53 rebymbqknptz.net udp
US 8.8.8.8:53 dnyidwf.info udp
US 8.8.8.8:53 icgkimqg.com udp
US 8.8.8.8:53 ewwmgousuc.org udp
US 8.8.8.8:53 pbmzhgvoziz.net udp
US 8.8.8.8:53 iwooye.org udp
US 8.8.8.8:53 dtcmsl.info udp
US 8.8.8.8:53 yadxtkefpqdf.net udp
US 8.8.8.8:53 aiuqqimwmi.org udp
US 8.8.8.8:53 yetmxkxqh.net udp
US 8.8.8.8:53 kwpeowv.net udp
US 8.8.8.8:53 qngitmingp.net udp
US 8.8.8.8:53 pygdgajd.net udp
US 8.8.8.8:53 uyzkhcubeliw.net udp
US 8.8.8.8:53 xdkdyecghew.info udp
US 8.8.8.8:53 fapobwpxpcdm.info udp
US 8.8.8.8:53 ulwprsdpevsj.info udp
US 8.8.8.8:53 riuawanw.info udp
US 8.8.8.8:53 rmvurugmdmx.net udp
US 8.8.8.8:53 ewqgme.com udp
US 8.8.8.8:53 hcajrml.com udp
US 8.8.8.8:53 gbezfymnoq.net udp
US 8.8.8.8:53 hwppheppbbd.org udp
US 8.8.8.8:53 kuxyxunmv.net udp
US 8.8.8.8:53 qyjxvcif.net udp
US 8.8.8.8:53 lmskkud.net udp
US 8.8.8.8:53 bqthujs.com udp
US 8.8.8.8:53 rsxyzjhke.net udp
US 8.8.8.8:53 sjoyqwarzybg.net udp
US 8.8.8.8:53 kuqmiywgeyyk.org udp
US 8.8.8.8:53 ynfhxnub.net udp
US 8.8.8.8:53 bqjubxfuug.info udp
US 8.8.8.8:53 rkwlhccy.info udp
US 8.8.8.8:53 ojrszqyplj.net udp
US 8.8.8.8:53 nthafgeqx.org udp
US 8.8.8.8:53 rysxkjutfca.org udp
US 8.8.8.8:53 gwuasykc.com udp
US 8.8.8.8:53 zarfdrnqbfkb.net udp
US 8.8.8.8:53 cqegcmioes.com udp
US 8.8.8.8:53 skzafqs.net udp
US 8.8.8.8:53 vibshiiel.net udp
US 8.8.8.8:53 jcatfaeqpzfv.info udp
US 8.8.8.8:53 lcthybrmjddh.info udp
US 8.8.8.8:53 jjqtpeerkb.net udp
US 8.8.8.8:53 byzyjukom.info udp
US 8.8.8.8:53 puvldtielldn.info udp
US 8.8.8.8:53 mgdyrkson.net udp
US 8.8.8.8:53 hmnitafg.net udp
US 8.8.8.8:53 igvwtit.net udp
US 8.8.8.8:53 cyflwoaqd.info udp
US 8.8.8.8:53 djanychncjor.net udp
US 8.8.8.8:53 urkcltobhpwf.net udp
US 8.8.8.8:53 lsniddwqoaht.net udp
US 8.8.8.8:53 agkxdktl.net udp
US 8.8.8.8:53 oismai.com udp
US 8.8.8.8:53 eheflhppvg.net udp
US 8.8.8.8:53 pclnivmleanr.net udp
US 8.8.8.8:53 csuksc.com udp
US 8.8.8.8:53 hfrkdoqvjz.info udp
US 8.8.8.8:53 qwkywkao.com udp
US 8.8.8.8:53 elqxwzmh.info udp
LT 212.117.9.69:34498 tcp
US 8.8.8.8:53 cykogcgqqcuu.com udp
US 8.8.8.8:53 smwmlg.net udp
US 8.8.8.8:53 xspqclz.net udp
US 8.8.8.8:53 skkapax.net udp
US 8.8.8.8:53 ugjyfpgfl.net udp
US 8.8.8.8:53 asxyjipov.net udp
US 8.8.8.8:53 acxgdr.net udp
US 8.8.8.8:53 pkqzppsdbq.info udp
US 8.8.8.8:53 ympanulwi.net udp
US 8.8.8.8:53 pnxjnkgif.net udp
US 8.8.8.8:53 eyqeykgyic.org udp
US 8.8.8.8:53 esfcqrg.net udp
US 8.8.8.8:53 myrwjqkrwpbk.info udp
US 8.8.8.8:53 qkreziredcn.info udp
US 8.8.8.8:53 fsmmvgbarn.net udp
US 8.8.8.8:53 pmjadalzt.info udp
US 8.8.8.8:53 mpkbfsgyp.info udp
US 8.8.8.8:53 gsdskjh.info udp
US 8.8.8.8:53 godmyfrbtj.info udp
US 8.8.8.8:53 ussgsuakom.com udp
US 8.8.8.8:53 qseoumkkca.org udp
US 8.8.8.8:53 acdetcf.info udp
US 8.8.8.8:53 fwmenrbrrh.net udp
US 8.8.8.8:53 lyfumoz.net udp
US 8.8.8.8:53 qdnmhgdyrit.net udp
US 8.8.8.8:53 fgnsxwu.org udp
US 8.8.8.8:53 bclvea.net udp
US 8.8.8.8:53 hcbszmb.info udp
US 8.8.8.8:53 cocsgeow.org udp
US 8.8.8.8:53 jeqwbi.net udp
US 8.8.8.8:53 zkfjbu.net udp
US 8.8.8.8:53 qyqigk.com udp
US 8.8.8.8:53 agjycsacnt.info udp
US 8.8.8.8:53 nmmkfss.net udp
US 8.8.8.8:53 tnjxbi.net udp
US 8.8.8.8:53 cbgevk.net udp
US 8.8.8.8:53 filicwxat.com udp
US 8.8.8.8:53 fyaylmbcb.net udp
US 8.8.8.8:53 vycsqizs.net udp
US 8.8.8.8:53 tiocujoptg.net udp
US 8.8.8.8:53 wioywobgn.info udp
US 8.8.8.8:53 ekqaao.com udp
US 8.8.8.8:53 leislgv.org udp
US 8.8.8.8:53 yljgzgd.info udp
US 8.8.8.8:53 uahhax.info udp
US 8.8.8.8:53 viclhcrdno.info udp
US 8.8.8.8:53 xarszitqk.org udp
LV 85.254.33.225:22720 tcp
US 8.8.8.8:53 rkjyfrxybqd.net udp
US 8.8.8.8:53 wcooqqeg.com udp
US 8.8.8.8:53 wlmmdek.info udp
US 8.8.8.8:53 xsbabdbdjd.net udp
US 8.8.8.8:53 hjfdpmp.org udp
US 8.8.8.8:53 rvljpzomlf.net udp
US 8.8.8.8:53 kagigs.org udp
US 8.8.8.8:53 ydsfbsmz.info udp
US 8.8.8.8:53 rjbifug.net udp
US 8.8.8.8:53 zcdmnywbbel.net udp
US 8.8.8.8:53 yqdindvszcl.info udp
US 8.8.8.8:53 ksbqymhebwk.info udp
US 8.8.8.8:53 xdlhnomgnu.net udp
US 8.8.8.8:53 xvrjgkxcmw.net udp
US 8.8.8.8:53 bvleenyitufj.net udp
US 8.8.8.8:53 mgvujoaaj.info udp
US 8.8.8.8:53 ldlrgk.info udp
US 8.8.8.8:53 siiucewa.org udp
US 8.8.8.8:53 tqjeexr.org udp
US 8.8.8.8:53 owtumceqt.info udp
US 8.8.8.8:53 shrwnfeexho.net udp
US 8.8.8.8:53 vijdzqp.net udp
US 8.8.8.8:53 nnhhyniovl.info udp
US 8.8.8.8:53 czsesbhvcydm.info udp
US 8.8.8.8:53 ckggnpdbpdyv.info udp
US 8.8.8.8:53 vlnthukuzii.com udp
US 8.8.8.8:53 vzeqxcfiuyiu.net udp
US 8.8.8.8:53 sgdzhklkvfso.info udp
US 8.8.8.8:53 fkwwjrodvm.info udp
US 8.8.8.8:53 hoxykkwem.org udp
US 8.8.8.8:53 oakyuuaaggiu.org udp
US 8.8.8.8:53 bsxukoea.info udp
US 8.8.8.8:53 skqsiiae.org udp
LT 78.62.144.169:22671 tcp
US 8.8.8.8:53 iudsbwl.info udp
US 8.8.8.8:53 tydgygsud.net udp
US 8.8.8.8:53 kuuiou.com udp
US 8.8.8.8:53 auqmxkhmq.net udp
US 8.8.8.8:53 kstpdx.info udp
US 8.8.8.8:53 abdgbsnofxvq.net udp
US 8.8.8.8:53 alyypvemovoc.net udp
US 8.8.8.8:53 ksycokeqqe.org udp
US 8.8.8.8:53 awkkqg.org udp
US 8.8.8.8:53 qlstpgkhcjbu.net udp
US 8.8.8.8:53 rfhpjhlytxwf.net udp
US 8.8.8.8:53 qjjapgod.info udp
US 8.8.8.8:53 ibvocdxf.info udp
US 8.8.8.8:53 jajynjgqlqv.com udp
US 8.8.8.8:53 sqdsxt.net udp
US 8.8.8.8:53 swkuuumy.org udp
US 8.8.8.8:53 btrzbnhuvsx.info udp
US 8.8.8.8:53 picftmlr.info udp
US 8.8.8.8:53 dyxqtol.net udp
US 8.8.8.8:53 nzitfaav.info udp
US 8.8.8.8:53 npyncgjj.info udp
US 8.8.8.8:53 eekswqki.com udp
US 8.8.8.8:53 lktcrbw.com udp
US 8.8.8.8:53 oczhfhcmmtrn.info udp
US 8.8.8.8:53 hyjodgw.info udp
US 8.8.8.8:53 zfjelaqhnfb.com udp
US 8.8.8.8:53 pttznxof.net udp
US 8.8.8.8:53 jlxxubcmhdml.info udp
US 8.8.8.8:53 yjxbblcucn.net udp
US 8.8.8.8:53 dkdczgl.info udp
US 8.8.8.8:53 bejmsgzozoj.info udp
US 8.8.8.8:53 yygimacwgyuk.com udp
US 8.8.8.8:53 earmhyjihls.net udp
US 8.8.8.8:53 iaeymeiiqkki.com udp
US 8.8.8.8:53 fajjjo.net udp
US 8.8.8.8:53 eaictyqxc.info udp
US 8.8.8.8:53 okuqqq.org udp
US 8.8.8.8:53 xtuitkrup.net udp
US 8.8.8.8:53 dzefsf.net udp
US 8.8.8.8:53 kpqjhwtg.info udp
US 8.8.8.8:53 steghc.net udp
US 8.8.8.8:53 vgqxvqngngx.info udp
US 8.8.8.8:53 bnosoya.net udp
US 8.8.8.8:53 eadxhih.net udp
US 8.8.8.8:53 pcukhjpibsv.org udp
US 8.8.8.8:53 mkgspwjic.net udp
US 8.8.8.8:53 jzuzzqnnet.info udp
US 8.8.8.8:53 hsrkvgh.com udp
US 8.8.8.8:53 cznedunhjr.net udp
US 8.8.8.8:53 cgzqtowog.info udp
US 8.8.8.8:53 rqvyvgtlgrmm.info udp
US 8.8.8.8:53 iixrzwoxw.info udp
US 8.8.8.8:53 dodlrundv.net udp
US 8.8.8.8:53 zlcbctva.info udp
US 8.8.8.8:53 gscosauu.org udp
US 8.8.8.8:53 bqxjdqh.net udp
US 8.8.8.8:53 qeasooggkkye.org udp
BG 93.155.169.215:20802 tcp
US 8.8.8.8:53 fufosmi.org udp
US 8.8.8.8:53 zqdovxmrged.net udp
US 8.8.8.8:53 nlrnljnixwj.org udp
US 8.8.8.8:53 sbhkyc.info udp
US 8.8.8.8:53 gdiecndz.net udp
US 8.8.8.8:53 dlhkseb.net udp
US 8.8.8.8:53 fevpfshvp.org udp
US 8.8.8.8:53 huvgpix.org udp
US 8.8.8.8:53 radhafzm.info udp
US 8.8.8.8:53 ichzwt.info udp
US 8.8.8.8:53 kcryxrris.info udp
US 8.8.8.8:53 fqlunkhy.net udp
US 8.8.8.8:53 wcjexmc.net udp
US 8.8.8.8:53 uajbrwn.net udp
US 8.8.8.8:53 jkjhrl.net udp
US 8.8.8.8:53 giekgyskeiik.org udp
US 8.8.8.8:53 njeaxgj.com udp
US 8.8.8.8:53 pqtersnsimr.com udp
US 8.8.8.8:53 bcftiejofc.info udp
US 8.8.8.8:53 rtexqs.info udp
US 8.8.8.8:53 jtvmni.net udp
US 8.8.8.8:53 rrtnzgwg.net udp
US 8.8.8.8:53 picuugfkn.org udp
US 8.8.8.8:53 bavppixu.net udp
US 8.8.8.8:53 vghebmtvpp.net udp
US 8.8.8.8:53 zhgukfzvhgjz.net udp
US 8.8.8.8:53 fkgritslx.org udp
US 8.8.8.8:53 zsbwjijte.org udp
US 8.8.8.8:53 xkkaky.net udp
US 8.8.8.8:53 jbjidebhygc.com udp
US 8.8.8.8:53 ehcirpkaleny.net udp
US 8.8.8.8:53 gsewky.org udp
US 8.8.8.8:53 ptpwnlreeaxo.net udp
US 8.8.8.8:53 rhqschl.net udp
US 8.8.8.8:53 lokdonoiowja.net udp
US 8.8.8.8:53 lgshyahb.info udp
US 8.8.8.8:53 lspofiqoh.info udp
US 8.8.8.8:53 kwiktxwyrq.net udp
US 8.8.8.8:53 dcfynue.info udp
IT 94.156.55.38:21804 tcp
US 8.8.8.8:53 eeeiusoc.com udp
US 8.8.8.8:53 pvfsjlm.com udp
US 8.8.8.8:53 iwswskgy.com udp
US 8.8.8.8:53 qmtlbxxqndnp.info udp
US 8.8.8.8:53 flvrzqrixwn.com udp
US 8.8.8.8:53 rmrmtwxdhon.org udp
US 8.8.8.8:53 zbqtpeerkb.net udp
US 8.8.8.8:53 rdspao.net udp
US 8.8.8.8:53 oiwrgbffggbj.net udp
US 8.8.8.8:53 nalgyej.com udp
US 8.8.8.8:53 pwnibob.net udp
US 8.8.8.8:53 tcrxsyddqetr.net udp
US 8.8.8.8:53 prjdhr.info udp
US 8.8.8.8:53 zuwrljtqss.net udp
US 8.8.8.8:53 weskko.org udp
US 8.8.8.8:53 cgkopug.net udp
US 8.8.8.8:53 sswdsktxpmto.net udp
US 8.8.8.8:53 swcwgygu.com udp
US 8.8.8.8:53 vmeuscyo.info udp
US 8.8.8.8:53 msaeugqyakco.org udp
US 8.8.8.8:53 zheaujuvaw.info udp
US 8.8.8.8:53 tmrxnmjrkb.net udp
US 8.8.8.8:53 bzxwvcz.net udp
US 8.8.8.8:53 qmukqqvdr.info udp
US 8.8.8.8:53 aiuwdxfr.info udp
US 8.8.8.8:53 uomieuwsgywa.com udp
US 8.8.8.8:53 blyfxc.net udp
US 8.8.8.8:53 nglqvkbmrpc.com udp
US 8.8.8.8:53 wykuaqukww.com udp
US 8.8.8.8:53 tovopylh.info udp
US 8.8.8.8:53 huzalsfejhtj.info udp
US 8.8.8.8:53 xmjmnczctgb.org udp
US 8.8.8.8:53 fzkrxmam.info udp
US 8.8.8.8:53 jexcvf.net udp
US 8.8.8.8:53 rqvjhs.info udp
US 8.8.8.8:53 fixijml.org udp
US 8.8.8.8:53 mlvteyyqryl.net udp
US 8.8.8.8:53 kpdlcwifpbmw.info udp
US 8.8.8.8:53 pssmhkxobs.net udp
US 8.8.8.8:53 feoyfok.net udp
US 8.8.8.8:53 kqjntybbtrpw.net udp
US 8.8.8.8:53 bvrlxiawb.net udp
US 8.8.8.8:53 cgkzxwfvpo.info udp
US 8.8.8.8:53 fgfskjpsu.org udp
US 8.8.8.8:53 oekiooyw.com udp
US 8.8.8.8:53 dppolyzety.net udp
US 8.8.8.8:53 sqoyewoqyq.org udp
US 8.8.8.8:53 dgpcbnishin.info udp
US 8.8.8.8:53 bujydax.net udp
US 8.8.8.8:53 hwhoegekf.info udp
US 8.8.8.8:53 eupocuxef.info udp
US 8.8.8.8:53 xspbrazfb.info udp
US 8.8.8.8:53 yjvsdsxby.info udp
US 8.8.8.8:53 nzllvjpbyjf.org udp
US 8.8.8.8:53 ndxwfoyovsw.net udp
US 8.8.8.8:53 frcuzznrrcgk.net udp
US 8.8.8.8:53 msoiygcw.org udp
US 8.8.8.8:53 ejdqzdt.net udp
US 8.8.8.8:53 wovogxqadgdb.net udp
US 8.8.8.8:53 oisuhv.net udp
US 8.8.8.8:53 jntxuexoq.net udp
US 8.8.8.8:53 jongxr.net udp
US 8.8.8.8:53 fagqrg.info udp
US 8.8.8.8:53 awtrjqbmv.net udp
RU 178.141.101.119:15967 tcp
US 8.8.8.8:53 gleinpuy.net udp
US 8.8.8.8:53 kqkmyqwqyo.com udp
US 8.8.8.8:53 nrbzxsdkb.net udp
US 8.8.8.8:53 wosztnnayzfe.info udp
US 8.8.8.8:53 ejpdqikairvo.info udp
US 8.8.8.8:53 iogglwzwxzfc.info udp
US 8.8.8.8:53 xeccvoazm.info udp
US 8.8.8.8:53 pentxdhzn.info udp
US 8.8.8.8:53 ssgqsckw.com udp
US 8.8.8.8:53 yqwpsyrabee.net udp
US 8.8.8.8:53 sirqxczym.info udp
US 8.8.8.8:53 cxritgbkwiqj.net udp
US 8.8.8.8:53 taeqtut.net udp
US 8.8.8.8:53 ldjcwspir.com udp
US 8.8.8.8:53 xflrdxdu.net udp
US 8.8.8.8:53 usmsyz.net udp
US 8.8.8.8:53 yabgjuiyvpj.net udp
US 8.8.8.8:53 brlysmdo.info udp
US 8.8.8.8:53 qntyzubcyqj.info udp
US 8.8.8.8:53 yqtafgfohsp.net udp
US 8.8.8.8:53 vvhslcbmhml.net udp
US 8.8.8.8:53 sqcowwkqii.com udp
US 8.8.8.8:53 okuwss.org udp
US 8.8.8.8:53 nhmcqarsdy.info udp
US 8.8.8.8:53 qmlwvkvsw.info udp
US 8.8.8.8:53 ikvohllsnz.info udp
US 8.8.8.8:53 gacwyuim.org udp
US 8.8.8.8:53 tzdprovsrdfa.info udp
US 8.8.8.8:53 nrpqjt.info udp
US 8.8.8.8:53 dzhqvekq.info udp
US 8.8.8.8:53 ihisbvuerta.net udp
US 8.8.8.8:53 sqiiuwicqi.org udp
US 8.8.8.8:53 gimcimyqsksa.com udp
US 8.8.8.8:53 lkngjoezjnq.com udp
US 8.8.8.8:53 hbriaqnpwk.info udp
US 8.8.8.8:53 lrzbvgn.com udp
US 8.8.8.8:53 bciekpgvcwka.info udp
US 8.8.8.8:53 qrigmstjehdb.info udp
US 8.8.8.8:53 amscyc.org udp
US 8.8.8.8:53 layorkz.net udp
US 8.8.8.8:53 qyoumo.com udp
US 8.8.8.8:53 hopwceyt.net udp
US 8.8.8.8:53 pcnsjtfiz.info udp
US 8.8.8.8:53 ppssblfdspeu.info udp
US 8.8.8.8:53 liqyaygivoq.com udp
US 8.8.8.8:53 xenuqwz.net udp
US 8.8.8.8:53 qokoyy.org udp
US 8.8.8.8:53 vexvqxpgxrlm.info udp
US 8.8.8.8:53 xbfhtyff.info udp
US 8.8.8.8:53 ikxqnsryq.info udp
US 8.8.8.8:53 hrhijke.com udp
US 8.8.8.8:53 oeztozdsrt.info udp
US 8.8.8.8:53 lqwvin.net udp
US 8.8.8.8:53 vsswekgnat.info udp
US 8.8.8.8:53 obfxxjjqiaia.net udp
US 8.8.8.8:53 ywqqos.org udp
US 8.8.8.8:53 tcherndubeb.info udp
US 8.8.8.8:53 qeeouymq.com udp
BR 189.46.206.247:17864 tcp
US 8.8.8.8:53 gyuuym.org udp
DE 85.214.228.140:80 gyuuym.org tcp
US 8.8.8.8:53 ssiimwmcko.com udp
US 8.8.8.8:53 lrjacuwrec.info udp
US 8.8.8.8:53 cyhijmkwvkn.net udp
SG 18.142.91.111:80 unxfuild.info tcp
US 8.8.8.8:53 lfyyrytldof.net udp
US 8.8.8.8:53 zozjsjcyl.info udp
US 8.8.8.8:53 qgmewaiqwgaw.org udp
US 8.8.8.8:53 gmtydsfik.info udp
US 8.8.8.8:53 hhlinqxejwm.info udp
US 8.8.8.8:53 wvequyl.info udp
US 8.8.8.8:53 ggoiukqgsikq.org udp
US 8.8.8.8:53 kwhomglks.net udp
US 8.8.8.8:53 ugunkjkf.info udp
US 8.8.8.8:53 yblvedtkjiy.net udp
US 8.8.8.8:53 udzdjiddn.net udp
US 8.8.8.8:53 xzzpccnitzd.info udp
US 8.8.8.8:53 chtiue.info udp
US 8.8.8.8:53 ceqaqakqeo.com udp
US 8.8.8.8:53 ygoukmwg.org udp
US 8.8.8.8:53 optidunybos.net udp
US 8.8.8.8:53 fepghqgqp.info udp
US 8.8.8.8:53 syoaewaikmca.com udp
US 104.156.155.94:80 cydlrge.info tcp
US 8.8.8.8:53 hituvuhmwqr.info udp
US 8.8.8.8:53 tglsjqboz.com udp
US 8.8.8.8:53 fepsbiyyvsp.com udp
US 8.8.8.8:53 tlpxkn.info udp
US 8.8.8.8:53 cuckme.com udp
NL 86.105.245.69:80 cuckme.com tcp
US 8.8.8.8:53 rrimfjaicj.net udp
US 8.8.8.8:53 iyouiqks.com udp
US 8.8.8.8:53 ssvfqkmtrbdw.info udp
US 8.8.8.8:53 mjotpzfbosdh.info udp
US 8.8.8.8:53 sudefbv.info udp
US 8.8.8.8:53 zyujoaplvqb.info udp
US 8.8.8.8:53 kcikiif.net udp
US 8.8.8.8:53 iowqsakc.org udp
US 8.8.8.8:53 uffczzl.net udp
US 8.8.8.8:53 luvehemiri.info udp
US 8.8.8.8:53 fayqjkmayud.net udp
US 8.8.8.8:53 xiuqjgdc.net udp
US 8.8.8.8:53 uulrzujyfmp.net udp
US 8.8.8.8:53 lalckpw.org udp
US 8.8.8.8:53 dyogdon.org udp
US 8.8.8.8:53 hgoohibop.org udp
US 8.8.8.8:53 ywksmy.org udp
US 8.8.8.8:53 uohesoour.info udp
US 8.8.8.8:53 hmfurcniz.info udp
US 8.8.8.8:53 ajekzgg.net udp
US 8.8.8.8:53 szllrp.info udp
US 8.8.8.8:53 mxqraqhh.net udp
US 8.8.8.8:53 ddpobim.org udp
US 8.8.8.8:53 ortkfcboxkb.net udp
US 8.8.8.8:53 muwffpbyfkoa.info udp
US 8.8.8.8:53 ewhqxezcwwc.net udp
US 8.8.8.8:53 xezhmxnr.net udp
US 8.8.8.8:53 yiayumwc.org udp
US 8.8.8.8:53 xkzsryh.net udp
PK 111.119.166.95:30142 tcp
US 8.8.8.8:53 yoaoooewyeeo.com udp
US 8.8.8.8:53 fgunse.net udp
US 8.8.8.8:53 dsnljgyap.net udp
US 8.8.8.8:53 qkdqcjlun.net udp
US 8.8.8.8:53 uiqakyukogic.com udp
US 8.8.8.8:53 mdhpuesj.net udp
US 8.8.8.8:53 fjxgibeebn.info udp

Files

C:\Users\Admin\AppData\Local\Temp\bbygorkllli.exe

MD5 5203b6ea0901877fbf2d8d6f6d8d338e
SHA1 c803e92561921b38abe13239c1fd85605b570936
SHA256 0cc02d34d5fd4cf892fed282f98c1ad3e7dd6159a8877ae5c46d3f834ed36060
SHA512 d48a41b4fc4c38a6473f789c02918fb7353a4b4199768a3624f3b685d91d38519887a1ccd3616e0d2b079a346afaec5a0f2ef2c46d72d3097ef561cedb476471

C:\Windows\SysWOW64\iiascculxcjncrbbjc.exe

MD5 ba533ed647781b66a16904d7c4224982
SHA1 b066d05818ed3d018f37e96181e483b4db6d044a
SHA256 a667e8a91cbf3fb5b36ba4f31982e8315cd391968abb73bc038b4398b2693ffb
SHA512 e63ca8095183da04fea8f3ddef58b4aa852ca27b5ad18a38e697b94de45331e1f8a13351838936eefe6127e17e02bf221c0d7c71f3c747665770baf36f842f1f

C:\Users\Admin\AppData\Local\Temp\guages.exe

MD5 0d0b6b40d1b2b9fb6a91ccf63eb3bd77
SHA1 b52f60a77d297cc93a91a9b3ad1369e96e1ea43d
SHA256 41845fd8f622aef349c88ba1e3610233a42da5c08a86582935c1e04e2cdf1a2e
SHA512 16cee35366e3f5aa402d741fa4e9959b3e916d9972509e829772c1b3b6d6e648f2d4cfb820a80a87dea616a5ac21ed782cdc56830fe7cae0e657219bf6d18176

C:\Users\Admin\AppData\Local\xghibkllgukxvtmvmoxyzsb.cxl

MD5 cfbf71ab2d5207867fa58ae0874c0e43
SHA1 a7db96185bcabb4c1535812b4acdc3569b4fed42
SHA256 3a8eab715c7af0efc58bc3b03091de7ea0aac5035ffba68a295fb7131ea49443
SHA512 e17c4d51aa52c6cff1e6a93f360aca73935955b2103b0c9bc6f630b33e40742c5d98b2b26d9a28e8021f9ae29606ef214a62c7a3ff4cbc520df94accd843bb1b

C:\Program Files (x86)\xghibkllgukxvtmvmoxyzsb.cxl

MD5 4306433f2ba2ea120ce6f8a0b1bfaf47
SHA1 c073f049e4e8943984d7569487d83254e94882e5
SHA256 f1726b2bbdf0cc3d1eb79b1aa3de8237d173aabf8c85095160e5e0a017705648
SHA512 5ebddf3d4fb1d5b5ca2dde7a908b89dd12a363161c46dbae5a7a32f05d53c01aa73ca8fd2ef7e98d511424f10e47ea0dcbf6b6d953f04067ed73c4a28d642735

C:\Users\Admin\AppData\Local\keqcgamxdcdbktxrtgamycwitzyzxgptnp.wiu

MD5 c359550469c968556336b384144fb821
SHA1 3cc228ccc25a54fae1f4051d155671b98c799714
SHA256 bc7a812073631b9db026679f50535f5abffda18a7d36e33a5d49d271edde3bc4
SHA512 737d93297f7181b4b58894750477d3e7fa283e6f53ea7dd54bfdf6746d33bd608a471e4b29441fd2ddfd1d9dcb82635353c369f2abd8bb4faecdbaf0d51be4cd

C:\Users\Admin\AppData\Local\xghibkllgukxvtmvmoxyzsb.cxl

MD5 85110af40139376460d5759ceac2df16
SHA1 5130770ddd3abe055cc4c5329e487aeddb004aed
SHA256 4fea2596d74b3394935677e42e0c7bfad75e6cf400a2256495c0beab02acce27
SHA512 7603381d03e950544485abc11f5f8e52beebbd064b4b7711cf0b26466a4e2a1c14867a6ab4e616a503fb85432472a5cc504bcd37dc09cf0b8a27d4aa4c41c7de

C:\Users\Admin\AppData\Local\xghibkllgukxvtmvmoxyzsb.cxl

MD5 65e864ebaca1a407fcec264f97e9ae34
SHA1 50d3f693c267d7f74b9b7ed5f7b50180920dbcb0
SHA256 5278c2d86aaa91fea2ebbc9f41831f190b2bd819d550ff915502dc01f06f0beb
SHA512 64efcf2cb251c70dd1343219e12ad73f1e443366555dd632966b6240128715755a67cae0683f4ad2d0b49e5da50f5d559e0a1f0a5b0ec26d457195749ef25a62

C:\Users\Admin\AppData\Local\xghibkllgukxvtmvmoxyzsb.cxl

MD5 785a875e114be1e7b9c57f89244da302
SHA1 0e6521d97b4c898ed22cfac05c7c13ce7b8ad87b
SHA256 82704709a1fe6ac5a598ce4d8ea51755ccd909029522b4f04f26dfb32abfd18a
SHA512 becdb3d8654ddbec2021511ceb70e3b1273ba07509a47522d4bfc737583a0ae6872f410f33d0db3f4ee098b226d9f23bb5e9c7f9adaa5a9aaaf67289b745e19d

C:\Program Files (x86)\xghibkllgukxvtmvmoxyzsb.cxl

MD5 133967f102e4c644ee575e8c865cb7c9
SHA1 777ad1e4cd48df313af16dcc02cd90707111be63
SHA256 665e3843ea518242514a2cfa0c584dbebb026954fddd96e4e54fc88205c8d31b
SHA512 19bf5846564135197fb5b51c4c2993cf417cffdf0b6e2d678a8854ea6e6f97902b004f54497f9c360bc054c2538ca0c1a20dc21b51e8ae68da6c60a004fb491b

C:\Program Files (x86)\xghibkllgukxvtmvmoxyzsb.cxl

MD5 ea367de6cf3becc2b2fbdb0568bdb0b4
SHA1 85d09e66c7c763837b3b931931d7d5b1970a48a8
SHA256 16e1bc075ec3e0e7c5bb58a13c1929462f6775fe85296993d7d30ee4f0cf2257
SHA512 a6622b0218221fbfd55c2f8d09953a75aac8131956da958ec91e29566ffb46377b00bec034a3025b45c783975a7a5ecaf6a09bc9f282753e1131c0a81dc8d7ea

Analysis: behavioral2

Detonation Overview

Submitted

2025-04-17 16:51

Reported

2025-04-17 16:54

Platform

win11-20250410-en

Max time kernel

1s

Max time network

157s

Command Line

"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_ba533ed647781b66a16904d7c4224982.exe"

Signatures

Pykspa

worm pykspa

Pykspa family

pykspa

Detect Pykspa worm

worm
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

Looks up external IP address via web service

Description Indicator Process Target
N/A whatismyipaddress.com N/A N/A
N/A whatismyip.everdot.org N/A N/A
N/A www.whatismyip.ca N/A N/A
N/A www.showmyipaddress.com N/A N/A

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_ba533ed647781b66a16904d7c4224982.exe N/A

Processes

C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_ba533ed647781b66a16904d7c4224982.exe

"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_ba533ed647781b66a16904d7c4224982.exe"

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\jaffacakes118_ba533ed647781b66a16904d7c4224982.exe*"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c aykepoywgzavoptln.exe

C:\Windows\aykepoywgzavoptln.exe

aykepoywgzavoptln.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c jivqccnmxrtpjlqjmg.exe .

C:\Windows\jivqccnmxrtpjlqjmg.exe

jivqccnmxrtpjlqjmg.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\jivqccnmxrtpjlqjmg.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c aykepoywgzavoptln.exe

C:\Windows\aykepoywgzavoptln.exe

aykepoywgzavoptln.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe .

C:\Windows\tqbueclirjjdvvyp.exe

tqbueclirjjdvvyp.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe

C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe

C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\tqbueclirjjdvvyp.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .

C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe

C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\uuierseeqlolgjpjniy.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe

C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe

C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .

C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe

C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\uuierseeqlolgjpjniy.exe*."

C:\Users\Admin\AppData\Local\Temp\uikuvkk.exe

"C:\Users\Admin\AppData\Local\Temp\uikuvkk.exe" "-c:\users\admin\appdata\local\temp\jaffacakes118_ba533ed647781b66a16904d7c4224982.exe"

C:\Users\Admin\AppData\Local\Temp\uikuvkk.exe

"C:\Users\Admin\AppData\Local\Temp\uikuvkk.exe" "-c:\users\admin\appdata\local\temp\jaffacakes118_ba533ed647781b66a16904d7c4224982.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe

C:\Windows\hixuikxylhljfjqlqmde.exe

hixuikxylhljfjqlqmde.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe

C:\Windows\wyombesuifkjgltpvskmc.exe

wyombesuifkjgltpvskmc.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe .

C:\Windows\hixuikxylhljfjqlqmde.exe

hixuikxylhljfjqlqmde.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe .

C:\Windows\tqbueclirjjdvvyp.exe

tqbueclirjjdvvyp.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\hixuikxylhljfjqlqmde.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\tqbueclirjjdvvyp.exe*."

C:\Windows\tqbueclirjjdvvyp.exe

tqbueclirjjdvvyp.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .

C:\Windows\uuierseeqlolgjpjniy.exe

uuierseeqlolgjpjniy.exe .

C:\Windows\tqbueclirjjdvvyp.exe

tqbueclirjjdvvyp.exe

C:\Windows\wyombesuifkjgltpvskmc.exe

wyombesuifkjgltpvskmc.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe

C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .

C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\uuierseeqlolgjpjniy.exe*."

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\wyombesuifkjgltpvskmc.exe*."

C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe

C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe*."

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\aykepoywgzavoptln.exe*."

C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe

C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe*."

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c jivqccnmxrtpjlqjmg.exe

C:\Windows\jivqccnmxrtpjlqjmg.exe

jivqccnmxrtpjlqjmg.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe .

C:\Windows\tqbueclirjjdvvyp.exe

tqbueclirjjdvvyp.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\tqbueclirjjdvvyp.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe

C:\Windows\uuierseeqlolgjpjniy.exe

uuierseeqlolgjpjniy.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe .

C:\Windows\uuierseeqlolgjpjniy.exe

uuierseeqlolgjpjniy.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\uuierseeqlolgjpjniy.exe*."

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe .

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\jivqccnmxrtpjlqjmg.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .

C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe

C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\hixuikxylhljfjqlqmde.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe

C:\Windows\uuierseeqlolgjpjniy.exe

uuierseeqlolgjpjniy.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe

C:\Windows\uuierseeqlolgjpjniy.exe

uuierseeqlolgjpjniy.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c jivqccnmxrtpjlqjmg.exe .

C:\Windows\jivqccnmxrtpjlqjmg.exe

jivqccnmxrtpjlqjmg.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\jivqccnmxrtpjlqjmg.exe*."

C:\Windows\wyombesuifkjgltpvskmc.exe

wyombesuifkjgltpvskmc.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c aykepoywgzavoptln.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\wyombesuifkjgltpvskmc.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe

C:\Windows\aykepoywgzavoptln.exe

aykepoywgzavoptln.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe

C:\Windows\wyombesuifkjgltpvskmc.exe

wyombesuifkjgltpvskmc.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Windows\uuierseeqlolgjpjniy.exe

uuierseeqlolgjpjniy.exe

C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe

C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\wyombesuifkjgltpvskmc.exe*."

C:\Windows\wyombesuifkjgltpvskmc.exe

wyombesuifkjgltpvskmc.exe .

C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe

C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .

C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Windows\uuierseeqlolgjpjniy.exe

uuierseeqlolgjpjniy.exe

C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe

C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\wyombesuifkjgltpvskmc.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\uuierseeqlolgjpjniy.exe*."

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\uuierseeqlolgjpjniy.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c aykepoywgzavoptln.exe .

C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe

C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe

C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe

C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .

C:\Windows\wyombesuifkjgltpvskmc.exe

wyombesuifkjgltpvskmc.exe .

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .

C:\Windows\aykepoywgzavoptln.exe

aykepoywgzavoptln.exe .

C:\Windows\tqbueclirjjdvvyp.exe

tqbueclirjjdvvyp.exe

C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe

C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .

C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe

C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\hixuikxylhljfjqlqmde.exe*."

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\wyombesuifkjgltpvskmc.exe*."

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\aykepoywgzavoptln.exe*."

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\wyombesuifkjgltpvskmc.exe*."

C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe

C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe

C:\Windows\tqbueclirjjdvvyp.exe

tqbueclirjjdvvyp.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe .

C:\Windows\uuierseeqlolgjpjniy.exe

uuierseeqlolgjpjniy.exe

C:\Windows\uuierseeqlolgjpjniy.exe

uuierseeqlolgjpjniy.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\uuierseeqlolgjpjniy.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe

C:\Windows\wyombesuifkjgltpvskmc.exe

wyombesuifkjgltpvskmc.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe .

C:\Windows\tqbueclirjjdvvyp.exe

tqbueclirjjdvvyp.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\wyombesuifkjgltpvskmc.exe*."

C:\Windows\tqbueclirjjdvvyp.exe

tqbueclirjjdvvyp.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe

C:\Windows\uuierseeqlolgjpjniy.exe

uuierseeqlolgjpjniy.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe .

C:\Windows\hixuikxylhljfjqlqmde.exe

hixuikxylhljfjqlqmde.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\tqbueclirjjdvvyp.exe*."

C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe .

C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe

C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c jivqccnmxrtpjlqjmg.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\hixuikxylhljfjqlqmde.exe*."

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\aykepoywgzavoptln.exe*."

C:\Windows\wyombesuifkjgltpvskmc.exe

wyombesuifkjgltpvskmc.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe .

C:\Windows\jivqccnmxrtpjlqjmg.exe

jivqccnmxrtpjlqjmg.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\jivqccnmxrtpjlqjmg.exe*."

C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe

C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe .

C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Windows\hixuikxylhljfjqlqmde.exe

hixuikxylhljfjqlqmde.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\jivqccnmxrtpjlqjmg.exe*."

C:\Windows\wyombesuifkjgltpvskmc.exe

wyombesuifkjgltpvskmc.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\aykepoywgzavoptln.exe*."

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\hixuikxylhljfjqlqmde.exe*."

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\wyombesuifkjgltpvskmc.exe*."

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\jivqccnmxrtpjlqjmg.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe

C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe

C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\wyombesuifkjgltpvskmc.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe

C:\Windows\wyombesuifkjgltpvskmc.exe

wyombesuifkjgltpvskmc.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c aykepoywgzavoptln.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe .

C:\Windows\aykepoywgzavoptln.exe

aykepoywgzavoptln.exe

C:\Windows\uuierseeqlolgjpjniy.exe

uuierseeqlolgjpjniy.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\uuierseeqlolgjpjniy.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe

C:\Windows\uuierseeqlolgjpjniy.exe

uuierseeqlolgjpjniy.exe .

C:\Windows\tqbueclirjjdvvyp.exe

tqbueclirjjdvvyp.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\uuierseeqlolgjpjniy.exe*."

C:\Windows\wyombesuifkjgltpvskmc.exe

wyombesuifkjgltpvskmc.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c jivqccnmxrtpjlqjmg.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\wyombesuifkjgltpvskmc.exe*."

C:\Windows\jivqccnmxrtpjlqjmg.exe

jivqccnmxrtpjlqjmg.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe

C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe

C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .

C:\Windows\tqbueclirjjdvvyp.exe

tqbueclirjjdvvyp.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c aykepoywgzavoptln.exe .

C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe

C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe

C:\Windows\uuierseeqlolgjpjniy.exe

uuierseeqlolgjpjniy.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\uuierseeqlolgjpjniy.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\tqbueclirjjdvvyp.exe*."

C:\Windows\aykepoywgzavoptln.exe

aykepoywgzavoptln.exe .

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .

C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe

C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c aykepoywgzavoptln.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c aykepoywgzavoptln.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\aykepoywgzavoptln.exe*."

C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe

C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\wyombesuifkjgltpvskmc.exe*."

C:\Windows\aykepoywgzavoptln.exe

aykepoywgzavoptln.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe .

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Windows\aykepoywgzavoptln.exe

aykepoywgzavoptln.exe .

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .

C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe

C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\hixuikxylhljfjqlqmde.exe*."

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\aykepoywgzavoptln.exe*."

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\wyombesuifkjgltpvskmc.exe*."

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\jivqccnmxrtpjlqjmg.exe*."

C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe

C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\wyombesuifkjgltpvskmc.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe

C:\Windows\wyombesuifkjgltpvskmc.exe

wyombesuifkjgltpvskmc.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe .

C:\Windows\tqbueclirjjdvvyp.exe

tqbueclirjjdvvyp.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe

C:\Windows\hixuikxylhljfjqlqmde.exe

hixuikxylhljfjqlqmde.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\tqbueclirjjdvvyp.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c jivqccnmxrtpjlqjmg.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe .

C:\Windows\jivqccnmxrtpjlqjmg.exe

jivqccnmxrtpjlqjmg.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c jivqccnmxrtpjlqjmg.exe .

C:\Windows\hixuikxylhljfjqlqmde.exe

hixuikxylhljfjqlqmde.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Windows\jivqccnmxrtpjlqjmg.exe

jivqccnmxrtpjlqjmg.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c aykepoywgzavoptln.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c aykepoywgzavoptln.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\hixuikxylhljfjqlqmde.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\jivqccnmxrtpjlqjmg.exe*."

C:\Windows\aykepoywgzavoptln.exe

aykepoywgzavoptln.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe

C:\Windows\aykepoywgzavoptln.exe

aykepoywgzavoptln.exe .

C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe

C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c jivqccnmxrtpjlqjmg.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .

C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe

C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\aykepoywgzavoptln.exe*."

C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe

C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\hixuikxylhljfjqlqmde.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c aykepoywgzavoptln.exe .

C:\Windows\jivqccnmxrtpjlqjmg.exe

jivqccnmxrtpjlqjmg.exe .

C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe

C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .

C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe

C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\hixuikxylhljfjqlqmde.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\jivqccnmxrtpjlqjmg.exe*."

C:\Windows\aykepoywgzavoptln.exe

aykepoywgzavoptln.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\uuierseeqlolgjpjniy.exe*."

C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .

C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe

C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\aykepoywgzavoptln.exe*."

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\wyombesuifkjgltpvskmc.exe*."

C:\Windows\tqbueclirjjdvvyp.exe

tqbueclirjjdvvyp.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe*."

C:\Windows\tqbueclirjjdvvyp.exe

tqbueclirjjdvvyp.exe

C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .

C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe

C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe

C:\Windows\uuierseeqlolgjpjniy.exe

uuierseeqlolgjpjniy.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe .

C:\Windows\uuierseeqlolgjpjniy.exe

uuierseeqlolgjpjniy.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\uuierseeqlolgjpjniy.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c jivqccnmxrtpjlqjmg.exe

C:\Windows\uuierseeqlolgjpjniy.exe

uuierseeqlolgjpjniy.exe

C:\Windows\jivqccnmxrtpjlqjmg.exe

jivqccnmxrtpjlqjmg.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c aykepoywgzavoptln.exe .

C:\Windows\aykepoywgzavoptln.exe

aykepoywgzavoptln.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\aykepoywgzavoptln.exe*."

C:\Windows\hixuikxylhljfjqlqmde.exe

hixuikxylhljfjqlqmde.exe .

C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe .

C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c aykepoywgzavoptln.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\hixuikxylhljfjqlqmde.exe*."

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\aykepoywgzavoptln.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe .

C:\Windows\hixuikxylhljfjqlqmde.exe

hixuikxylhljfjqlqmde.exe

C:\Windows\aykepoywgzavoptln.exe

aykepoywgzavoptln.exe

C:\Windows\hixuikxylhljfjqlqmde.exe

hixuikxylhljfjqlqmde.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe

C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\hixuikxylhljfjqlqmde.exe*."

C:\Windows\wyombesuifkjgltpvskmc.exe

wyombesuifkjgltpvskmc.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .

C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe

C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c jivqccnmxrtpjlqjmg.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\wyombesuifkjgltpvskmc.exe*."

C:\Windows\uuierseeqlolgjpjniy.exe

uuierseeqlolgjpjniy.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\wyombesuifkjgltpvskmc.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe*."

C:\Windows\jivqccnmxrtpjlqjmg.exe

jivqccnmxrtpjlqjmg.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\jivqccnmxrtpjlqjmg.exe*."

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe .

C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe

C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\jivqccnmxrtpjlqjmg.exe*."

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\hixuikxylhljfjqlqmde.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .

C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe

C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\hixuikxylhljfjqlqmde.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c jivqccnmxrtpjlqjmg.exe

C:\Windows\jivqccnmxrtpjlqjmg.exe

jivqccnmxrtpjlqjmg.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe .

C:\Windows\wyombesuifkjgltpvskmc.exe

wyombesuifkjgltpvskmc.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\wyombesuifkjgltpvskmc.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe

C:\Windows\wyombesuifkjgltpvskmc.exe

wyombesuifkjgltpvskmc.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe .

C:\Windows\hixuikxylhljfjqlqmde.exe

hixuikxylhljfjqlqmde.exe

C:\Windows\wyombesuifkjgltpvskmc.exe

wyombesuifkjgltpvskmc.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\wyombesuifkjgltpvskmc.exe*."

C:\Windows\hixuikxylhljfjqlqmde.exe

hixuikxylhljfjqlqmde.exe .

C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe

C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c aykepoywgzavoptln.exe

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe .

C:\Windows\hixuikxylhljfjqlqmde.exe

hixuikxylhljfjqlqmde.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\hixuikxylhljfjqlqmde.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe .

C:\Windows\aykepoywgzavoptln.exe

aykepoywgzavoptln.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\wyombesuifkjgltpvskmc.exe*."

C:\Windows\uuierseeqlolgjpjniy.exe

uuierseeqlolgjpjniy.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe .

C:\Windows\uuierseeqlolgjpjniy.exe

uuierseeqlolgjpjniy.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\uuierseeqlolgjpjniy.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .

C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe .

C:\Windows\tqbueclirjjdvvyp.exe

tqbueclirjjdvvyp.exe

C:\Windows\tqbueclirjjdvvyp.exe

tqbueclirjjdvvyp.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\uuierseeqlolgjpjniy.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe

C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe

C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .

C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe

C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\aykepoywgzavoptln.exe*."

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\jivqccnmxrtpjlqjmg.exe*."

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\tqbueclirjjdvvyp.exe*."

C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe

C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .

C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe

C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe

C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe

C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe*."

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\hixuikxylhljfjqlqmde.exe*."

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c aykepoywgzavoptln.exe

C:\Windows\aykepoywgzavoptln.exe

aykepoywgzavoptln.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe .

C:\Windows\uuierseeqlolgjpjniy.exe

uuierseeqlolgjpjniy.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\uuierseeqlolgjpjniy.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe

C:\Windows\wyombesuifkjgltpvskmc.exe

wyombesuifkjgltpvskmc.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe .

C:\Windows\hixuikxylhljfjqlqmde.exe

hixuikxylhljfjqlqmde.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe

C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe

C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\hixuikxylhljfjqlqmde.exe*."

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\wyombesuifkjgltpvskmc.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .

C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe

C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\uuierseeqlolgjpjniy.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe

C:\Windows\uuierseeqlolgjpjniy.exe

uuierseeqlolgjpjniy.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe .

C:\Windows\tqbueclirjjdvvyp.exe

tqbueclirjjdvvyp.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\tqbueclirjjdvvyp.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe

C:\Windows\tqbueclirjjdvvyp.exe

tqbueclirjjdvvyp.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe .

C:\Windows\wyombesuifkjgltpvskmc.exe

wyombesuifkjgltpvskmc.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\wyombesuifkjgltpvskmc.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .

C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Windows\wyombesuifkjgltpvskmc.exe

wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe

C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c jivqccnmxrtpjlqjmg.exe

C:\Windows\hixuikxylhljfjqlqmde.exe

hixuikxylhljfjqlqmde.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe*."

C:\Windows\jivqccnmxrtpjlqjmg.exe

jivqccnmxrtpjlqjmg.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\hixuikxylhljfjqlqmde.exe*."

C:\Windows\tqbueclirjjdvvyp.exe

tqbueclirjjdvvyp.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c aykepoywgzavoptln.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .

C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe

C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe

C:\Windows\hixuikxylhljfjqlqmde.exe

hixuikxylhljfjqlqmde.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe

C:\Windows\aykepoywgzavoptln.exe

aykepoywgzavoptln.exe .

C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe

C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\hixuikxylhljfjqlqmde.exe*."

C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\aykepoywgzavoptln.exe*."

C:\Windows\hixuikxylhljfjqlqmde.exe

hixuikxylhljfjqlqmde.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .

C:\Windows\wyombesuifkjgltpvskmc.exe

wyombesuifkjgltpvskmc.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\hixuikxylhljfjqlqmde.exe*."

C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe

C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe .

C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe

C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\wyombesuifkjgltpvskmc.exe*."

C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\uuierseeqlolgjpjniy.exe*."

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\hixuikxylhljfjqlqmde.exe*."

C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe

C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\jivqccnmxrtpjlqjmg.exe*."

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\jivqccnmxrtpjlqjmg.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c aykepoywgzavoptln.exe

C:\Windows\aykepoywgzavoptln.exe

aykepoywgzavoptln.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe .

C:\Windows\tqbueclirjjdvvyp.exe

tqbueclirjjdvvyp.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\tqbueclirjjdvvyp.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe

C:\Windows\tqbueclirjjdvvyp.exe

tqbueclirjjdvvyp.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe .

C:\Windows\tqbueclirjjdvvyp.exe

tqbueclirjjdvvyp.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\tqbueclirjjdvvyp.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .

C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe

C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\uuierseeqlolgjpjniy.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe

C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe

C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .

C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe

C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\uuierseeqlolgjpjniy.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c aykepoywgzavoptln.exe

C:\Windows\aykepoywgzavoptln.exe

aykepoywgzavoptln.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe .

C:\Windows\tqbueclirjjdvvyp.exe

tqbueclirjjdvvyp.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\tqbueclirjjdvvyp.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe

C:\Windows\wyombesuifkjgltpvskmc.exe

wyombesuifkjgltpvskmc.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe

C:\Windows\uuierseeqlolgjpjniy.exe

uuierseeqlolgjpjniy.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .

C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe

C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\uuierseeqlolgjpjniy.exe*."

C:\Windows\hixuikxylhljfjqlqmde.exe

hixuikxylhljfjqlqmde.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c jivqccnmxrtpjlqjmg.exe

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Windows\jivqccnmxrtpjlqjmg.exe

jivqccnmxrtpjlqjmg.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\wyombesuifkjgltpvskmc.exe*."

C:\Windows\tqbueclirjjdvvyp.exe

tqbueclirjjdvvyp.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe .

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c aykepoywgzavoptln.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe .

C:\Windows\uuierseeqlolgjpjniy.exe

uuierseeqlolgjpjniy.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c aykepoywgzavoptln.exe .

C:\Windows\uuierseeqlolgjpjniy.exe

uuierseeqlolgjpjniy.exe .

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe

C:\Windows\wyombesuifkjgltpvskmc.exe

wyombesuifkjgltpvskmc.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\tqbueclirjjdvvyp.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Windows\aykepoywgzavoptln.exe

aykepoywgzavoptln.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\aykepoywgzavoptln.exe*."

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\uuierseeqlolgjpjniy.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\wyombesuifkjgltpvskmc.exe*."

C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Windows\aykepoywgzavoptln.exe

aykepoywgzavoptln.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .

C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe

C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .

C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe

C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .

C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe

C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe .

C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe

C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe*."

C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe

C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\uuierseeqlolgjpjniy.exe*."

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\aykepoywgzavoptln.exe*."

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\jivqccnmxrtpjlqjmg.exe*."

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c jivqccnmxrtpjlqjmg.exe

C:\Windows\jivqccnmxrtpjlqjmg.exe

jivqccnmxrtpjlqjmg.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c jivqccnmxrtpjlqjmg.exe .

C:\Windows\jivqccnmxrtpjlqjmg.exe

jivqccnmxrtpjlqjmg.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tpftezlithjdvvyp.exe

C:\Windows\tpftezlithjdvvyp.exe

tpftezlithjdvvyp.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\jivqccnmxrtpjlqjmg.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c hhbtihxynfljfjqlqmdd.exe .

C:\Windows\tqbueclirjjdvvyp.exe

tqbueclirjjdvvyp.exe

C:\Windows\hhbtihxynfljfjqlqmdd.exe

hhbtihxynfljfjqlqmdd.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c jivqccnmxrtpjlqjmg.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c axodplywixavoptln.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .

C:\Windows\jivqccnmxrtpjlqjmg.exe

jivqccnmxrtpjlqjmg.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c jhzpcznmzptpjlqjmg.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\hhbtihxynfljfjqlqmdd.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hhbtihxynfljfjqlqmdd.exe

C:\Windows\axodplywixavoptln.exe

axodplywixavoptln.exe

C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe

C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\jivqccnmxrtpjlqjmg.exe*."

C:\Windows\jhzpcznmzptpjlqjmg.exe

jhzpcznmzptpjlqjmg.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\utmdrpeesjolgjpjniy.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\hhbtihxynfljfjqlqmdd.exe

C:\Users\Admin\AppData\Local\Temp\hhbtihxynfljfjqlqmdd.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\jhzpcznmzptpjlqjmg.exe*."

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\uuierseeqlolgjpjniy.exe*."

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\utmdrpeesjolgjpjniy.exe

C:\Users\Admin\AppData\Local\Temp\utmdrpeesjolgjpjniy.exe

C:\Users\Admin\AppData\Local\Temp\utmdrpeesjolgjpjniy.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jhzpcznmzptpjlqjmg.exe .

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\utmdrpeesjolgjpjniy.exe*."

C:\Users\Admin\AppData\Local\Temp\utmdrpeesjolgjpjniy.exe

C:\Users\Admin\AppData\Local\Temp\utmdrpeesjolgjpjniy.exe

C:\Users\Admin\AppData\Local\Temp\jhzpcznmzptpjlqjmg.exe

C:\Users\Admin\AppData\Local\Temp\jhzpcznmzptpjlqjmg.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\jivqccnmxrtpjlqjmg.exe*."

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\jhzpcznmzptpjlqjmg.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe

C:\Windows\wyombesuifkjgltpvskmc.exe

wyombesuifkjgltpvskmc.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe .

C:\Windows\tqbueclirjjdvvyp.exe

tqbueclirjjdvvyp.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\tqbueclirjjdvvyp.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c jivqccnmxrtpjlqjmg.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\wyombesuifkjgltpvskmc.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe

C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe

C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe

C:\Windows\hixuikxylhljfjqlqmde.exe

hixuikxylhljfjqlqmde.exe

C:\Windows\jivqccnmxrtpjlqjmg.exe

jivqccnmxrtpjlqjmg.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .

C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe

"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"

C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe

"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\jivqccnmxrtpjlqjmg.exe*."

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\wyombesuifkjgltpvskmc.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe

C:\Windows\hixuikxylhljfjqlqmde.exe

hixuikxylhljfjqlqmde.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c wxslbbsukdkjgltpvsklg.exe

C:\Windows\wxslbbsukdkjgltpvsklg.exe

wxslbbsukdkjgltpvsklg.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c aykepoywgzavoptln.exe .

C:\Windows\aykepoywgzavoptln.exe

aykepoywgzavoptln.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c utmdrpeesjolgjpjniy.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\aykepoywgzavoptln.exe*."

C:\Windows\utmdrpeesjolgjpjniy.exe

utmdrpeesjolgjpjniy.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c aykepoywgzavoptln.exe

C:\Windows\aykepoywgzavoptln.exe

aykepoywgzavoptln.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\utmdrpeesjolgjpjniy.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tpftezlithjdvvyp.exe

C:\Windows\tpftezlithjdvvyp.exe

tpftezlithjdvvyp.exe

C:\Windows\wyombesuifkjgltpvskmc.exe

wyombesuifkjgltpvskmc.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c axodplywixavoptln.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\axodplywixavoptln.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .

C:\Windows\axodplywixavoptln.exe

axodplywixavoptln.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\wyombesuifkjgltpvskmc.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jhzpcznmzptpjlqjmg.exe .

C:\Users\Admin\AppData\Local\Temp\axodplywixavoptln.exe

C:\Users\Admin\AppData\Local\Temp\axodplywixavoptln.exe

C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe

C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .

C:\Users\Admin\AppData\Local\Temp\jhzpcznmzptpjlqjmg.exe

C:\Users\Admin\AppData\Local\Temp\jhzpcznmzptpjlqjmg.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\axodplywixavoptln.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\hixuikxylhljfjqlqmde.exe*."

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\jhzpcznmzptpjlqjmg.exe*."

C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe

C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\utmdrpeesjolgjpjniy.exe

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe

"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"

C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe

C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .

C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe

"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\axodplywixavoptln.exe .

C:\Users\Admin\AppData\Local\Temp\utmdrpeesjolgjpjniy.exe

C:\Users\Admin\AppData\Local\Temp\utmdrpeesjolgjpjniy.exe

C:\Users\Admin\AppData\Local\Temp\axodplywixavoptln.exe

C:\Users\Admin\AppData\Local\Temp\axodplywixavoptln.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe*."

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\axodplywixavoptln.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe

C:\Windows\hixuikxylhljfjqlqmde.exe

hixuikxylhljfjqlqmde.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe .

C:\Windows\uuierseeqlolgjpjniy.exe

uuierseeqlolgjpjniy.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\uuierseeqlolgjpjniy.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c aykepoywgzavoptln.exe

C:\Windows\aykepoywgzavoptln.exe

aykepoywgzavoptln.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe .

C:\Windows\wyombesuifkjgltpvskmc.exe

wyombesuifkjgltpvskmc.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\wyombesuifkjgltpvskmc.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe .

C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\aykepoywgzavoptln.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe .

C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe .

C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe

"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"

C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe

"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\aykepoywgzavoptln.exe*."

C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe

"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"

C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe

"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe

C:\Windows\uuierseeqlolgjpjniy.exe

uuierseeqlolgjpjniy.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe .

C:\Windows\wyombesuifkjgltpvskmc.exe

wyombesuifkjgltpvskmc.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\wyombesuifkjgltpvskmc.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe .

C:\Windows\hixuikxylhljfjqlqmde.exe

hixuikxylhljfjqlqmde.exe

C:\Windows\hixuikxylhljfjqlqmde.exe

hixuikxylhljfjqlqmde.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\hixuikxylhljfjqlqmde.exe*."

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\wyombesuifkjgltpvskmc.exe*."

C:\Windows\uuierseeqlolgjpjniy.exe

uuierseeqlolgjpjniy.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c aykepoywgzavoptln.exe

C:\Windows\aykepoywgzavoptln.exe

aykepoywgzavoptln.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c jivqccnmxrtpjlqjmg.exe .

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .

C:\Windows\jivqccnmxrtpjlqjmg.exe

jivqccnmxrtpjlqjmg.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe .

C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe

C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\jivqccnmxrtpjlqjmg.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe

C:\Windows\uuierseeqlolgjpjniy.exe

uuierseeqlolgjpjniy.exe .

C:\Windows\wyombesuifkjgltpvskmc.exe

wyombesuifkjgltpvskmc.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe .

C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe

"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"

C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe

"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\hixuikxylhljfjqlqmde.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe

C:\Windows\wyombesuifkjgltpvskmc.exe

wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\uuierseeqlolgjpjniy.exe*."

C:\Windows\tqbueclirjjdvvyp.exe

tqbueclirjjdvvyp.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .

C:\Windows\uuierseeqlolgjpjniy.exe

uuierseeqlolgjpjniy.exe .

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe .

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .

C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe

C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\tqbueclirjjdvvyp.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\uuierseeqlolgjpjniy.exe*."

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\jaffacakes118_ba533ed647781b66a16904d7c4224982.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\jivqccnmxrtpjlqjmg.exe*."

C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe

C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\wyombesuifkjgltpvskmc.exe*."

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .

C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe

C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\wyombesuifkjgltpvskmc.exe*."

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c jivqccnmxrtpjlqjmg.exe

C:\Windows\jivqccnmxrtpjlqjmg.exe

jivqccnmxrtpjlqjmg.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe .

C:\Windows\uuierseeqlolgjpjniy.exe

uuierseeqlolgjpjniy.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\uuierseeqlolgjpjniy.exe*."

C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe

"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"

C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe

"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c aykepoywgzavoptln.exe

C:\Windows\aykepoywgzavoptln.exe

aykepoywgzavoptln.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe .

C:\Windows\uuierseeqlolgjpjniy.exe

uuierseeqlolgjpjniy.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe

C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe

C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\uuierseeqlolgjpjniy.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe .

C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\aykepoywgzavoptln.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe .

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\jivqccnmxrtpjlqjmg.exe*."

C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe

"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"

C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe

"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"

C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe

"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"

C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe

"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c hhbtihxynfljfjqlqmdd.exe

C:\Windows\hhbtihxynfljfjqlqmdd.exe

hhbtihxynfljfjqlqmdd.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tpftezlithjdvvyp.exe .

C:\Windows\tpftezlithjdvvyp.exe

tpftezlithjdvvyp.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\tpftezlithjdvvyp.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tpftezlithjdvvyp.exe

C:\Windows\tpftezlithjdvvyp.exe

tpftezlithjdvvyp.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c axodplywixavoptln.exe .

C:\Windows\axodplywixavoptln.exe

axodplywixavoptln.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tpftezlithjdvvyp.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\axodplywixavoptln.exe*."

C:\Users\Admin\AppData\Local\Temp\tpftezlithjdvvyp.exe

C:\Users\Admin\AppData\Local\Temp\tpftezlithjdvvyp.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tpftezlithjdvvyp.exe .

C:\Users\Admin\AppData\Local\Temp\tpftezlithjdvvyp.exe

C:\Users\Admin\AppData\Local\Temp\tpftezlithjdvvyp.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c aykepoywgzavoptln.exe

C:\Windows\aykepoywgzavoptln.exe

aykepoywgzavoptln.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\tpftezlithjdvvyp.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe .

C:\Windows\hixuikxylhljfjqlqmde.exe

hixuikxylhljfjqlqmde.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hhbtihxynfljfjqlqmdd.exe

C:\Users\Admin\AppData\Local\Temp\hhbtihxynfljfjqlqmdd.exe

C:\Users\Admin\AppData\Local\Temp\hhbtihxynfljfjqlqmdd.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\hixuikxylhljfjqlqmde.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\axodplywixavoptln.exe .

C:\Users\Admin\AppData\Local\Temp\axodplywixavoptln.exe

C:\Users\Admin\AppData\Local\Temp\axodplywixavoptln.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe

C:\Windows\hixuikxylhljfjqlqmde.exe

hixuikxylhljfjqlqmde.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\axodplywixavoptln.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe .

C:\Windows\wyombesuifkjgltpvskmc.exe

wyombesuifkjgltpvskmc.exe .

C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe

"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"

C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe

"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\wyombesuifkjgltpvskmc.exe*."

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\wyombesuifkjgltpvskmc.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe

C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe

C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\wyombesuifkjgltpvskmc.exe*."

C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe

"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"

C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe

"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"

C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe

"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"

C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe

"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe

C:\Windows\hixuikxylhljfjqlqmde.exe

hixuikxylhljfjqlqmde.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe .

C:\Windows\tqbueclirjjdvvyp.exe

tqbueclirjjdvvyp.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\tqbueclirjjdvvyp.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe

C:\Windows\uuierseeqlolgjpjniy.exe

uuierseeqlolgjpjniy.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c jivqccnmxrtpjlqjmg.exe .

C:\Windows\jivqccnmxrtpjlqjmg.exe

jivqccnmxrtpjlqjmg.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\jivqccnmxrtpjlqjmg.exe*."

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .

C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe

C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe

C:\Windows\hixuikxylhljfjqlqmde.exe

hixuikxylhljfjqlqmde.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\uuierseeqlolgjpjniy.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tqbueclirjjdvvyp.exe .

C:\Windows\tqbueclirjjdvvyp.exe

tqbueclirjjdvvyp.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\tqbueclirjjdvvyp.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe .

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe

C:\Windows\hixuikxylhljfjqlqmde.exe

hixuikxylhljfjqlqmde.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c jivqccnmxrtpjlqjmg.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\jivqccnmxrtpjlqjmg.exe*."

C:\Windows\uuierseeqlolgjpjniy.exe

uuierseeqlolgjpjniy.exe

C:\Windows\jivqccnmxrtpjlqjmg.exe

jivqccnmxrtpjlqjmg.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .

C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Windows\uuierseeqlolgjpjniy.exe

uuierseeqlolgjpjniy.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\jivqccnmxrtpjlqjmg.exe*."

C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe

C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe

C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe

"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\uuierseeqlolgjpjniy.exe*."

C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe

"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"

C:\Windows\hixuikxylhljfjqlqmde.exe

hixuikxylhljfjqlqmde.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\uuierseeqlolgjpjniy.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Windows\wyombesuifkjgltpvskmc.exe

wyombesuifkjgltpvskmc.exe .

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe .

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\wyombesuifkjgltpvskmc.exe*."

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe .

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\jivqccnmxrtpjlqjmg.exe*."

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\wyombesuifkjgltpvskmc.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Users\Admin\AppData\Local\Temp\jivqccnmxrtpjlqjmg.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .

C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe

C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\hixuikxylhljfjqlqmde.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe

C:\Windows\hixuikxylhljfjqlqmde.exe

hixuikxylhljfjqlqmde.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe .

C:\Windows\uuierseeqlolgjpjniy.exe

uuierseeqlolgjpjniy.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\uuierseeqlolgjpjniy.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c aykepoywgzavoptln.exe

C:\Windows\aykepoywgzavoptln.exe

aykepoywgzavoptln.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c jivqccnmxrtpjlqjmg.exe .

C:\Windows\jivqccnmxrtpjlqjmg.exe

jivqccnmxrtpjlqjmg.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\jivqccnmxrtpjlqjmg.exe*."

C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe

C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .

C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe

C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe*."

C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe

"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"

C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe

"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Users\Admin\AppData\Local\Temp\wyombesuifkjgltpvskmc.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .

C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe

C:\Users\Admin\AppData\Local\Temp\uuierseeqlolgjpjniy.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\uuierseeqlolgjpjniy.exe*."

C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe

"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"

C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe

"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"

C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe

"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"

C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe

"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tpftezlithjdvvyp.exe

C:\Windows\tpftezlithjdvvyp.exe

tpftezlithjdvvyp.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c axodplywixavoptln.exe .

C:\Windows\axodplywixavoptln.exe

axodplywixavoptln.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\axodplywixavoptln.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c axodplywixavoptln.exe

C:\Windows\axodplywixavoptln.exe

axodplywixavoptln.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c tpftezlithjdvvyp.exe .

C:\Windows\tpftezlithjdvvyp.exe

tpftezlithjdvvyp.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wxslbbsukdkjgltpvsklg.exe

C:\Users\Admin\AppData\Local\Temp\wxslbbsukdkjgltpvsklg.exe

C:\Users\Admin\AppData\Local\Temp\wxslbbsukdkjgltpvsklg.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\tpftezlithjdvvyp.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\wxslbbsukdkjgltpvsklg.exe .

C:\Users\Admin\AppData\Local\Temp\wxslbbsukdkjgltpvsklg.exe

C:\Users\Admin\AppData\Local\Temp\wxslbbsukdkjgltpvsklg.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c hixuikxylhljfjqlqmde.exe

C:\Windows\hixuikxylhljfjqlqmde.exe

hixuikxylhljfjqlqmde.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\wxslbbsukdkjgltpvsklg.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c uuierseeqlolgjpjniy.exe .

C:\Windows\uuierseeqlolgjpjniy.exe

uuierseeqlolgjpjniy.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hhbtihxynfljfjqlqmdd.exe

C:\Users\Admin\AppData\Local\Temp\hhbtihxynfljfjqlqmdd.exe

C:\Users\Admin\AppData\Local\Temp\hhbtihxynfljfjqlqmdd.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\uuierseeqlolgjpjniy.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hhbtihxynfljfjqlqmdd.exe .

C:\Users\Admin\AppData\Local\Temp\hhbtihxynfljfjqlqmdd.exe

C:\Users\Admin\AppData\Local\Temp\hhbtihxynfljfjqlqmdd.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c wyombesuifkjgltpvskmc.exe

C:\Windows\wyombesuifkjgltpvskmc.exe

wyombesuifkjgltpvskmc.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c jivqccnmxrtpjlqjmg.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\hhbtihxynfljfjqlqmdd.exe*."

C:\Windows\jivqccnmxrtpjlqjmg.exe

jivqccnmxrtpjlqjmg.exe .

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Users\Admin\AppData\Local\Temp\aykepoywgzavoptln.exe

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\windows\jivqccnmxrtpjlqjmg.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .

C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe

C:\Users\Admin\AppData\Local\Temp\hixuikxylhljfjqlqmde.exe .

C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe

"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"

C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe

"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\hixuikxylhljfjqlqmde.exe*."

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe

C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe

C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .

C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe

C:\Users\Admin\AppData\Local\Temp\tqbueclirjjdvvyp.exe .

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

"C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe" "c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe*."

C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe

"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"

C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe

"C:\Users\Admin\AppData\Local\Temp\uhotvhk.exe" "-c:\users\admin\appdata\local\temp\tqbueclirjjdvvyp.exe"

Network

Country Destination Domain Proto
US 8.8.8.8:53 whatismyipaddress.com udp
US 104.19.222.79:80 whatismyipaddress.com tcp
US 172.66.40.87:80 www.whatismyip.com tcp
US 172.66.40.87:80 www.whatismyip.com tcp
US 172.66.40.87:80 www.whatismyip.com tcp
US 104.21.74.56:80 www.showmyipaddress.com tcp
US 104.19.222.79:80 whatismyipaddress.com tcp
US 104.21.74.56:80 www.showmyipaddress.com tcp
US 104.21.74.56:80 www.showmyipaddress.com tcp
US 104.21.74.56:80 www.showmyipaddress.com tcp
US 104.19.222.79:80 whatismyipaddress.com tcp
US 104.21.74.56:80 www.showmyipaddress.com tcp
US 172.66.40.87:80 www.whatismyip.com tcp
US 104.21.74.56:80 www.showmyipaddress.com tcp
US 104.21.74.56:80 www.showmyipaddress.com tcp
GB 2.18.190.16:80 www.adobe.com tcp
NL 142.251.31.191:80 www.blogger.com tcp
BG 77.70.86.216:27898 tcp
DE 85.214.228.140:80 gyuuym.org tcp
SG 18.142.91.111:80 unxfuild.info tcp
US 104.156.155.94:80 cydlrge.info tcp
BG 130.204.14.137:40490 tcp
US 8.8.8.8:53 dkouvubcpovf.info udp
BG 93.123.117.137:37152 tcp
US 8.8.8.8:53 shkwzbzvtq.net udp
US 8.8.8.8:53 obbszgo.net udp
LT 78.60.144.178:22356 tcp
US 8.8.8.8:53 tznhqmcudnp.net udp
US 8.8.8.8:53 qtgqqinahbp.info udp
US 8.8.8.8:53 zhowjanoqoz.com udp
LT 78.58.69.254:21366 tcp
US 8.8.8.8:53 aklexmh.info udp
US 8.8.8.8:53 juhlnsnj.net udp
BG 212.104.116.212:26364 tcp
US 8.8.8.8:53 gmwmaq.com udp
LT 85.232.129.77:42551 tcp
US 8.8.8.8:53 ymtifby.net udp
US 8.8.8.8:53 fsjetusuqou.org udp
US 8.8.8.8:53 rqndcgnz.net udp
US 8.8.8.8:53 swudbkx.net udp
LV 87.226.55.160:13302 tcp
US 8.8.8.8:53 ycrgpbohfjxe.info udp
US 8.8.8.8:53 ceaoygcy.org udp
US 8.8.8.8:53 mzmnhc.net udp
US 8.8.8.8:53 wkygqmmueoum.org udp
US 8.8.8.8:53 xsmoqckjdalf.net udp
US 8.8.8.8:53 xmlymtnez.org udp
US 8.8.8.8:53 wyatnhwcrd.info udp
US 8.8.8.8:53 yacuec.com udp
US 8.8.8.8:53 odzbrjqoy.info udp
US 8.8.8.8:53 tpsleabzwt.net udp
BG 46.237.76.193:14690 tcp
US 8.8.8.8:53 wkrezkqou.info udp
US 8.8.8.8:53 dsjrtuyu.info udp
US 8.8.8.8:53 amrdmwbgvlpy.info udp
US 8.8.8.8:53 mcgccnhqx.net udp
US 8.8.8.8:53 dcjztqe.org udp
US 8.8.8.8:53 wulevitknsr.info udp
US 8.8.8.8:53 aalijqi.info udp
US 8.8.8.8:53 wohvtggswc.net udp
US 8.8.8.8:53 lxaqqgqteb.info udp
US 8.8.8.8:53 wqagiaoesm.com udp
US 8.8.8.8:53 odqisf.info udp
US 8.8.8.8:53 zuxwxedwiz.net udp
US 8.8.8.8:53 jkluafvavt.info udp
US 8.8.8.8:53 ncpmyszzt.info udp
US 8.8.8.8:53 lwnrxkmfyxdm.net udp
US 8.8.8.8:53 dmyivsoe.net udp
US 8.8.8.8:53 amoaksmnzpg.info udp
US 8.8.8.8:53 xefhntnqlzid.info udp
US 8.8.8.8:53 iwynktft.info udp
US 8.8.8.8:53 emugmamy.com udp
US 8.8.8.8:53 ayskdej.info udp
US 8.8.8.8:53 qllzylttij.info udp
US 8.8.8.8:53 ybxsqlwexbnh.info udp
US 8.8.8.8:53 vtpvzvyr.net udp
US 8.8.8.8:53 xaxdte.net udp
US 8.8.8.8:53 oxlkbbn.info udp
US 8.8.8.8:53 xhmnyh.net udp
US 8.8.8.8:53 kkiamiym.com udp
US 8.8.8.8:53 aqaxfmzzhf.info udp
US 8.8.8.8:53 kbujjwmp.info udp
US 8.8.8.8:53 rqlmtwczxcj.info udp
US 8.8.8.8:53 ukzdgwrr.info udp
US 8.8.8.8:53 weqalejos.net udp
US 8.8.8.8:53 wltdfb.info udp
US 8.8.8.8:53 oaykua.org udp
US 8.8.8.8:53 jatdaajehomt.net udp
US 8.8.8.8:53 ceyemmcsec.com udp
US 8.8.8.8:53 wwqekgiaoo.org udp
US 8.8.8.8:53 xgqiraqkg.net udp
US 8.8.8.8:53 lxzkvlxv.info udp
US 8.8.8.8:53 mwgkuyee.org udp
US 8.8.8.8:53 ccaoikuaak.org udp
US 8.8.8.8:53 luqmqmvtdotq.info udp
US 8.8.8.8:53 mqpwpsb.info udp
US 8.8.8.8:53 fmzshjzsh.info udp
US 8.8.8.8:53 uiceesz.info udp
US 8.8.8.8:53 mhuaeblg.info udp
US 8.8.8.8:53 uglgysz.net udp
US 8.8.8.8:53 rrzzjmp.org udp
US 8.8.8.8:53 jdxzvf.info udp
US 8.8.8.8:53 svlxsb.info udp
US 8.8.8.8:53 bzaydhbkyko.info udp
US 8.8.8.8:53 nmrmhfg.com udp
US 8.8.8.8:53 cqoqzsjyv.info udp
US 8.8.8.8:53 uoxjsmld.info udp
US 8.8.8.8:53 vzopzr.net udp
US 8.8.8.8:53 magkcs.org udp
US 8.8.8.8:53 lufehavwf.com udp
US 8.8.8.8:53 nusgja.info udp
US 8.8.8.8:53 uamsxmb.info udp
US 8.8.8.8:53 wefdsas.info udp
US 8.8.8.8:53 jvvnojgo.info udp
US 8.8.8.8:53 amwcuq.org udp
US 8.8.8.8:53 znpajjjf.net udp
US 8.8.8.8:53 bjpwlrlwpx.net udp
US 8.8.8.8:53 eeficnc.net udp
US 8.8.8.8:53 zgjids.info udp
US 8.8.8.8:53 votutgz.org udp
US 8.8.8.8:53 xoplhvnkl.org udp
US 8.8.8.8:53 qwyqykuuke.com udp
US 8.8.8.8:53 bfpngizcbysc.info udp
US 8.8.8.8:53 wesuek.org udp
US 8.8.8.8:53 xfhytbpfhgtl.net udp
US 8.8.8.8:53 fnxlvlzveg.net udp
US 8.8.8.8:53 ielwtwggm.net udp
US 8.8.8.8:53 sewuvwb.net udp
US 8.8.8.8:53 cmquys.com udp
US 8.8.8.8:53 oaewcmmi.com udp
US 8.8.8.8:53 qywoaooq.com udp
US 8.8.8.8:53 xmfklibnpwx.info udp
US 8.8.8.8:53 awtkltffriwv.net udp
US 8.8.8.8:53 ryjuxr.net udp
US 8.8.8.8:53 txmexi.info udp
US 8.8.8.8:53 akwcwcokomwc.com udp
US 8.8.8.8:53 oalwpcngx.info udp
US 8.8.8.8:53 ndskzjkz.info udp
US 8.8.8.8:53 komdnvwjqn.info udp
US 8.8.8.8:53 amvzinfdpif.net udp
US 8.8.8.8:53 eoronncfjrvp.info udp
US 8.8.8.8:53 xcrfxbihvn.info udp
US 8.8.8.8:53 lqgwpivc.info udp
US 8.8.8.8:53 qegmeoyoce.com udp
US 8.8.8.8:53 zywafih.org udp
US 8.8.8.8:53 pvesxitaordl.info udp
US 8.8.8.8:53 jkxhcxdw.info udp
US 8.8.8.8:53 lfvmkwjktkrd.info udp
US 8.8.8.8:53 lzkejad.net udp
US 8.8.8.8:53 wagnkr.net udp
US 8.8.8.8:53 zmtakgjyi.info udp
US 8.8.8.8:53 mkvidwfwn.net udp
US 8.8.8.8:53 dzrmxez.com udp
US 8.8.8.8:53 sejhfet.net udp
US 8.8.8.8:53 xxippgqmf.info udp
US 8.8.8.8:53 eotjvfxkslqt.info udp
US 8.8.8.8:53 bmbwdylrepz.info udp
US 8.8.8.8:53 kxldwaoqfn.info udp
US 8.8.8.8:53 keooma.com udp
US 8.8.8.8:53 burebifkger.info udp
US 8.8.8.8:53 hovsfqats.org udp
US 8.8.8.8:53 xxbuvavqnao.net udp
US 8.8.8.8:53 gzdmvu.info udp
US 8.8.8.8:53 yupaygisawr.net udp
US 8.8.8.8:53 tgzzsilpuoyu.info udp
US 8.8.8.8:53 qkimmsqs.com udp
US 8.8.8.8:53 vgjkbrcihsgz.info udp
US 8.8.8.8:53 jyadjhdov.net udp
US 8.8.8.8:53 rejwrwpoa.info udp
US 8.8.8.8:53 xcbaidt.org udp
US 8.8.8.8:53 lclvhl.net udp
LT 87.247.122.120:16314 tcp
US 8.8.8.8:53 ykpkjnt.info udp
US 8.8.8.8:53 seysumkoeq.com udp
US 8.8.8.8:53 ocvixolcl.info udp
US 8.8.8.8:53 kqwnmebvkl.info udp
US 8.8.8.8:53 wojwpctclqr.info udp
US 8.8.8.8:53 bqhkyvky.net udp
US 8.8.8.8:53 nnwrbnbfrr.info udp
US 8.8.8.8:53 jmuyzwjxj.net udp
US 8.8.8.8:53 oyysmggssu.com udp

Files

C:\Users\Admin\AppData\Local\Temp\apcxvhdqkzm.exe

MD5 5203b6ea0901877fbf2d8d6f6d8d338e
SHA1 c803e92561921b38abe13239c1fd85605b570936
SHA256 0cc02d34d5fd4cf892fed282f98c1ad3e7dd6159a8877ae5c46d3f834ed36060
SHA512 d48a41b4fc4c38a6473f789c02918fb7353a4b4199768a3624f3b685d91d38519887a1ccd3616e0d2b079a346afaec5a0f2ef2c46d72d3097ef561cedb476471

C:\Windows\SysWOW64\jivqccnmxrtpjlqjmg.exe

MD5 ba533ed647781b66a16904d7c4224982
SHA1 b066d05818ed3d018f37e96181e483b4db6d044a
SHA256 a667e8a91cbf3fb5b36ba4f31982e8315cd391968abb73bc038b4398b2693ffb
SHA512 e63ca8095183da04fea8f3ddef58b4aa852ca27b5ad18a38e697b94de45331e1f8a13351838936eefe6127e17e02bf221c0d7c71f3c747665770baf36f842f1f

C:\Users\Admin\AppData\Local\Temp\uikuvkk.exe

MD5 abc1dc99856172ac71fa90d6b15221a8
SHA1 ef0f673cbe9d389afc11fd833e133d3348921df7
SHA256 d4bbfb7fad353baa9609389dcfdcccbb3aaba7ee308f04413b9a2a80e7483dab
SHA512 1d52971155884ddfa2ba56d1ca0c99c638070cd9dd75da507ed71e96eefe910c724bde25590a313dd13a30201c9223433cba8efa5c687ceb0503969cf0afcf84

C:\Users\Admin\AppData\Local\okumvsawevunedfvvmyuewfckgofexonpffwi.ogp

MD5 1a889b449c8672cfeeaf256505ae5d42
SHA1 a48b8075f5aae2dac4c6dd3288423bfd4893ff26
SHA256 f774d45ee822b04ea886f70ccdc86ee22796fa28e9adc86fa0a79c1774706dac
SHA512 4fd8835d0db5873acee6ae289aa26e61b897774a80bd45cccc993f37e262c8e646dc9e93f48cab7e56445b5e09234f80391693baa96d0dc53efead2259f540bf

C:\Users\Admin\AppData\Local\nyxecolwtznvbpglaghsrywifq.thp

MD5 f773f66ccfb5a2556b762c0d2ab82633
SHA1 5710911f95258c67c89950ca4b622deec64d3106
SHA256 de1bd071c0e0dd3cb8bfa3396b01e537cdfd93d5b047edec47cc51b293008557
SHA512 25e4bd804cffd5c35edff72ceec6ddc5ed5fe07172f83dca10256fb6fcbb12e734ac7fc917fe73ebc7d2215bcbc45c91dbff2abf8c9b023d072c2491ff379ffa

C:\Program Files (x86)\nyxecolwtznvbpglaghsrywifq.thp

MD5 465c66a1bce818f5388dd4a84860cdf9
SHA1 6d180384ecda63459a8f28c8df0062d515b90b56
SHA256 b45ca98b36f1aad55263e3b6374384faad3fdd301bdb1e2d1b2a8b64f576c6f7
SHA512 78475ec62117540cdd7d7960c623dcd671671edb8ba19199d8702c0e24541ac9fff07c098b30586986280000f9adc77695a1c8f2c1751eb29e08d9ce216df059

C:\Users\Admin\AppData\Local\nyxecolwtznvbpglaghsrywifq.thp

MD5 999af9517fb9cbebfa5b971b8b343418
SHA1 1bb77918e9fa2c1e2e8882dddd943eba74316824
SHA256 41d202b06a4a8fd035feadf7132475ea68aa554daefdcae95f33c35185995204
SHA512 51cd963dae13504ae7fb0945eab4eacc8bc24e43923c5fbb2d629a74e67ce1abcb705578433736162dd4f4fff0279f517fa96160818e9b433d474c8875591486

C:\Program Files (x86)\nyxecolwtznvbpglaghsrywifq.thp

MD5 e0159dfb5742ed6cf4ca506c39c13814
SHA1 25a5ea71c5ed9f8d8d994cdc2a5bed2350ffb133
SHA256 812bf9f81fbd97dab635f90382ffada4f518ba17c58237211150ee9bd6acd5b5
SHA512 31aa947fc6d558ba3a36db65d3095c64b8524640ac7a5b2c71e5ab5b014f8e20358b4e8d9f4c75fef263db623eae7c2c9ba5ab0756fabf724cd142057d4c1351

C:\Program Files (x86)\nyxecolwtznvbpglaghsrywifq.thp

MD5 a978d7054938281c5c14bbc3789ef7eb
SHA1 b35ad0c7e55ee3a99a890d66ef1564e39964f005
SHA256 d7469ac7c78e210d65f451b64ca01d5d083349e4a97fb43b13e47c9808ed6633
SHA512 f18a0688e723445cf543a2b77928d851f805b1e88a46466c45672a67a7013e216992c243fe762258ef62df61743bce4bcee101d0ad01f194464c2322ae62534e