16346ed15b2d60e072d99cd110e29c8bef43483b9f8a5f9246123750bc0073d6

Analysis

max time kernel
151s
max time network
87s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
28/10/2022, 14:47

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

file.exe
Size

626KB
MD5

031281aa0667cba260ddad6f77c89ccd
SHA1

17b747e3e1de9296f862d522a9664046d2d3469e
SHA256

16346ed15b2d60e072d99cd110e29c8bef43483b9f8a5f9246123750bc0073d6
SHA512

f4715533c2f535964dc98f581887abc1a9daf68f913b9b316762ddf169b4209458fbeebed8173fca65c7d4732087bf0b0e4369fa440cebd45772d77559820ea2
SSDEEP

12288:bItKcNGvH3x+D0NDO6D7zkoT+lqp/7Iu/O2ybZx9Y9rl7jjGHS:bItK9H3xbJZlT+lQTD/O3BArRCHS

Score

8^/10

Malware Config

Signatures

Executes dropped EXE 64 IoCs

pid	Process
1336	mwfkiq.exe
1112	mwfkiq.exe
1796	mwfkiq.exe
792	mwfkiq.exe
1740	mwfkiq.exe
1764	mwfkiq.exe
992	mwfkiq.exe
1732	mwfkiq.exe
1964	mwfkiq.exe
980	mwfkiq.exe
672	mwfkiq.exe
1704	mwfkiq.exe
1184	mwfkiq.exe
1672	mwfkiq.exe
1084	mwfkiq.exe
1924	mwfkiq.exe
1800	mwfkiq.exe
1876	mwfkiq.exe
1688	mwfkiq.exe
960	mwfkiq.exe
1552	mwfkiq.exe
1976	mwfkiq.exe
1512	mwfkiq.exe
604	mwfkiq.exe
1248	mwfkiq.exe
1624	mwfkiq.exe
828	mwfkiq.exe
1052	mwfkiq.exe
1604	mwfkiq.exe
1000	mwfkiq.exe
864	mwfkiq.exe
1632	mwfkiq.exe
1464	mwfkiq.exe
360	mwfkiq.exe
1996	mwfkiq.exe
1784	mwfkiq.exe
1488	mwfkiq.exe
1756	mwfkiq.exe
1812	mwfkiq.exe
1860	mwfkiq.exe
1520	mwfkiq.exe
2012	mwfkiq.exe
1564	mwfkiq.exe
1592	mwfkiq.exe
624	mwfkiq.exe
1588	mwfkiq.exe
1352	mwfkiq.exe
968	mwfkiq.exe
1108	mwfkiq.exe
1936	mwfkiq.exe
1744	mwfkiq.exe
888	mwfkiq.exe
1460	mwfkiq.exe
1796	mwfkiq.exe
956	mwfkiq.exe
964	mwfkiq.exe
1620	mwfkiq.exe
972	mwfkiq.exe
1724	mwfkiq.exe
952	mwfkiq.exe
1568	mwfkiq.exe
1172	mwfkiq.exe
1188	mwfkiq.exe
1696	mwfkiq.exe

Loads dropped DLL 64 IoCs

pid	Process
1388	file.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

Suspicious behavior: MapViewOfSection 64 IoCs

pid	Process
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe
1336	mwfkiq.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
1336	mwfkiq.exe
1336	mwfkiq.exe

Suspicious use of SendNotifyMessage 2 IoCs

pid	Process
1336	mwfkiq.exe
1336	mwfkiq.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1388 wrote to memory of 1336	1388	file.exe	26
PID 1388 wrote to memory of 1336	1388	file.exe	26
PID 1388 wrote to memory of 1336	1388	file.exe	26
PID 1388 wrote to memory of 1336	1388	file.exe	26
PID 1336 wrote to memory of 1112	1336	mwfkiq.exe	27
PID 1336 wrote to memory of 1112	1336	mwfkiq.exe	27
PID 1336 wrote to memory of 1112	1336	mwfkiq.exe	27
PID 1336 wrote to memory of 1112	1336	mwfkiq.exe	27
PID 1336 wrote to memory of 1112	1336	mwfkiq.exe	27
PID 1336 wrote to memory of 1796	1336	mwfkiq.exe	28
PID 1336 wrote to memory of 1796	1336	mwfkiq.exe	28
PID 1336 wrote to memory of 1796	1336	mwfkiq.exe	28
PID 1336 wrote to memory of 1796	1336	mwfkiq.exe	28
PID 1336 wrote to memory of 1796	1336	mwfkiq.exe	28
PID 1336 wrote to memory of 792	1336	mwfkiq.exe	29
PID 1336 wrote to memory of 792	1336	mwfkiq.exe	29
PID 1336 wrote to memory of 792	1336	mwfkiq.exe	29
PID 1336 wrote to memory of 792	1336	mwfkiq.exe	29
PID 1336 wrote to memory of 792	1336	mwfkiq.exe	29
PID 1336 wrote to memory of 1740	1336	mwfkiq.exe	30
PID 1336 wrote to memory of 1740	1336	mwfkiq.exe	30
PID 1336 wrote to memory of 1740	1336	mwfkiq.exe	30
PID 1336 wrote to memory of 1740	1336	mwfkiq.exe	30
PID 1336 wrote to memory of 1740	1336	mwfkiq.exe	30
PID 1336 wrote to memory of 1764	1336	mwfkiq.exe	31
PID 1336 wrote to memory of 1764	1336	mwfkiq.exe	31
PID 1336 wrote to memory of 1764	1336	mwfkiq.exe	31
PID 1336 wrote to memory of 1764	1336	mwfkiq.exe	31
PID 1336 wrote to memory of 1764	1336	mwfkiq.exe	31
PID 1336 wrote to memory of 992	1336	mwfkiq.exe	32
PID 1336 wrote to memory of 992	1336	mwfkiq.exe	32
PID 1336 wrote to memory of 992	1336	mwfkiq.exe	32
PID 1336 wrote to memory of 992	1336	mwfkiq.exe	32
PID 1336 wrote to memory of 992	1336	mwfkiq.exe	32
PID 1336 wrote to memory of 1732	1336	mwfkiq.exe	33
PID 1336 wrote to memory of 1732	1336	mwfkiq.exe	33
PID 1336 wrote to memory of 1732	1336	mwfkiq.exe	33
PID 1336 wrote to memory of 1732	1336	mwfkiq.exe	33
PID 1336 wrote to memory of 1732	1336	mwfkiq.exe	33
PID 1336 wrote to memory of 1964	1336	mwfkiq.exe	34
PID 1336 wrote to memory of 1964	1336	mwfkiq.exe	34
PID 1336 wrote to memory of 1964	1336	mwfkiq.exe	34
PID 1336 wrote to memory of 1964	1336	mwfkiq.exe	34
PID 1336 wrote to memory of 1964	1336	mwfkiq.exe	34
PID 1336 wrote to memory of 980	1336	mwfkiq.exe	35
PID 1336 wrote to memory of 980	1336	mwfkiq.exe	35
PID 1336 wrote to memory of 980	1336	mwfkiq.exe	35
PID 1336 wrote to memory of 980	1336	mwfkiq.exe	35
PID 1336 wrote to memory of 980	1336	mwfkiq.exe	35
PID 1336 wrote to memory of 672	1336	mwfkiq.exe	36
PID 1336 wrote to memory of 672	1336	mwfkiq.exe	36
PID 1336 wrote to memory of 672	1336	mwfkiq.exe	36
PID 1336 wrote to memory of 672	1336	mwfkiq.exe	36
PID 1336 wrote to memory of 672	1336	mwfkiq.exe	36
PID 1336 wrote to memory of 1704	1336	mwfkiq.exe	37
PID 1336 wrote to memory of 1704	1336	mwfkiq.exe	37
PID 1336 wrote to memory of 1704	1336	mwfkiq.exe	37
PID 1336 wrote to memory of 1704	1336	mwfkiq.exe	37
PID 1336 wrote to memory of 1704	1336	mwfkiq.exe	37
PID 1336 wrote to memory of 1184	1336	mwfkiq.exe	38
PID 1336 wrote to memory of 1184	1336	mwfkiq.exe	38
PID 1336 wrote to memory of 1184	1336	mwfkiq.exe	38
PID 1336 wrote to memory of 1184	1336	mwfkiq.exe	38
PID 1336 wrote to memory of 1184	1336	mwfkiq.exe	38

C:\Users\Admin\AppData\Local\Temp\file.exe
"C:\Users\Admin\AppData\Local\Temp\file.exe"
1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:1388
- C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
  "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious behavior: MapViewOfSection
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of WriteProcessMemory
  PID:1336
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1112
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1796
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:792
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1740
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1764
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:992
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1732
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1964
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:980
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:672
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1704
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1184
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1672
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1084
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1924
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1800
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1876
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1688
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:960
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1552
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1976
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1512
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:604
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1248
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1624
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:828
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1052
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1604
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1000
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:864
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1632
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1464
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:360
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1996
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1784
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1488
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1756
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1812
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1860
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1520
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:2012
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1564
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1592
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:624
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1588
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1352
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:968
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1108
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1936
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1744
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:888
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1460
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1796
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:956
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:964
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1620
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:972
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1724
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:952
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1568
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1172
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1188
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1696
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1956
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1816
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:432
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:652
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:520
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:468
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:580
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:380
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1884
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1600
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1184
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1916
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1672
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:272
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1084
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1180
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1924
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:632
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1800
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1008
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1876
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1164
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1688
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1168
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:960
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1580
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1552
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1616
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1976
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1960
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1512
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1736
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:604
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1680
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1248
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:364
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1624
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1640
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:828
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1308
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1052
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1480
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1604
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1832
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1000
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1072
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1628
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:860
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1224
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1212
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:836
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:240
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1100
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1088
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1128
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1536
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1120
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1564
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1592
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:624
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1588
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1352
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:968
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1108
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1936
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1744
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:888
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1460
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1796
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:956
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:964
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1620
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:972
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1724
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:952
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1568
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1172
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1188
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1696
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1956
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1816
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:432
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:652
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:520
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:468
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:580
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:380
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1884
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1600
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1184
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1916
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1672
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:272
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1084
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1180
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1924
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:632
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1800
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1008
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1876
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1164
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1688
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1168
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:960
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1580
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1552
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1616
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1976
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1960
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1512
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1736
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:604
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1680
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1248
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:364
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1624
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1640
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:828
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1308
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1052
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1480
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1604
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1832
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1000
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1072
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1628
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:860
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1224
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1212
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:836
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:240
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1100
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1088
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1860
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1520
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2012
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1596
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1564
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1592
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:624
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1588
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1352
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:968
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1108
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1936
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1744
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:888
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1460
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1796
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:956
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:964
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1620
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:972
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1724
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:952
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1568
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1172
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1188
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1696
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1956
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1816
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:432
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:652
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:520
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:468
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:580
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:380
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1884
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1600
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1184
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1916
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1672
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:272
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1084
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1180
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1924
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:632
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1800
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1008
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1876
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1164
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1688
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1168
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:960
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1580
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1552
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1616
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1976
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1960
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1512
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1736
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:604
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1680
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1248
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:364
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1624
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1640
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:828
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1308
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1052
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1480
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1604
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1832
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1000
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1072
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1628
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:860
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1224
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1212
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:836
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:240
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1100
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1088
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1860
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1520
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2012
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1596
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1564
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1592
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:624
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1588
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1352
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:968
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1108
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1936
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1744
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:888
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1460
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1796
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:956
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:964
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1620
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:972
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1724
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:952
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1568
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1172
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1188
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1964
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:588
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:980
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1708
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:672
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1720
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1704
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:544
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1668
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1208
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:776
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2028
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1204
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1844
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:976
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1532
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:932
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1092
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:452
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:908
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:900
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1544
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:740
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1972
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:924
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1728
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1320
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1004
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1516
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:576
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:856
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1284
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:692
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1608
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1484
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1748
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1768
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1648
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1676
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1364
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1660
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1160
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:892
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:532
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:864
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1632
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1464
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:360
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1996
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1784
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1488
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1756
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1812
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1540
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1128
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1536
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1120
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2012
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1596
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1564
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1592
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:624
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1588
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1352
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:968
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1108
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1936
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1744
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:888
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1460
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1796
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:956
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:964
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1620
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:972
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1724
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:952
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1568
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1172
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1188
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1964
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:588
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:980
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1708
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:672
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1720
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1704
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:544
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1668
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1208
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:776
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2028
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1204
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1844
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:976
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1532
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:932
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1092
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:452
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:908
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:900
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1544
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:740
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1972
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:924
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1728
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1320
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1004
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1516
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:576
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:856
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1284
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:692
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1608
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1484
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1748
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1768
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1648
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1676
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1364
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1660
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1160
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:892
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:532
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:864
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1632
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1464
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:360
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1996
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1784
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1488
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1756
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1812
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1540
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1128
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1536
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1120
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2012
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1596
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1564
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1592
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:624
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1588
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1352
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:968
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1108
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1936
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1744
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:888
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1460
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1796
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:956
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:964
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1620
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:972
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1724
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:952
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1568
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1172
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1188
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1964
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:588
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:980
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1708
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:672
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1720
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1704
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:544
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1668
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1208
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:776
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2028
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1204
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1844
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:976
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1532
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:932
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1092
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:452
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:908
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:900
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1544
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:740
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1972
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:924
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1728
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1320
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1004
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1516
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:576
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:856
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1284
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:692
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1608
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1484
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1748
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1768
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1648
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1676
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1364
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1660
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1160
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:892
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:532
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:864
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1632
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1464
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:360
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1996
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1784
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1488
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1756
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1812
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1540
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1128
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1536
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1120
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2012
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1596
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1564
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1592
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:624
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1588
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1352
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:968
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1108
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1936
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1744
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:888
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1460
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1796
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:956
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:964
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1620
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:972
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1724
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:952
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1568
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1172
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1188
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1964
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:588
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:980
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1708
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:672
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1720
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1704
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:544
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1668
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1208
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:776
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2028
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1204
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1844
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:976
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1532
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:932
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1092
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:452
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:908
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:900
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1544
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:740
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1972
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:924
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1728
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1320
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1004
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1516
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:576
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:856
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1284
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:692
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1608
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1484
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1748
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1768
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1648
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1676
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1364
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1660
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1160
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:892
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:532
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:864
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1632
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1464
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:360
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1996
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1784
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1488
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1756
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1812
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1540
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1128
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1536
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1120
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2012
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1596
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1564
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1592
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:624
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1588
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1352
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:968
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1108
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1936
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1744
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:888
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1460
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1796
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:956
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:964
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1620
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:972
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1724
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:952
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1568
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1172
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1188
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1964
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:588
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:980
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1708
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:672
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1720
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1704
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:544
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1668
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1208
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:776
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2028
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1204
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1844
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:976
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1532
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:932
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1092
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:452
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:908
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:900
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1544
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:740
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1972
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:924
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1728
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1320
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1004
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1516
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:576
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:856
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1284
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:692
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1608
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1484
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1748
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1768
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1648
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1676
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1364
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1660
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1160
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:892
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:532
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:864
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1632
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1464
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:360
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1996
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1784
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1488
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1756
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1812
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1540
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1128
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1536
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1120
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2012
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1596
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1564
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1592
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:624
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1588
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1352
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:968
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1108
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1936
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1744
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:888
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1460
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1796
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:956
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:964
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1620
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:972
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1724
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:952
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1568
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1172
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1188
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1964
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:588
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:980
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1708
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:672
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1720
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1704
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:544
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1668
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1208
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:776
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2028
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1204
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1844
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:976
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1532
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:932
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1092
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:452
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:908
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:900
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1544
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:740
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1972
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:924
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1728
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1320
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1004
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1516
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:576
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:856
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1284
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:692
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1608
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1484
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1748
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1768
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1648
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1676
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1364
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1660
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1160
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:892
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:532
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:864
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1632
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1464
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:360
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1996
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1784
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1488
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1756
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1812
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1540
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1128
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1536
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1120
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2012
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1596
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1564
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1592
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:624
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1588
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1352
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:968
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1108
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1936
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1744
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:888
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1460
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1796
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:956
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:964
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1620
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:972
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1724
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:952
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1568
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1172
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1188
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1964
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:588
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:980
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1708
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:672
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1720
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1704
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:544
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1668
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1208
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:776
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2028
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1204
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1844
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:976
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1532
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:932
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1092
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:452
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:908
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:900
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1544
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:740
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1972
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:924
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1728
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1320
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1004
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1516
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:576
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:856
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1284
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:692
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1608
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1484
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1748
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1768
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1648
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1676
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1364
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1660
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1160
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:892
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:532
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:864
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1632
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1464
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:360
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1996
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1784
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1488
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1756
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1812
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1540
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1128
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1536
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1120
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2012
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1596
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1564
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1592
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:624
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1588
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1352
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:968
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1108
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1936
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1744
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:888
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1460
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1796
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:956
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:964
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1620
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:972
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1724
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:952
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1568
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1172
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1188
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1964
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:588
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:380
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1884
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1600
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1184
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1916
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1672
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:272
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1084
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1180
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1924
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:632
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1800
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1008
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1876
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1164
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1688
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1168
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:960
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1580
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1552
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1616
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1976
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1960
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1512
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1736
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:604
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1680
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1248
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:364
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1624
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1640
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:828
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1308
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1052
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1480
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1604
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1832
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1000
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1072
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1628
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:860
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1224
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1212
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:836
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:240
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1100
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1088
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1860
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1520
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1712
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1716
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1144
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:112
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:764
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:760
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1940
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2012
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1596
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1564
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1592
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:624
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1588
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1352
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:968
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1108
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1936
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1744
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:888
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1460
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1796
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:956
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:964
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1620
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:972
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1724
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:952
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1568
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1172
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1188
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1964
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:588
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:380
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1884
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1600
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1184
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1916
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1672
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:272
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1084
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1180
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1924
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:632
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1800
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1008
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1876
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1164
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1688
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1168
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:960
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1580
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1552
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1616
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1976
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1960
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1512
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1736
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:604
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1680
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1248
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:364
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1624
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1640
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:828
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1308
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1052
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1480
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1604
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1832
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1000
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1072
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1628
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:860
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1224
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1212
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:836
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:240
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1100
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1088
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1860
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1520
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1712
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1716
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1144
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:112
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:764
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:760
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1940
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2012
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1596
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1564
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1592
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:624
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1588
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1352
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:968
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1108
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1936
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1744
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:888
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1460
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1796
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:956
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:964
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1620
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:972
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1724
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:952
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1568
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1172

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\ispif.hre

Filesize
185KB

MD5
3cfd2fc4bace3b7a026ea386367aeb1c

SHA1
d8c09c5809ae2c09dccd6790bc3f57fa4bc42735

SHA256
75a663272a1cb4a66a727653d4128459844b3f407dc4366d65431331a00c3d5c

SHA512
1023861a2312e5b1607ff99ec0f5061502965339ee21c5719eb74081fe5820538f750ed45158b58cab6e2d27784a1c25e7b6325dfb1590fb97348db3bddf57c2

Download Submit
C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
C:\Users\Admin\AppData\Local\Temp\sxvuoazn.heb

Filesize
40KB

MD5
4b48ae58eb0a611ee3be6370c8b16c3f

SHA1
67065f7d57704bef238590ae76ad060c29470dfa

SHA256
394e96cda29cfffff3a9f4ef1e8b2e1751bf22e351d048c374ee8b088172094e

SHA512
a71320b300e23da49b25c0d9875d80e18c9a68660f5616b174ffa3a7b9ecef25418b28a2338a1b8133292600e3826282c9e352d50269f4acd9ad4b941632c06c

Download Submit
C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3

Filesize
9KB

MD5
528e53c721e9a9ddd2b963098da47a1b

SHA1
6e7b4d8a92b14ce4fbbe6eb4ca93b12dd120ae24

SHA256
bcbef065142b2fffd5baa3ce19f0ca347451f2d75cfbea9e3e9cc323c678edd6

SHA512
3c42df1b911768497f2822189ff999f229a904ced51a7e1c8355e73c1e30f4b8fc8ddcca584dccc9a6f482d0f48fb6dece54a73a95eec0c9506e25b5189e4d7c

Download Submit
\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
memory/1388-54-0x00000000768A1000-0x00000000768A3000-memory.dmp

Filesize
8KB

Download