ae5bd505c20878ddbb8a2b9c2c0dc687d2168bfc83e563442f2a89ea14601f57

Analysis

max time kernel
150s
max time network
33s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
14/06/2023, 04:53

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

ZANTE - VESSEL'S PARTICULARS.exe
Size

625KB
MD5

4ea040df51267d35a686217df9619599
SHA1

7dbe82acfe0b211d25cd0c4eaf1b87b7de3fdf9c
SHA256

ae5bd505c20878ddbb8a2b9c2c0dc687d2168bfc83e563442f2a89ea14601f57
SHA512

26e89f6888736ca34ffc3b77637a802d5b8c3c3a74fdd2e09f3b84a341bfaf8d6d76eb42da9bb8d31e3bd3b2e255ca6d6a612e08e304e3be1861eb72d01ee275
SSDEEP

12288:ZYD70GBqHALOGDy/ikPJTeRJvyeiaVPKUNKXW7dg90hTdguoTgDO3sUvF0:ZYD70dW+/LP9YJaeFVEud2EDOp0

Score

7^/10

Malware Config

Signatures

Executes dropped EXE 64 IoCs

pid	Process
620	zndyx.exe
668	zndyx.exe
532	zndyx.exe
1696	zndyx.exe
328	zndyx.exe
524	zndyx.exe
1200	zndyx.exe
1756	zndyx.exe
1172	zndyx.exe
1212	zndyx.exe
856	zndyx.exe
280	zndyx.exe
1352	zndyx.exe
1256	zndyx.exe
1224	zndyx.exe
1792	zndyx.exe
920	zndyx.exe
644	zndyx.exe
1420	zndyx.exe
2004	zndyx.exe
1912	zndyx.exe
1900	zndyx.exe
1472	zndyx.exe
2016	zndyx.exe
2012	zndyx.exe
944	zndyx.exe
1540	zndyx.exe
528	zndyx.exe
1096	zndyx.exe
1828	zndyx.exe
936	zndyx.exe
2024	zndyx.exe
1104	zndyx.exe
2036	zndyx.exe
2008	zndyx.exe
1080	zndyx.exe
916	zndyx.exe
1624	zndyx.exe
2032	zndyx.exe
1016	zndyx.exe
1996	zndyx.exe
1620	zndyx.exe
868	zndyx.exe
1444	zndyx.exe
1124	zndyx.exe
1604	zndyx.exe
1596	zndyx.exe
1744	zndyx.exe
1576	zndyx.exe
1164	zndyx.exe
772	zndyx.exe
432	zndyx.exe
668	zndyx.exe
1672	zndyx.exe
1260	zndyx.exe
1460	zndyx.exe
1748	zndyx.exe
1720	zndyx.exe
576	zndyx.exe
1756	zndyx.exe
268	zndyx.exe
320	zndyx.exe
1544	zndyx.exe
1692	zndyx.exe

Loads dropped DLL 64 IoCs

pid	Process
1560	ZANTE - VESSEL'S PARTICULARS.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious behavior: MapViewOfSection 64 IoCs

pid	Process
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe
620	zndyx.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
620	zndyx.exe
620	zndyx.exe

Suspicious use of SendNotifyMessage 2 IoCs

pid	Process
620	zndyx.exe
620	zndyx.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1560 wrote to memory of 620	1560	ZANTE - VESSEL'S PARTICULARS.exe	26
PID 1560 wrote to memory of 620	1560	ZANTE - VESSEL'S PARTICULARS.exe	26
PID 1560 wrote to memory of 620	1560	ZANTE - VESSEL'S PARTICULARS.exe	26
PID 1560 wrote to memory of 620	1560	ZANTE - VESSEL'S PARTICULARS.exe	26
PID 620 wrote to memory of 668	620	zndyx.exe	27
PID 620 wrote to memory of 668	620	zndyx.exe	27
PID 620 wrote to memory of 668	620	zndyx.exe	27
PID 620 wrote to memory of 668	620	zndyx.exe	27
PID 620 wrote to memory of 668	620	zndyx.exe	27
PID 620 wrote to memory of 532	620	zndyx.exe	28
PID 620 wrote to memory of 532	620	zndyx.exe	28
PID 620 wrote to memory of 532	620	zndyx.exe	28
PID 620 wrote to memory of 532	620	zndyx.exe	28
PID 620 wrote to memory of 532	620	zndyx.exe	28
PID 620 wrote to memory of 1696	620	zndyx.exe	29
PID 620 wrote to memory of 1696	620	zndyx.exe	29
PID 620 wrote to memory of 1696	620	zndyx.exe	29
PID 620 wrote to memory of 1696	620	zndyx.exe	29
PID 620 wrote to memory of 1696	620	zndyx.exe	29
PID 620 wrote to memory of 328	620	zndyx.exe	30
PID 620 wrote to memory of 328	620	zndyx.exe	30
PID 620 wrote to memory of 328	620	zndyx.exe	30
PID 620 wrote to memory of 328	620	zndyx.exe	30
PID 620 wrote to memory of 328	620	zndyx.exe	30
PID 620 wrote to memory of 524	620	zndyx.exe	34
PID 620 wrote to memory of 524	620	zndyx.exe	34
PID 620 wrote to memory of 524	620	zndyx.exe	34
PID 620 wrote to memory of 524	620	zndyx.exe	34
PID 620 wrote to memory of 524	620	zndyx.exe	34
PID 620 wrote to memory of 1200	620	zndyx.exe	33
PID 620 wrote to memory of 1200	620	zndyx.exe	33
PID 620 wrote to memory of 1200	620	zndyx.exe	33
PID 620 wrote to memory of 1200	620	zndyx.exe	33
PID 620 wrote to memory of 1200	620	zndyx.exe	33
PID 620 wrote to memory of 1756	620	zndyx.exe	107
PID 620 wrote to memory of 1756	620	zndyx.exe	107
PID 620 wrote to memory of 1756	620	zndyx.exe	107
PID 620 wrote to memory of 1756	620	zndyx.exe	107
PID 620 wrote to memory of 1756	620	zndyx.exe	107
PID 620 wrote to memory of 1172	620	zndyx.exe	31
PID 620 wrote to memory of 1172	620	zndyx.exe	31
PID 620 wrote to memory of 1172	620	zndyx.exe	31
PID 620 wrote to memory of 1172	620	zndyx.exe	31
PID 620 wrote to memory of 1172	620	zndyx.exe	31
PID 620 wrote to memory of 1212	620	zndyx.exe	42
PID 620 wrote to memory of 1212	620	zndyx.exe	42
PID 620 wrote to memory of 1212	620	zndyx.exe	42
PID 620 wrote to memory of 1212	620	zndyx.exe	42
PID 620 wrote to memory of 1212	620	zndyx.exe	42
PID 620 wrote to memory of 856	620	zndyx.exe	41
PID 620 wrote to memory of 856	620	zndyx.exe	41
PID 620 wrote to memory of 856	620	zndyx.exe	41
PID 620 wrote to memory of 856	620	zndyx.exe	41
PID 620 wrote to memory of 856	620	zndyx.exe	41
PID 620 wrote to memory of 280	620	zndyx.exe	40
PID 620 wrote to memory of 280	620	zndyx.exe	40
PID 620 wrote to memory of 280	620	zndyx.exe	40
PID 620 wrote to memory of 280	620	zndyx.exe	40
PID 620 wrote to memory of 280	620	zndyx.exe	40
PID 620 wrote to memory of 1352	620	zndyx.exe	79
PID 620 wrote to memory of 1352	620	zndyx.exe	79
PID 620 wrote to memory of 1352	620	zndyx.exe	79
PID 620 wrote to memory of 1352	620	zndyx.exe	79
PID 620 wrote to memory of 1352	620	zndyx.exe	79

C:\Users\Admin\AppData\Local\Temp\ZANTE - VESSEL'S PARTICULARS.exe
"C:\Users\Admin\AppData\Local\Temp\ZANTE - VESSEL'S PARTICULARS.exe"
1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:1560
- C:\Users\Admin\AppData\Local\Temp\zndyx.exe
  "C:\Users\Admin\AppData\Local\Temp\zndyx.exe" "C:\Users\Admin\AppData\Local\Temp\hxroji.au3"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious behavior: MapViewOfSection
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of WriteProcessMemory
  PID:620
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:668
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:532
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:1696
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:328
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:1172
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1756
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:1200
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:524
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:920
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:1792
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:1224
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1256
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1352
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:280
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:856
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:1212
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1420
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:644
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:2004
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1912
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1900
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1472
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2016
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:2012
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:944
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:1540
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:528
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:2024
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:1080
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:2032
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:1624
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:916
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:2008
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:1016
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:1996
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:868
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:1124
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:1596
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:1744
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:1604
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:1164
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:1672
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:1460
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:1748
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:1720
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:576
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:268
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:1544
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1372
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:1692
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1484
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1752
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:1352
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1552
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1376
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:684
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1292
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1504
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1704
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1728
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1044
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:1420
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:812
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:756
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2000
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1812
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:1912
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:688
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:644
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:920
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1428
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1380
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:1472
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:1900
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:700
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:1256
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1168
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1140
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:320
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1144
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:1756
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:1260
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:668
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:432
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:772
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:1576
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:1444
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:1620
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:2036
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:1104
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:936
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:1828
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:1096
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    - Executes dropped EXE
    PID:2016
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1468
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1048
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1068
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:944
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:816
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1540
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1760
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:528
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1096
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1828
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:112
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1668
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1536
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2024
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1104
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2028
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1524
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1076
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1688
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:972
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1056
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2032
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1272
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2040
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1992
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1620
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:868
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1444
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1592
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:436
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1604
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1596
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1968
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1092
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:888
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1164
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:772
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1156
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:432
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:668
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1672
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1260
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1460
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1748
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1720
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:576
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1756
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:268
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:320
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1544
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1692
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1372
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1168
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1484
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1752
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1256
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1352
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1552
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1376
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1584
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1708
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:340
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1920
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1916
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1640
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1976
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:372
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:556
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1108
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1700
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1136
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2004
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1800
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1896
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1492
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1040
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1788
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1480
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:848
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1988
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1820
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2012
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1964
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:336
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1984
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1724
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1644
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1060
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1824
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1832
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1856
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:936
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:600
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1892
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2020
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1612
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2036
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2008
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1080
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:916
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1624
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:912
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:840
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1016
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1996
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1904
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1348
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1528
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:976
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1124
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1600
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1680
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1452
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1744
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1576
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1780
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1384
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1980
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1208
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:472
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:532
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1696
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:328
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:524
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1200
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1940
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1684
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1448
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:860
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1676
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1172
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1212
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:856
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:280
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:584
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1548
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:628
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1224
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:588
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1792
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:684
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:700
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1504
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1380
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:920
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:644
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1704
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1728
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:688
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1044
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1420
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:812
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2000
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:756
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1812
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1912
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1428
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1900
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1472
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1140
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1144
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2016
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1468
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1048
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1068
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1416
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1984
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1724
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1644
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1060
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1824
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1832
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1856
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:936
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:600
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1892
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2020
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1612
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2036
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2008
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1080
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:916
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1624
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:912
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:840
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1016
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1996
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1904
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1348
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1528
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:976
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1124
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1600
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1680
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1452
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1744
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1576
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1780
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1384
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1980
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1208
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:472
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:532
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1696
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:328
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:524
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1200
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1940
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1684
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1448
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:860
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1676
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1172
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1212
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:856
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:280
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:584
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1548
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:628
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1224
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:588
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1792
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:684
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:700
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1504
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1380
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:920
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:644
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1704
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1728
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:688
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1044
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1420
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:812
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2000
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:756
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1812
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1912
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1428
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1900
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1472
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1140
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1144
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2016
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1468
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1048
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1068
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1416
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1984
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1724
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1644
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1060
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1824
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1832
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1856
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:936
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:600
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1892
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2020
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1612
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2036
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2008
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1080
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:916
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1624
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:912
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:840
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1016
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1996
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1904
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1348
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1528
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:976
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1124
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1600
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1680
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1452
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1744
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1576
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1780
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1384
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1980
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1208
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:472
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:532
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1696
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:328
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:524
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1200
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1940
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1684
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1448
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:860
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1676
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1172
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1212
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:856
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:280
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:584
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1548
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:628
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1224
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:588
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1792
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:684
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:700
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1504
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1380
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:920
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:644
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1704
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1728
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:688
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1044
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1420
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:812
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2000
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:756
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1812
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1912
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1428
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1900
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1472
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1140
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1144
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2016
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1468
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1048
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1068
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1416
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1984
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1724
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1644
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1060
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1824
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1832
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1856
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:936
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:600
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1892
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2020
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1612
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2036
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2008
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1080
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:916
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1624
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:912
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:840
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1016
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1996
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1904
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1348
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1528
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:976
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1124
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1600
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1680
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1452
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1744
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1576
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1780
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1384
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1980
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1208
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:472
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:532
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1696
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:328
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:524
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1200
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1940
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1684
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1448
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:860
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1676
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1172
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1212
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:856
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:280
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:584
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1548
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:628
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1224
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:588
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1792
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:684
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:700
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1504
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1380
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:920
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:644
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1704
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1728
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:688
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1044
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1420
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:812
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2000
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:756
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1812
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1912
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1428
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1900
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1472
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1140
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1144
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2016
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1468
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1048
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1068
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1416
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1984
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1724
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1644
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1060
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1824
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1832
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1856
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:936
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:600
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1892
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2020
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1612
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2036
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2008
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1080
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:916
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1624
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:912
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:840
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1016
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1996
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1904
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1348
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1528
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:976
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1124
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1600
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1680
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1452
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1744
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1576
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1780
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1384
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1980
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1208
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:472
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:532
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1696
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:328
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:524
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1200
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1940
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1684
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1448
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:860
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1676
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1172
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1212
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:856
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:280
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:584
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1548
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:628
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1224
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:588
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1792
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:684
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:700
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1504
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1380
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:920
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:644
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1704
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1728
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:688
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1044
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1420
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:812
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2000
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:756
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1812
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1912
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1428
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1900
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1472
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1140
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1144
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2016
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1468
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1048
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1068
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1416
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1984
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1724
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1644
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1060
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1824
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1832
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1856
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:936
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:600
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1892
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2020
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1612
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2036
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2008
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1080
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:916
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1624
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:912
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:840
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1016
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1996
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1904
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1348
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1528
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:976
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1124
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1600
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1680
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1452
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1744
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1576
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1780
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1384
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1980
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1208
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:472
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:532
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1696
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:328
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:524
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1200
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1940
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1684
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1448
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:860
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1676
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1172
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1212
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:856
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:280
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:584
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1548
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:628
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1224
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:588
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1792
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:684
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1976
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:372
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:556
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1108
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1700
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1136
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2004
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1800
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1896
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1492
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1040
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1788
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1480
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:848
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1988
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1820
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2012
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1964
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:336
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:944
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:816
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1540
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1760
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:528
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1096
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1828
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:112
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1668
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1536
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2024
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1104
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2028
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1524
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1076
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1688
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:972
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1056
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2032
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1272
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2040
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1992
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1620
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:868
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1016
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1996
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1904
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1348
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1528
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:976
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1124
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1600
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1680
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1452
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1744
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1576
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1780
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1384
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1980
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1208
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:472
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:532
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1696
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:328
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:268
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:320
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1544
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1692
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1372
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1168
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1484
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1752
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1256
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1352
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1552
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1376
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1584
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1708
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:340
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1920
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1916
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1640
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:700
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1976
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:372
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:556
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1108
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1700
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1136
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2004
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1800
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1896
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1492
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1040
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1788
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1480
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:848
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1988
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1820
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2012
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1964
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:336
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:944
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:816
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1540
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1760
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:528
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1096
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1828
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:112
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1668
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1536
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2024
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1104
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2028
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1524
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1076
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1688
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:972
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1056
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2032
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1272
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2040
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1992
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1620
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:868
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1016
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1996
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1904
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1348
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1528
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:976
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1124
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1600
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1680
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1452
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1744
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1576
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1780
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1384
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1980
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1208
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:472
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:532
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1696
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:328
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:268
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:320
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1544
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1692
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1372
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1168
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1484
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1752
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1256
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1352
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:280
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:584
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1548
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:628
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1224
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:588
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1792
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:684
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1504
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1380
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:920
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:644
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1704
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1728
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:688
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1044
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1420
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:812
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2000
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:756
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1812
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1912
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1428
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1900
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1472
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1140
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1144
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2016
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1468
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1048
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1068
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1416
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1984
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1724
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1644
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1060
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1824
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1832
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1856
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:936
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:600
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1892
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2020
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1612
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2036
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2008
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1080
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:916
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1624
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:912
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:840
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1444
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1592
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1016
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1996
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1904
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1348
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1528
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:976
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1124
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1600
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1680
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1452
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1744
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1576
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1780
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1384
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1980
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1208
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:472
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:532
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1696
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:328
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:268
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:320
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1544
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1692
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1372
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1168
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1484
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1752
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1256
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1352
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:280
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:584
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1548
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:628
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1224
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:588
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1792
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:684
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1504
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1380
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:920
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:644
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1704
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1728
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:688
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1044
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1420
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:812
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2000
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:756
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1812
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1912
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1428
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1900
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1472
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1140
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1144
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2016
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1468
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1048
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1068
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1416
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1984
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1724
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1644
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1060
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1824
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1832
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1856
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:936
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:600
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1892
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2020
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1612
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2036
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2008
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1080
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:916
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1624
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:912
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:840
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1444
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1592
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1016
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1996
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1904
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1348
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1528
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:976
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1124
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1600
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1680
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1452
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1744
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1576
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1780
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1384
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1980
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1208
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:472
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:532
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1696
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:328
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:268
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:320
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1544
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1692
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1372
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1168
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1484
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1752
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1256
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1352
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:280
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:584
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1548
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:628
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1224
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:588
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1792
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:684
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1504
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1380
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:920
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:644
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1704
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1728
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:688
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1044
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1420
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:812
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2000
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1788
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1480
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:848
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1988
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1820
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2012
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1964
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:336
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:944
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:816
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1540
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1760
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:528
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1096
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1828
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:112
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1668
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1536
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2024
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1104
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2028
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1524
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1076
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1688
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:972
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1056
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2032
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1272
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:2040
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1992
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1620
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:868
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1444
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1592
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1016
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1996
- - C:\Users\Admin\AppData\Local\Temp\zndyx.exe
    "C:\Users\Admin\AppData\Local\Temp\zndyx.exe"
    3⤵
    PID:1904

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\eiizemzwv.urm

Filesize
48KB

MD5
97d43644cc9af705acc1a683cadd0532

SHA1
6b294e7fc7512a45a3ceef98f3d8810e31eaae46

SHA256
79684a35895eedf77a64ced8bcd7c9805d9a547359868b7746a6483cfe048dd8

SHA512
febb86f2b8635b5541946361aeede0a1c33a81fda7a92868bbd3e1a522948cb8b949b08c6472cc3627f02dbb5ade5aefb15e3001c01ada83e97647b1476bf4fa

Download Submit
C:\Users\Admin\AppData\Local\Temp\fiprqyyl.ax

Filesize
206KB

MD5
6e55088fb6ebda76837bfc28643b79aa

SHA1
ea1427660d261e8e7e12f2587f4baee828373b65

SHA256
689fe7b36e167f2ee91c072fccc389387debfb1732c58f532441db4386df4cbc

SHA512
cc9dce29de0923dfeb99fb9e45e13eaa21bd56ae191fdebd98fb971543471fda058b72695f5efcf72eaab1acbcb59a7f876b550d2e4b594f391d0de856e86d67

Download Submit
C:\Users\Admin\AppData\Local\Temp\hxroji.au3

Filesize
4KB

MD5
b656f6a47a8ef58ab6a6f273f835bbc4

SHA1
5667db4f0945a12f66185fde08bbcad2378af5ee

SHA256
db24c3fcb1d4d4a9ee455c68a03220ee6c8afa243bb2f7030ce1b211cc8d9800

SHA512
a5506921a50e800ed966f313b5530b2473300ee8b6a003f5eac76f5ba83cac0670f9d0cbdef503a0a30d86c0cc35429a5a615baa055b3972dc18fb4cc870f3a2

Download Submit
C:\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
C:\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
C:\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
C:\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
C:\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
C:\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
C:\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
C:\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
C:\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
C:\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
C:\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
C:\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
C:\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
C:\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
C:\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
C:\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
C:\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
C:\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
C:\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
C:\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
C:\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
C:\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
C:\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
C:\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
C:\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
C:\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
C:\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
C:\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
C:\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
C:\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
C:\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
\Users\Admin\AppData\Local\Temp\zndyx.exe

Filesize
872KB

MD5
c56b5f0201a3b3de53e561fe76912bfd

SHA1
2a4062e10a5de813f5688221dbeb3f3ff33eb417

SHA256
237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

SHA512
195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Download Submit
memory/620-71-0x0000000000130000-0x0000000000132000-memory.dmp

Filesize
8KB

Download