dbf84e96986833b84a04c6940f2632bcd554523fbc8553bcdbda46d62846a17a

Analysis

max time kernel
150s
max time network
17s
platform
windows7_x64
resource
win7-20240729-en
resource tags

arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
submitted
24-12-2024 02:50

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

16346ed15b2d60e072d99cd110e29c8bef43483b9f8a5f9246123750bc0073d6.exe
Size

626KB
MD5

031281aa0667cba260ddad6f77c89ccd
SHA1

17b747e3e1de9296f862d522a9664046d2d3469e
SHA256

16346ed15b2d60e072d99cd110e29c8bef43483b9f8a5f9246123750bc0073d6
SHA512

f4715533c2f535964dc98f581887abc1a9daf68f913b9b316762ddf169b4209458fbeebed8173fca65c7d4732087bf0b0e4369fa440cebd45772d77559820ea2
SSDEEP

12288:bItKcNGvH3x+D0NDO6D7zkoT+lqp/7Iu/O2ybZx9Y9rl7jjGHS:bItK9H3xbJZlT+lQTD/O3BArRCHS

Score

7^/10

discovery

Malware Config

Signatures

Executes dropped EXE 64 IoCs

pid	Process
2584	mwfkiq.exe
2056	mwfkiq.exe
2788	mwfkiq.exe
2864	mwfkiq.exe
2892	mwfkiq.exe
2860	mwfkiq.exe
2764	mwfkiq.exe
2932	mwfkiq.exe
2904	mwfkiq.exe
2016	mwfkiq.exe
2696	mwfkiq.exe
2776	mwfkiq.exe
2836	mwfkiq.exe
2688	mwfkiq.exe
2824	mwfkiq.exe
2708	mwfkiq.exe
2676	mwfkiq.exe
2704	mwfkiq.exe
2540	mwfkiq.exe
3052	mwfkiq.exe
2928	mwfkiq.exe
3060	mwfkiq.exe
448	mwfkiq.exe
2900	mwfkiq.exe
2700	mwfkiq.exe
2468	mwfkiq.exe
2068	mwfkiq.exe
2520	mwfkiq.exe
1908	mwfkiq.exe
1876	mwfkiq.exe
372	mwfkiq.exe
608	mwfkiq.exe
1340	mwfkiq.exe
1692	mwfkiq.exe
1404	mwfkiq.exe
288	mwfkiq.exe
1376	mwfkiq.exe
1500	mwfkiq.exe
2592	mwfkiq.exe
1360	mwfkiq.exe
756	mwfkiq.exe
1112	mwfkiq.exe
2104	mwfkiq.exe
2452	mwfkiq.exe
1388	mwfkiq.exe
764	mwfkiq.exe
2148	mwfkiq.exe
1724	mwfkiq.exe
2384	mwfkiq.exe
1004	mwfkiq.exe
1904	mwfkiq.exe
1924	mwfkiq.exe
1912	mwfkiq.exe
1264	mwfkiq.exe
2720	mwfkiq.exe
768	mwfkiq.exe
1476	mwfkiq.exe
1308	mwfkiq.exe
1572	mwfkiq.exe
1196	mwfkiq.exe
816	mwfkiq.exe
1436	mwfkiq.exe
1712	mwfkiq.exe
1748	mwfkiq.exe

Loads dropped DLL 64 IoCs

pid	Process
2268	16346ed15b2d60e072d99cd110e29c8bef43483b9f8a5f9246123750bc0073d6.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	16346ed15b2d60e072d99cd110e29c8bef43483b9f8a5f9246123750bc0073d6.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mwfkiq.exe

Suspicious behavior: MapViewOfSection 64 IoCs

pid	Process
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe
2584	mwfkiq.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
2584	mwfkiq.exe
2584	mwfkiq.exe

Suspicious use of SendNotifyMessage 2 IoCs

pid	Process
2584	mwfkiq.exe
2584	mwfkiq.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2268 wrote to memory of 2584	2268	16346ed15b2d60e072d99cd110e29c8bef43483b9f8a5f9246123750bc0073d6.exe	29
PID 2268 wrote to memory of 2584	2268	16346ed15b2d60e072d99cd110e29c8bef43483b9f8a5f9246123750bc0073d6.exe	29
PID 2268 wrote to memory of 2584	2268	16346ed15b2d60e072d99cd110e29c8bef43483b9f8a5f9246123750bc0073d6.exe	29
PID 2268 wrote to memory of 2584	2268	16346ed15b2d60e072d99cd110e29c8bef43483b9f8a5f9246123750bc0073d6.exe	29
PID 2584 wrote to memory of 2056	2584	mwfkiq.exe	30
PID 2584 wrote to memory of 2056	2584	mwfkiq.exe	30
PID 2584 wrote to memory of 2056	2584	mwfkiq.exe	30
PID 2584 wrote to memory of 2056	2584	mwfkiq.exe	30
PID 2584 wrote to memory of 2056	2584	mwfkiq.exe	30
PID 2584 wrote to memory of 2788	2584	mwfkiq.exe	31
PID 2584 wrote to memory of 2788	2584	mwfkiq.exe	31
PID 2584 wrote to memory of 2788	2584	mwfkiq.exe	31
PID 2584 wrote to memory of 2788	2584	mwfkiq.exe	31
PID 2584 wrote to memory of 2788	2584	mwfkiq.exe	31
PID 2584 wrote to memory of 2864	2584	mwfkiq.exe	32
PID 2584 wrote to memory of 2864	2584	mwfkiq.exe	32
PID 2584 wrote to memory of 2864	2584	mwfkiq.exe	32
PID 2584 wrote to memory of 2864	2584	mwfkiq.exe	32
PID 2584 wrote to memory of 2864	2584	mwfkiq.exe	32
PID 2584 wrote to memory of 2892	2584	mwfkiq.exe	33
PID 2584 wrote to memory of 2892	2584	mwfkiq.exe	33
PID 2584 wrote to memory of 2892	2584	mwfkiq.exe	33
PID 2584 wrote to memory of 2892	2584	mwfkiq.exe	33
PID 2584 wrote to memory of 2892	2584	mwfkiq.exe	33
PID 2584 wrote to memory of 2860	2584	mwfkiq.exe	34
PID 2584 wrote to memory of 2860	2584	mwfkiq.exe	34
PID 2584 wrote to memory of 2860	2584	mwfkiq.exe	34
PID 2584 wrote to memory of 2860	2584	mwfkiq.exe	34
PID 2584 wrote to memory of 2860	2584	mwfkiq.exe	34
PID 2584 wrote to memory of 2764	2584	mwfkiq.exe	35
PID 2584 wrote to memory of 2764	2584	mwfkiq.exe	35
PID 2584 wrote to memory of 2764	2584	mwfkiq.exe	35
PID 2584 wrote to memory of 2764	2584	mwfkiq.exe	35
PID 2584 wrote to memory of 2764	2584	mwfkiq.exe	35
PID 2584 wrote to memory of 2932	2584	mwfkiq.exe	36
PID 2584 wrote to memory of 2932	2584	mwfkiq.exe	36
PID 2584 wrote to memory of 2932	2584	mwfkiq.exe	36
PID 2584 wrote to memory of 2932	2584	mwfkiq.exe	36
PID 2584 wrote to memory of 2932	2584	mwfkiq.exe	36
PID 2584 wrote to memory of 2904	2584	mwfkiq.exe	37
PID 2584 wrote to memory of 2904	2584	mwfkiq.exe	37
PID 2584 wrote to memory of 2904	2584	mwfkiq.exe	37
PID 2584 wrote to memory of 2904	2584	mwfkiq.exe	37
PID 2584 wrote to memory of 2904	2584	mwfkiq.exe	37
PID 2584 wrote to memory of 2016	2584	mwfkiq.exe	38
PID 2584 wrote to memory of 2016	2584	mwfkiq.exe	38
PID 2584 wrote to memory of 2016	2584	mwfkiq.exe	38
PID 2584 wrote to memory of 2016	2584	mwfkiq.exe	38
PID 2584 wrote to memory of 2016	2584	mwfkiq.exe	38
PID 2584 wrote to memory of 2776	2584	mwfkiq.exe	39
PID 2584 wrote to memory of 2776	2584	mwfkiq.exe	39
PID 2584 wrote to memory of 2776	2584	mwfkiq.exe	39
PID 2584 wrote to memory of 2776	2584	mwfkiq.exe	39
PID 2584 wrote to memory of 2776	2584	mwfkiq.exe	39
PID 2584 wrote to memory of 2696	2584	mwfkiq.exe	40
PID 2584 wrote to memory of 2696	2584	mwfkiq.exe	40
PID 2584 wrote to memory of 2696	2584	mwfkiq.exe	40
PID 2584 wrote to memory of 2696	2584	mwfkiq.exe	40
PID 2584 wrote to memory of 2696	2584	mwfkiq.exe	40
PID 2584 wrote to memory of 2836	2584	mwfkiq.exe	41
PID 2584 wrote to memory of 2836	2584	mwfkiq.exe	41
PID 2584 wrote to memory of 2836	2584	mwfkiq.exe	41
PID 2584 wrote to memory of 2836	2584	mwfkiq.exe	41
PID 2584 wrote to memory of 2836	2584	mwfkiq.exe	41

C:\Users\Admin\AppData\Local\Temp\16346ed15b2d60e072d99cd110e29c8bef43483b9f8a5f9246123750bc0073d6.exe
"C:\Users\Admin\AppData\Local\Temp\16346ed15b2d60e072d99cd110e29c8bef43483b9f8a5f9246123750bc0073d6.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:2268
- C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
  "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: MapViewOfSection
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of WriteProcessMemory
  PID:2584
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:2056
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:2788
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:2864
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:2892
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:2860
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:2764
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:2932
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:2904
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:2016
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:2776
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:2696
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:2836
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:2688
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:2824
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:2708
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:2676
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:2704
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:2540
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:3052
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:2928
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:3060
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:448
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:2900
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:2700
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:2468
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:2068
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:2520
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1908
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1876
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:372
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:608
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1340
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1692
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1404
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:288
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1376
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1500
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:2592
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1360
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:756
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1112
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:2104
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:2452
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1388
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:764
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:2148
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1724
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:2384
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1004
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1904
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1924
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1912
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1264
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:2720
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:768
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1476
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1308
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1572
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1196
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:816
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1436
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1712
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    - Executes dropped EXE
    PID:1748
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1052
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1752
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2840
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2988
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:3004
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2640
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2088
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2600
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2208
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2192
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2344
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2620
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1940
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2060
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2292
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2228
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2244
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2372
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1484
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2360
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2364
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:560
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:752
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1976
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2052
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1952
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2216
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2020
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1796
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:996
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2552
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2172
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2004
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1804
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2648
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:3016
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2980
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2968
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2324
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1852
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1316
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:828
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:3020
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1784
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:872
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1312
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2260
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2248
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1540
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1880
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1772
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:616
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1808
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:992
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1568
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1720
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1740
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2572
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1708
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1480
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1504
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2092
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:936
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:920
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1980
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1088
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2400
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2116
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1492
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:264
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1636
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1180
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1172
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:700
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1860
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1512
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1624
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:888
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1948
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2264
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1944
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2304
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2392
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:3012
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2312
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2740
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1588
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1664
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2412
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2124
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2544
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2844
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2616
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2204
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2752
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2288
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2348
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2808
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2804
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2864
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2876
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2888
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2892
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2812
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2816
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2764
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2932
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2904
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2016
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2696
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2820
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2472
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2420
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2940
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1528
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2836
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2688
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2832
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2880
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2936
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2760
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2848
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2772
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2296
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:304
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2680
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2712
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2716
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2780
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2612
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2672
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2200
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2736
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1700
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2732
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2160
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:3048
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:3044
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2900
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2328
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2960
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2944
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2448
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:636
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2220
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2460
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2156
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2080
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2408
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2512
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2424
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:484
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:672
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1656
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:980
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:300
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:608
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1340
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1692
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1404
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:288
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1376
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1500
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2592
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1360
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:756
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1112
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2104
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2452
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1388
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:764
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2148
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1724
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2384
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1004
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1904
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1924
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1912
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1264
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2720
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:768
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1476
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1308
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1572
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1196
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:816
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1436
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1712
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1748
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1052
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1752
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2840
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2988
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:3004
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2640
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2088
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2600
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2208
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2192
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2344
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2620
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1940
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2060
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2292
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2228
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2244
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2372
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1484
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2360
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2364
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:560
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:752
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1976
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2052
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1952
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2216
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2020
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1796
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:996
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2552
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2172
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2004
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1804
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2648
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:3016
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2980
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2968
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2324
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1852
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1316
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:828
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:3020
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1784
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:872
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1312
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2260
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2248
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1540
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1880
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1772
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:616
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1808
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:992
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1568
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1720
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1740
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2572
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1708
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1480
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1504
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2092
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:936
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:920
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1980
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1088
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2400
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2116
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1492
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:264
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1636
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1180
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1172
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:700
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1860
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1512
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1624
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:888
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1948
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2264
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1944
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2304
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2392
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:3012
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2312
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2740
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1588
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1664
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2412
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2124
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2544
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2844
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2616
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2204
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2752
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2288
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2348
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2808
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2804
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2864
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2876
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2888
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2892
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2812
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2816
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2764
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2932
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2904
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2016
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2696
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2820
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2472
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2420
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2940
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1528
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2920
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2824
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2660
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2972
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2884
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2768
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2708
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2684
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2796
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2676
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2704
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2828
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2540
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:3052
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2692
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2928
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2724
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:3060
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2636
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:448
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2212
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2728
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:832
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1820
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:568
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:3032
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:3056
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2700
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2468
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2756
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2464
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2068
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2516
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2520
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:780
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1908
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1876
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1932
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:372
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2024
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1508
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1612
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2000
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1992
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2568
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2012
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2376
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:268
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:652
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:408
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2096
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2560
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1996
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2564
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1260
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:576
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:900
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:984
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1148
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1600
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1988
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1248
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:960
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1324
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1136
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1296
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1792
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1156
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:292
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1800
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1072
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:892
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2644
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2184
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1256
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:928
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:3000
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2996
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2992
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2152
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:584
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2072
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2232
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2272
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2236
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2252
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1092
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2100
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2396
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2168
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2492
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2164
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1604
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1424
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2076
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:536
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2064
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2240
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1084
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:280
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1632
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:664
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2624
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2176
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2548
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1896
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2356
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:3036
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:3008
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2180
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2528
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1960
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1732
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:3024
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:956
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2368
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:692
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2336
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1920
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1452
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1444
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1532
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:352
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2332
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:836
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2084
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1660
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:3064
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1696
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1740
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2572
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1708
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1480
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1504
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2092
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:936
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:920
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1980
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1088
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2400
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2116
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1492
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:264
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1636
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1180
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1172
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:700
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1860
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1512
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1624
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:888
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1948
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2264
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1944
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2304
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2392
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:3012
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2312
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2740
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1588
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1664
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2412
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2124
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2544
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2844
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2616
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2204
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2752
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2288
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2348
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2808
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2804
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2864
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2876
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2888
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2892
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2812
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2816
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2764
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2932
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2904
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2016
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2696
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2820
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2472
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2420
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2940
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1528
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2920
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2824
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2660
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2972
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2884
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2768
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2708
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2684
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2796
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2676
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2704
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2828
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2540
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:3052
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2692
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2928
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2724
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:3060
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2636
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:448
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2212
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2728
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:832
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1820
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:568
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:3032
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:3056
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2700
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2468
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2756
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2464
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2068
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2516
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2520
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:780
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1908
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1876
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1932
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:372
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2024
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1508
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1612
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2000
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1992
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2568
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2012
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2376
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:268
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:652
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:408
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2096
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2560
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1996
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2564
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1260
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1724
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2384
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1004
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1904
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1924
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1912
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1264
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2720
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:768
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1476
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1308
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1572
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1196
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:816
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1436
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1712
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1748
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1052
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1752
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2840
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2988
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:3004
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2640
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2088
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2600
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2208
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2192
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2344
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2620
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1940
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2060
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2292
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2228
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2244
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2372
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1484
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2360
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2364
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:560
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:752
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2836
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2064
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2240
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1084
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:280
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1632
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:664
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2624
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2176
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2548
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1896
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2356
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:3036
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:3008
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2180
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2528
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1960
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1732
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:3024
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:956
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2368
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:692
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2336
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1920
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1452
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1444
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1532
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:352
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2332
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:836
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2084
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1660
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:3064
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1696
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1740
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2572
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1708
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1480
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1504
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2092
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:936
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:920
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1980
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1088
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2400
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2116
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1492
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:264
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1636
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1180
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1172
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:700
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1860
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1512
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1624
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:888
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1948
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2264
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1944
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2304
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2392
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:3012
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2312
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2740
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1588
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1664
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2412
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2124
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2544
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2844
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2616
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2204
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2752
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2288
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2348
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2856
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2912
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2924
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2860
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2784
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2976
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2792
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2852
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2532
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2800
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2776
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2984
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2896
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2668
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2748
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2444
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2688
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2832
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2880
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2936
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2760
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2848
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2772
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2296
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:304
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2680
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2712
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2716
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2780
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2612
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2672
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2200
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2736
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1700
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2732
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2160
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:3048
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:3044
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2900
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2328
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2960
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2944
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2448
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1668
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:3056
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2700
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2468
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2756
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2464
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2068
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2516
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2520
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:780
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1908
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1876
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1932
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:372
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2024
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1508
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1612
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2000
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1992
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2568
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2012
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2376
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:268
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:652
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:408
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2096
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2560
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1996
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2564
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1260
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1724
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2384
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1004
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1904
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1924
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1912
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1264
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2720
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:768
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1476
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1308
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1572
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1196
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:816
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1436
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1712
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1748
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1052
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1752
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2840
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2988
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:3004
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2640
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2088
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2600
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2208
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2192
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2344
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2620
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1940
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2060
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2292
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2228
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2244
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2372
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1484
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2360
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2364
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:560
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:752
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2836
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2064
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2240
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1084
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:280
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1632
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:664
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2624
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2176
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2548
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1896
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2356
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2980
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2968
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2324
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1852
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1316
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:828
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:3020
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1784
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:872
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1312
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2260
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2248
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1540
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1880
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1772
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:616
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1808
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:992
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1568
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1720
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1716
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2044
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2132
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:924
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2340
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2632
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2948
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:388
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2316
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1336
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2964
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:576
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2400
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2116
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1492
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:264
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1636
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1180
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1172
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:700
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1860
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1512
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1624
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:888
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1948
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2264
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1944
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2304
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2392
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:3012
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2312
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2740
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1588
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1664
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2412
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2124
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2544
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2844
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2616
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2204
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2752
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2288
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2348
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2856
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2912
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2924
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2860
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2784
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2976
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2792
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2852
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2532
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2800
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2776
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2984
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2896
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2668
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2748
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2444
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2688
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2832
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2880
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2936
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2760
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2848
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2772
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2296
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:304
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2680
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2712
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2716
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2780
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2612
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2672
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2200
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2736
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1700
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2732
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2160
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:3048
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:3044
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2900
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2328
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2960
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2944
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2448
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1668
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:3056
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2700
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2468
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2756
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2464
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2068
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2516
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2520
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:780
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1908
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1876
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1932
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:372
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2024
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1508
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1612
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2000
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1992
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2568
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1360
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:756
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1112
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2104
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2452
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1388
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:764
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2148
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:900
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:984
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1148
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1600
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1988
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1248
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:960
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1324
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1136
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1296
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1792
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1156
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:292
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1800
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1072
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:892
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2644
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2184
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1256
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:928
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:3000
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2996
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2992
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2808
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2640
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2088
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2600
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2208
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2192
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2344
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2620
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1940
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2060
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2292
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2228
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2244
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:2372
- - C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe
    "C:\Users\Admin\AppData\Local\Temp\mwfkiq.exe" "C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3"
    3⤵
    PID:1484

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\ispif.hre

Filesize
185KB

MD5
3cfd2fc4bace3b7a026ea386367aeb1c

SHA1
d8c09c5809ae2c09dccd6790bc3f57fa4bc42735

SHA256
75a663272a1cb4a66a727653d4128459844b3f407dc4366d65431331a00c3d5c

SHA512
1023861a2312e5b1607ff99ec0f5061502965339ee21c5719eb74081fe5820538f750ed45158b58cab6e2d27784a1c25e7b6325dfb1590fb97348db3bddf57c2

Download Submit
C:\Users\Admin\AppData\Local\Temp\sxvuoazn.heb

Filesize
40KB

MD5
4b48ae58eb0a611ee3be6370c8b16c3f

SHA1
67065f7d57704bef238590ae76ad060c29470dfa

SHA256
394e96cda29cfffff3a9f4ef1e8b2e1751bf22e351d048c374ee8b088172094e

SHA512
a71320b300e23da49b25c0d9875d80e18c9a68660f5616b174ffa3a7b9ecef25418b28a2338a1b8133292600e3826282c9e352d50269f4acd9ad4b941632c06c

Download Submit
C:\Users\Admin\AppData\Local\Temp\vqclxetbtm.au3

Filesize
9KB

MD5
528e53c721e9a9ddd2b963098da47a1b

SHA1
6e7b4d8a92b14ce4fbbe6eb4ca93b12dd120ae24

SHA256
bcbef065142b2fffd5baa3ce19f0ca347451f2d75cfbea9e3e9cc323c678edd6

SHA512
3c42df1b911768497f2822189ff999f229a904ced51a7e1c8355e73c1e30f4b8fc8ddcca584dccc9a6f482d0f48fb6dece54a73a95eec0c9506e25b5189e4d7c

Download Submit
\Users\Admin\AppData\Local\Temp\mwfkiq.exe

Filesize
925KB

MD5
0adb9b817f1df7807576c2d7068dd931

SHA1
4a1b94a9a5113106f40cd8ea724703734d15f118

SHA256
98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b

SHA512
883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a

Download Submit
memory/2584-10-0x00000000001A0000-0x00000000001A2000-memory.dmp

Filesize
8KB

Download