Reference: https://twitter.com/VK_Intel/status/1211200281276493825 MD5: AE5CB860F043CAA84BF4E11CEC758616 Mutex: FFRRTTOOOTTPPWWZZZLLSS^_- Resource: RC_DATABIGBACK Note: ^_-ALL FILES ON EACH HOST IN THE NETWORK HAVE BEEN ENCRYPTED^_-. =-=-=-=Backups were either encrypted or deleted or backup disks were formatted... =-=-=-=Shadow copies also removed, so F8 or any other methods may damage encrypted data but not recover... =-=-=-=If you want to restore your files write to emails (contacts are at the bottom of the sheet) and attach 1 - 3 encrypted files.. =-=-=-=(Less than 5 Mb each, non-archived and your files should not contain valuable information..-(Databases, backups, large excel sheets, etc.))... =-=-=-=You will receive decrypted samples..... =-=-=-=MESSAGE THIS INFORMATION TO COMPANY'S CEO, UNLOCKIG OF 1 COMPUTER ONLY IS IMPOSSIBLE, ONLY WHOLE NETWORK... =-=-=-=ATTENTION-.. =-=-=-=Your warranty - decrypted samples... =-=-=-=Do not rename encrypted files... =-=-=-=Do not try to decrypt your data using third party software...=-=-=-=We don`t need your files and your information.....^_-CONTACT EMAIL^_-..REDACTED@tutanota.com..AND..unlock@graylegion.su ..^_- OR ^_-..unlock@goldenbay.su......^_-NOTHING PERSONAL IS A BUSINESS^_- ..!!!!PLEASE DO NOT USE GMAIL, MAIL DOES NOT REACH OR GETS INTO THE SPAM FOLDER!!!!..^_-PLEASE CHECK SPAM FOLDER!!! CL0P^_- 656 EXE Process Killer (Embedded): VM AV Windows Update Remote Service Database Code Binary Researcher Tools Service Register -> lpServiceName "CreatWinDirFolderFinds" Mutex -> "FFRRTTOOOTTPPWWZZZLLSS^_-" Process Killer: VMACTHLP.EXE WINDOCSERVICE.EXE WINDOCUPDATER.EXE VMTOOLSD.EXE MICROSOFT.ACTIVEDIRECTORY.WEBSERVICES.EXE NSCLIENT++.EXE TRUSTEDINSTALLER.EXE PRESENTATIONFONTCACHE.EXE CRYPTOSERVER.EXE MSEXCHANGEADTOPOLOGYSERVICE.EXE MSFTESQL.EXE MICROSOFT.EXCHANGE.ANTISPAMUPDATESVC.EXE MICROSOFT.EXCHANGE.EDGESYNCSVC.EXE MSEXCHANGEFDS.EXE MICROSOFT.EXCHANGE.IMAP4SERVICE.EXE STORE.EXE MICROSOFT.EXCHANGE.IMAP4.EXE MSEXCHANGEMAILBOXASSISTANTS.EXE MSEXCHANGEMAILSUBMISSION.EXE MICROSOFT.EXCHANGE.CLUSTER.REPLAYSERVICE.EXE MAD.EXE MICROSOFT.EXCHANGE.SEARCH.EXSEARCH.EXE MICROSOFT.EXCHANGE.SERVICEHOST.EXE MSEXCHANGETRANSPORT.EXE MSEXCHANGETRANSPORTLOGSEARCH.EXE EDGETRANSPORT.EXE OCCLIENTMONITOR.EXE VCDDAEMON.EXE EXPOSMSSERVER.EXE MSFTEFD.EXE OCCLIENT.EXE VDINTERNET.EXE MICROSOFT.EXCHANGE.POP3SERVICE.EXE MICROSOFT.EXCHANGE.POP3.EXE WIND.AEGIS.MONITORSERVER.TERMINAL.EXE WIND.AEGIS.AUTODEPLOY.TERMINAL.EXE WIND.IT.ADSERVER.EXE WIND.OC.SERVER.EXE WIND.EIP.CRYPTOSERVICE.EXE WIND.EIP.RDMS.SERVICE.EXE WIND.CRM.BISYNCSERVER.EXE WIND.IML.SERVICE.EXE WIND.EIP.EXPOPROXY.EXE WIND.ADM.SERVICE.EXE WIND.EIP.REMOTINGSERVER.BI.EXE WIND.SYNCSERVER.EXE WIND.CRM.AUTHSERVICE.EXE WIND.CRM.SYNCSERVER.EXE WIND.EIP.OFFICESERVICE.EXE WIND.HRM.REMOTINGSERVER.EXE WIND.EIP.ICS.SERVICE.EXE WIND.EIP.PAS.SERVICE.EXE WIND.EIP.SCS.SERVICE.EXE WINDIN.CRM.SERVER.EXE WIND.SMS.SERVER.EXE SQLSERVR.EXE CYGRUNSRV.EXE SSHD.EXE SQLWRITER.EXE WIND.EIP.SERVER.EXE SERVERCMDATASYNC.EXE SENDONLINESERVICEMAIL.EXE OCLISTENER.EXE FALCON-AGENT.EXE EAGLE-AGENT_WINDOWS2.EXE WIND.COMMONTT.SERVICE.EXE WEIP.EXE WIND.SALESPLATFORM.REMOTINGSERVER.EXE DOMAINACCOUNTSERVER.EXE WIND.SALESPLATFORM.QUESTIONSPIDER.EXE WIND.EIP.PDF2SWF.EXE WIND.CRM.TASKSERVER.EXE WIND.EIP.ADM.APP.EXE MICROSOFT.EXCHANGE.DIAGNOSTICS.SERVICE.EXE MICROSOFT.EXCHANGE.DIRECTORY.TOPOLOGYSERVICE.EXE MICROSOFT.EXCHANGE.UM.CALLROUTER.EXE MSEXCHANGEFRONTENDTRANSPORT.EXE MSEXCHANGEHMHOST.EXE MSEXCHANGEHMWORKER.EXE FMS.EXE HOSTCONTROLLERSERVICE.EXE SFTRACING.EXE UPDATESERVICE.EXE FOREFRONTACTIVEDIRECTORYCONNECTOR.EXE CLUSSVC.EXE NODERUNNER.EXE MSEXCHANGEDAGMGMT.EXE RHS.EXE MICROSOFT.EXCHANGE.SEARCH.SERVICE.EXE MSEXCHANGEMAILBOXREPLICATION.EXE MSEXCHANGEREPL.EXE MICROSOFT.EXCHANGE.RPCCLIENTACCESS.SERVICE.EXE UMSERVICE.EXE MICROSOFT.EXCHANGE.STORE.SERVICE.EXE MICROSOFT.EXCHANGE.STORE.WORKER.EXE MSEXCHANGEDELIVERY.EXE MSEXCHANGESUBMISSION.EXE MSEXCHANGETHROTTLING.EXE SCANNINGPROCESS.EXE UMWORKERPROCESS.EXE ARMSVC.EXE SQLCEIP.EXE MSDTSSRVR.EXE FDLAUNCHER.EXE SHELLEXPERIENCEHOST.EXE SEARCHUI.EXE SSMS.EXE MICROSOFT.VSHUB.SERVER.HTTPHOST.EXE SQLAGENT.EXE FDHOST.EXE HAOZIPSVC.EXE MSMDSRV.EXE MYSQLD-NT.EXE MYSQLD.EXE OUTLOOK.EXE OSPPSVC.EXE DEVENV.EXE WPS.EXE PLSQLDEV.EXE SPLWOW64.EXE EXCEL.EXE MICROSOFT.VSHUB.SERVER.HTTPHOSTX64.EXE SCRIPTEDSANDBOX64.EXE WIND.SERVICECENTER.CLIENTS.VSHOST.EXE MSVSMON.EXE WIND.AEGIS.CRMSERVICE.VSHOST.EXE WINDUPDATE.RUN WMAIN.EXE WBOX.EXE WBROWSER.EXE STANDARDCOLLECTOR.SERVICE.EXE WIND.SERVICECENTER.CLIENTS.EXE WPSCENTER.EXE REPORTINGSERVICESSERVICE.EXE SMTPFORWARDER.EXE VMWARE-USBARBITRATOR64.EXE VMWARE-AUTHD.EXE YUNDETECTSERVICE.EXE VMWARE-TRAY.EXE KERNELUPDATE.EXE VMWARE.EXE VMWARE-UNITY-HELPER.EXE VMWARE-VMX.EXE ARPRADIO.EXE STARWINDSERVICE.EXE SVNPERMISSIONSERVICE.EXE VISUALSVNSERVER.EXE NSCAAGENT.EXE SQLAGENT90.EXE STARWINDMANAGEMENTCONSOLE.EXE ADOBEUPDATESERVICE.EXE AGSSERVICE.EXE SQLBROWSER.EXE ONENOTEM.EXE CREATIVE CLOUD.EXE ADOBEIPCBROKER.EXE ADOBE DESKTOP SERVICE.EXE ADOBE CEF HELPER.EXE CORESYNC.EXE CCXPROCESS.EXE NODE.EXE CODEHELPER.EXE WINPTY-AGENT.EXE TORTOISEMERGE.EXE WIM.EXE WINWORD.EXE WRITAGE.EXE WRAPPER.EXE JENKINS.EXE XENGUESTAGENT.EXE WIND.DEPOT.CCNETWATCHER.EXE XENDPRIV.EXE CCSERVICE.EXE IPOVERUSBSVC.EXE SACSRV.EXE SACMONITOR.EXE PRUNSRV64.EXE WIND.DEPOT.AUTODEPLOYSERVICE.EXE WIND.DEPOT.SVN.ADMIN.EXE WIND.DOC.CENTER.EXE WIND.DEPOT.MAIN.APPLICATION.EXE CODE.EXE STARTMENUEXPERIENCEHOST.EXE SKYPEBACKGROUNDHOST.EXE WINDOWSINTERNAL.COMPOSABLESHELL.EXPERIENCES.TEXTINPUT.INPUTAPP.EXE YOURPHONE.EXE LOCKAPP.EXE MICROSOFT.PHOTOS.EXE TNSLSNR.EXE ORACLE.EXE ORAVSSW.EXE WIND.MALL.SERVER.EXE WIND.MALL.TRANSFER.EXE VMWARE-HOSTD.EXE BLNSVR.EXE QEMU-GA.EXE VDSERVICE.EXE SOUNDMAN.EXE VDAGENT.EXE NSCAUTHSERVICE.EXE SANGFORPROMOTESERVICE.EXE TFSJOBAGENT.EXE VNCSERVER.EXE WEBANALYTICSSERVICE.EXE WINDIN.CRM.SYNCTOOL.EXE WMAIN.EXE BESTSYNCSVC.EXE ASPNET_STATE.EXE WIND.IBROKER.FXOPTION.SERVER.GJ.EXE WIND.IFOREX.SERVER.EXE WIND.IBROKER.NCD.SERVER.EXE WINSTORE.APP.EXE SYSTEMSETTINGS.EXE HXOUTLOOK.EXE HXTSR.EXE HXACCOUNTS.EXE SKYPEAPP.EXE MICROSOFTEDGE.EXE OMAILRPT.EXE OCONSOLE3.EXE OCONTROL3.EXE RINST3.EXE OSERVER3.EXE OGUARD3.EXE SEC.PLUG.REQUEST.EXE WIND.RC.EXPO.INVOKECONSOLE.VSHOST.EXE WIM.EXE NMESRVC.EXE OMTSRECO.EXE PERL.EXE EMAGENT.EXE OFFICECLICKTORUN.EXE PCAS.EXE PYTHONSERVICE.EXE MEMCACHED.EXE PYTHON.EXE VIDEO.UI.EXE HPRSNAP8.EXE SSMS.EXE CALCULATOR.EXE MICROSOFTEDGECP.EXE AVAYA.BROWSEREXTENSION.EXE CHERRYTREE.EXE DBUS-DAEMON.EXE XMIND.EXE VISIO.EXE PERFWATSON2.EXE SERVICEHUB.HOST.NODE.X86.EXE SERVICEHUB.VSDETOUREDHOST.EXE SERVICEHUB.IDENTITYHOST.EXE SERVICEHUB.HOST.CLR.X86.EXE SERVICEHUB.SETTINGSHOST.EXE SERVICEHUB.ROSLYNCODEANALYSISSERVICE32.EXE STUDIO.EXE STUDIO.EXE MICROSOFT.ALM.SHARED.REMOTING.REMOTECONTAINER.DLL STUDIO.VSHOST.EXE SQLYOG.EXE MONGOD.EXE PEOPLEEXPERIENCEHOST.EXE WPFFONTCACHE_V0400.EXE NOTEPADSTARTER.EXE TAPMAIN.EXE TAPSERVERCONFIG.EXE OCROBERT.EXE TAPSIMUMATCH.EXE TAPSTOCK.EXE TAPOPTIONSTOCK.EXE TAPFUTURE.EXE TAPOPTIONINDEX.EXE TAPMARGINTRADING.EXE TAPATM.EXE TAPFUTUREATM.EXE TAPOPTIONATM.EXE TAPADMIN.EXE TAPACCEPT_STOCK.EXE TAPACCEPT_QH.EXE TAPACCEPT_OPT.EXE TAPACCEPT_RZRQSTOCK.EXE TAPACCEPT_CUST.EXE TAPCUSTOMERMANAGER.EXE CONTESTAGENTSERVER.EXE PMSAGENTSERVER.EXE TAPTESTQUORECV.EXE TAPERROR2EAGLE.EXE TAPEMAILSERVICE.EXE TAPDAEMON.EXE TAPPROXYSERVER.EXE TAPHKSTOCK.EXE TAPCHECKER.EXE APIRECV.EXE SECBIZSRV.EXE XENSERVERHEALTHCHECK.EXE ALIWSSV.EXE ACRORD32.EXE VPRINTPROXY.EXE MSPDBSRV.EXE EDITPLUS.EXE OIS.EXE AVAYA EQUINOX.EXE BAOFENGPLATFORM.EXE BFDESKTOPTIPS.EXE WIND.IBROKER.FXOPTION.SERVER.PA.EXE WIND.IBROKER.SERVER.PANEW.EXE WIND.IBROKER.SEARCH.SERVER.EXE WIND.IBROKER.SERVER.EXE AGMSERVICE.EXE ACROTRAY.EXE CORESYNC.EXE AFTERFX.EXE CCLIBRARY.EXE ACROBAT.EXE ACROCEF.EXE ACROTRAY.EXE ADOBE AUDITION CC.EXE DYNAMICLINKMANAGER.EXE HQRECV_L1_BBQ.EXE HQRECV_L1_N_SHSZPT.EXE HQRECV_L1_WP2.EXE HQRECV_L1_WP_MSGI.EXE HQRECV_L1_WP_IDC.EXE HQRECV_L1_WP_STATIC.EXE HQRECV_CF_2_2.EXE HQRECV_L1_UO.EXE TDFSERVER2_L2.EXE TDFSERVER2_L1.EXE HQSEND_L1_N.EXE HQRECV_FILE_DB4.EXE PORTMAP.EXE HQRECV_L1_N_PT.EXE SERVICEMONITOR.EXE NSDVIGIL.EXE HQRECV_FILE.EXE HQSEND_ALL.EXE UEDIT32.EXE HQRECV_L1_N_SPQH.EXE TOMCAT7.EXE WIND.AEGIS.TTENGINE.EXE ENGINEHOST.EXE WIND.AEGIS.VISITCONTROL.EXE REDIS-SERVER.EXE SERV-U.EXE WIND.AEGIS.CRMSERVICE.DATASERVER.EXE WIND.EIP.SERVER.EXE WIND.AEGIS.COMSYSTEM.USERDATA.EXE WIND.AEGIS.MONITORSERVER.EXE WIND.AEGIS.DASHBOARDSERVICE.EXE WIND.PMC.SSOSERVER.EXE WIND.AEGIS.COMPANYREPEATCHECK.EXE WIND.AEGIS.REPORT.EXE WIND.AEGIS.CRMEXTERNALSERVICE.EXE WIND.BLACKLIST.SERVICE.EXE WIND.PMC.SERVICE.EXE WIND.AEGIS.COMSYSTEM.CONFIG.EXE WIND.AEGIS.MODELSERVICE.EXE WIND.AEGIS.COMSYSTEM.LOG.EXE PACKETSERVERHOST.EXE WIND.IT.LABELPRINTSERVER.EXE WIND.AEGIS.COMSYSTEM.EXPOPROXY.EXE WIND.AEGIS.EXPOEXTERNALSERVICE.EXE WIND.AEGIS.LEVEL2REPORT.EXE WIND.AEGIS.MALL.EXE WIND.AEGIS.LBS.EXE WIND.AEGIS.TASKLIST.EXE WIND.OC.EXTENALSERVICE.EXE WIND.AEGIS.FINANCESERVICE.EXE WIND.AEGIS.CRMSERVICE.MAILPROXY.EXE WIND.HOME.NOTICE.EXE WIND.AEGIS.COMMONSERVICE.EXE WIND.AEGIS.COMSYSTEM.ORG.EXE WIND.AEGIS.HRMSERVER.EXE WIND.AEGIS.OLDSYSPROXY.EXE WIND.AEGIS.COMSYSTEM.EIPEXPOPROXY.EXE WIND.AEGIS.BASESYSTEM.GLOBALSEARCH.EXE WIND.AEGIS.IPDSERVICE.EXE WIND.SERVICECENTER.REMOTINGSERVER.EXE WIND.AEGIS.CRMSYNCSERVER.EXE WIND.ASMSERVICE.EXE WIND.AEGIS.INDEXADMIN.EXE SQLDBXU.EXE WIND.AEGIS.PORTAL.EXE WIND.AEGIS.BASESYSTEM.RMS.EXE WIND.AEGIS.COMSYSTEM.SCHEDULETASK.EXE WIND.AEGIS.RECRUITSERVICE.EXE DEPOTEMPLOYEE.EXE BDDLSVC.EXE FNPLICENSINGSERVICE.EXE HTTPD.EXE WINSERV.EXE RUBY.EXE TEAMBITION.EXE QTWEBENGINEPROCESS.EXE RDFSNAP.EXE UEDIT32.EXE WINSCP.EXE PUTTY.EXE NETBEANS64.EXE RPCTEST.EXE CODESETUP-STABLE-26076A4DE974EAD31F97692A0D32F90D735645C0.EXE CODESETUP-STABLE-26076A4DE974EAD31F97692A0D32F90D735645C0.TMP SERV-U-TRAY.EXE WIND.DEPOT.GENIMAGE.EXE KBASESRV.EXE ONEDRIVE.EXE AXURERP9.EXE PYCHARM64.EXE FSNOTIFIER64.EXE FILEZILLA.EXE HQRECV_L1_N.EXE HHAUTHROOTNODE.EXE PWSEARCH.EXE BSQLSERVER.EXE RSYNC.EXE HPWUSCHD2.EXE SQLITEEXPERTPERS.EXE HPWUCLI.EXE WIND.AEGIS.RECRUITSERVICE.VSHOST.EXE POWERPNT.EXE NOTEPAD++.EXE WIND.AEGIS.CRMINDEXADMIN.EXE WIND.AEGIS.CRMSERVICE.EXE IBROKERFORPATR.EXE REDGATE.SQLPROMPT.TRAYAPP.EXE WIND.AEGIS.BASESYSTEM.RMS.VSHOST.EXE WIND.AEGIS.OLDSYSPROXY.VSHOST.EXE WEIPCONSOLE.EXE WIND.AEGIS.PORTAL.VSHOST.EXE NAVICAT.EXE ULTRAMCI.EXE ULTRALNK.EXE ULTRACTI.EXE FILEZILLA SERVER.EXE WINDBG.EXE FILEZILLA SERVER INTERFACE.EXE AUTODOWN.EXE HQRECV_SPQH_N.EXE HQRECV_HK2_N.EXE HQRECV_L1_SH_1.EXE HQSEND_L1_INTERNAL.EXE HQSEND_L2_INTERNAL.EXE TDFCHART_L1.EXE TDCSERVER_L2_NEW.EXE TDBSERVER_HK.EXE TDBSERVER2_L2.EXE TDCSERVER_L1_NEW.EXE TDFSERVER_L1_INTERNAL.EXE TDFSERVER_L2_INTERNAL.EXE TDBSERVER_L2.EXE HQRECV_SZ2_N.EXE HQRECV_CF_N.EXE HQRECV_CF2_N.EXE HQRECV_SH2_N.EXE TDBSERVER_L1.EXE NSDVIGILSERVER.EXE TDBSERVER2_L1.EXE CSDISPATCHER.EXE CSLIVEVIEWER.EXE WDPLOGIN.EXE HELPPANE.EXE CODEMANAGER.EXE RDRCEF.EXE MDNSRESPONDER.EXE CAJSHOST.EXE MYSQLNOTIFIER.EXE DISCSOFTBUSSERVICE.EXE MYSQLWORKBENCH.EXE SECURECRT.EXE WIND.COSMOS.SHMMANAGER.EXE COSMOSTOOLS.EXE WINRAR.EXE WIND.COSMOS.RESCENTER.EXE WIND.COSMOS.LOCALBUS.EXE DPU_TOOLS_NET.EXE WIND.COSMOS.QUOTEDERIVATIVECROSSMARKET.EXE EVERYTHING.EXE TOTALCMD64.EXE WIND.COSMOS.TOOLS.EXE WIND.COSMOS.MONITORUI.EXE WIND.COSMOS.MONITOR.EXE WIND.COSMOS.BSNEWS.EXE WIND.COSMOS.SERVER.EXE WIND.COSMOS.QUOTEBASICSTOCKUS.EXE WIND.COSMOS.BSHOLOGRAPHIC.EXE EXTJOB.EXE HEARTBEATSERVICESTART.EXE DATATABLESOCKET.EXE FILETRANSFERSERVER.EXE ERLSRV.EXE REDGATE.CLIENT.SERVICE.EXE ERL.EXE EPMD.EXE WIND.DP.SERVICE.EXE WIN32SYSINFO.EXE INET_GETHOST.EXE ECLIPSE.EXE MICROSOFT.PYTHONTOOLS.ANALYZER.EXE BAIDUPINYIN.EXE SERVICEHUB.DATAWAREHOUSEHOST.EXE SNIPASTE.EXE MICROSOFT.CODEANALYSIS.LIVEUNITTESTING.ENTRYPOINT.EXE VSTEST.CONSOLE.EXE TESTHOST.X86.EXE RDFSNAPUPDATE.EXE BAIDUPINYIN.EXE BDIMEDATAREPORT.EXE DISTRIB.EXE PACKETBEAT.EXE WIND.SYSCONFIG.SERVER2.EXE CLOUD.EXE WUDS.GENERICCONFIG.EXE WUDSFE.CONSOLE.EXE MSSECSVC.EXE ABCEBSERVICE.EXE ICBCDAEMON_64.EXE TENPAYSERVER.EXE HIDITF.EXE GM3000GFAMON.EXE UNICLIENT.EXE YQZSZXZX.EXE GSFWZX.EXE CMBCU.EXE RRMSVR.EXE REGTOOL.EXE PINGAN_CERTD.EXE GFA_CERTD3003.EXE EPENVUPDATE.EXE MWICBCUKEYTOOLU.EXE ISCERTD_ABCHINA.EXE ABCSAFEPOP.EXE CERTD_I3000_SPDB.EXE MWICBCUKEYUI.EXE BJCACERTD_FT11.EXE APPSUBPROC.EXE SYHTTPD.EXE SYPNS.EXE ICBCEBANKASSIST.EXE DHMACHINESVC.EXE DHPLUGINMGR.EXE FETIONBOX.EXE YUNDETECTSERVICE.EXE NSCAUTH.EXE TBSECSVC.EXE TVNSERVER.EXE WSERVICE.EXE WSCHEDULER.EXE WSLOGON.EXE TAOBAOPROTECT.EXE DUALMONITOR.EXE WINDSERVER.EXE ADMINPASSWORD.EXE XENGUESTAGENT.EXE FLUX.EXE MSOSYNC.EXE TYPORA.EXE SUBLIME_TEXT.EXE PLUGIN_HOST.EXE RCP.EXE ADB.EXE WIND.EDB.TREESERVER.EXE EDB.EXE DOTNET.EXE WIND.COSMOS.DBSYNC.SERVER_WCV.EXE FH_SHELL.EXE WIND.COSMOS.WCV.USERINFO.SERVER.EXE WIND.COSMOS.QUOTEWCV.EXE WIND.COSMOS.QUOTEWCV.CT.EXE THIRDPIPS.EXE CENTERSERVERWINSERVICE.EXE PRINTSERVERWINSERVICE.EXE TEAMVIEWER_SERVICE.EXE AUTHENMNGSERVICE.EXE INODEMON.EXE HWDEVICESERVICE64.EXE OUC.EXE RAAUTOINSTSRV.EXE ZDSERV.EXE CANCELAUTOPLAY_SERVER.EXE DCSHELPER.EXE BDS.EXE KSAFESVC.EXE 2345PICSVC.EXE TSSERVICE.EXE KSAFETRAY.EXE DTSHELLHLP.EXE DISCSOFTBUSSERVICELITE.EXE ALPHASEX.EXE MJASTICKYNOTES.EXE TDFCHART_L1.EXE TDFSERVER2_L1.EXE VCPKGSRV.EXE REVIEWASSISTANTSERVER.EXE MICROSOFT.NOTES.EXE YOUDAODICT.EXE YOUDAODICTHELPER.EXE YOUDAOEH.EXE XSHELL.EXE XSHELLCORE.EXE WEBSTORM64.EXE MICROSOFT.VSCODE.CPP.EXTENSION.EXE YOUDAOOCR.EXE MICROSOFTPDFREADER.EXE FIDDLER.EXE WIND.AEGIS.AUTODEPLOY.FILESERVICE.REMOTING.EXE WIND.AEGIS.CRMINDEXADMIN.VSHOST.EXE WIND.3C.VOIP.STPUSH.EXE VMWARE-USBARBITRATOR.EXE DCUSBSUMMARY.EXE WIND.COSMOS.LOGINAS.EXE WIND.COSMOS.DBQUERY.EXE MYSQL.EXE TOMCAT8.EXE MYSQLINSTALLERCONSOLE.EXE DBPASSWORDFEEDER.EXE SSEREG.EXE WIFIOPENMONITOR2.EXE VDASSIGNSERVER.EXE SMGSPIDER.EXE PICPICK.EXE AXURERP8.EXE WIND.EIP.SSOSERVER.EXE SERVICE.EXE TOMCAT7W.EXE SSUDT.EXE YOUDAOWSH.EXE BASH.EXE SH.EXE WIND.IBROKER.FXOPTION.SERVER.ZC.EXE WIND.IRS.SERVER.EXE VNCVIEWER.EXE HQRECV_L2_N.EXE HQRECV_L1_MSGI.EXE HQRECV_L2_N_SZ.EXE HQRECV_L2_N_CF.EXE HQRECV_L1_CFOP.EXE HQRECV_L1_IDC.EXE HQRECV_L1_STATIC.EXE HQRECV_L1_PT.EXE HQRECV_L1_WP.EXE HQRECV_L1_OP.EXE TDFSERVER_ALL.EXE HQSEND_L2_N.EXE HQSEND_L1.EXE FCUPDATESERVICE.EXE TESTFUNDCOUNTER.EXE REVERSEPROXY_WINDOWS_AMD64.EXE TOAD.EXE XFTP.EXE PDFSAVER3.EXE FOXIT READER.EXE BCOMPARE.EXE FSCAPTURE.EXE ONENOTE.EXE WIND.AEGIS.LEVEL2REPORT.VSHOST.EXE .EXE PIC_2345SVC.EXE COMPILEPUBLISHASSIST.EXE 2345PDFREADER.EXE GROOVE.EXE SQLPLUS.EXE DBGHOST.EXE DSM_OM_SHRSVC64.EXE QIYISERVICE.EXE BCCLIPBOARD.EXE SNAGIT32.EXE SNAGPRIV.EXE TSCHELP.EXE SNAGITEDITOR.EXE SOGOUCLOUD.EXE CLOUDTESTER.EXE LINQPAD.EXE LINQPAD.USERQUERY.EXE SGTOOL.EXE POSTGRES.EXE DCNOTIFICATIONSERVER.EXE DCSERVERHTTPD.EXE DCROTATELOGS.EXE FOXITPROTECT.EXE