What are these cloned services in W10 with hex code attached to them?

M76

[H]F Junkie
Joined
Jun 12, 2012
Messages
11,157
I've just noticed that several system services have clones of them with a specific hex code attached to them.
I started panic deleting them because I Thought it was some sort of malware pretending to be system services.
But after rebooting they all came back with a different hexcode.
Then I checked another Win10 computer and it also had these clones.
I didn't notice any odd behaviour, and AV doesn't find anything. So what is this? This is very suspicious and I don't like it one bit.
 

vortexware

n00b
Joined
Mar 22, 2020
Messages
58
Yeh post some screens so we can analyze them, run a system scan using MalwareBytes
 

M76

[H]F Junkie
Joined
Jun 12, 2012
Messages
11,157
Untitled.png


You see the services with _4c022? There are at least a dozen more of them.
Google search didn't turn up any relaiable information. But it was hinted that it might be some user level services, as in W10 clones these services on a per user level, so each logged in user has a separate instance of these services hence the random hex code.
 
Top