sysmon.exe is installed with Vixup Trojan that downloads code from the internet and installs itself in the Registry.