753c630c22612a230b9496e424c0b2b8dc63b09db9b16484cef9e8fc5bc271eb

General

Target

117fc5afa709ad652f2e2cb9516c890e_JaffaCakes118.exe
Size

50KB
MD5

117fc5afa709ad652f2e2cb9516c890e
SHA1

9ca829703369afc99e0d8a6384bdc84cd98aa032
SHA256

753c630c22612a230b9496e424c0b2b8dc63b09db9b16484cef9e8fc5bc271eb
SHA512

5a4b80416938280e5baaa7beac213f810094ebff1e6f36ab098eb530a14b9edb68a4c54bebd15adbc4c667fc7adeafa39220e0d79975ce4e1a072a42e7c4213d
SSDEEP

768:wWeTakGUwCbvd1uDYpG15J50CKSwzAMXWsqzrcw1UbhsDNYEv6XADdmf1VXn7p4Q:5e5bv6DYpaBwzAMXkx6wD0fLnXbU4

Score

8^/10

defense_evasion discovery exploit persistence upx

Malware Config

Signatures

Possible privilege escalation attempt 2 IoCs
exploit

Processes:

takeown.exeicacls.exe

pid process

2268 takeown.exe
2936 icacls.exe
Deletes itself 1 IoCs

Processes:

cmd.exe

pid process

1892 cmd.exe
Executes dropped EXE 1 IoCs

Processes:

wlock.exe

pid process

2060 wlock.exe
Loads dropped DLL 2 IoCs

Processes:

117fc5afa709ad652f2e2cb9516c890e_JaffaCakes118.exe

pid process

1740 117fc5afa709ad652f2e2cb9516c890e_JaffaCakes118.exe
1740 117fc5afa709ad652f2e2cb9516c890e_JaffaCakes118.exe
Modifies file permissions 1 TTPs 2 IoCs
discovery

File and Directory Permissions Modification
T1222

Processes:

takeown.exeicacls.exe

pid process

2268 takeown.exe
2936 icacls.exe
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

behavioral1/memory/1740-0-0x0000000000400000-0x000000000041D000-memory.dmp upx
behavioral1/memory/1740-28-0x0000000000400000-0x000000000041D000-memory.dmp upx
Adds Run key to start application 2 TTPs 1 IoCs
persistence

Registry Run Keys / Startup Folder
T1547.001

Modify Registry
T1112

Processes:

reg.exe

description ioc process

Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\wlock = "C:\\Users\\Admin\\wlock\\wlock.exe" reg.exe
File and Directory Permissions Modification: Windows File and Directory Permissions Modification 1 TTPs
defense_evasion

Windows File and Directory Permissions Modification
T1222.001
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

pid	process
2268	takeown.exe
2936	icacls.exe

pid	process
1892	cmd.exe

pid	process
2060	wlock.exe

pid	process
1740	117fc5afa709ad652f2e2cb9516c890e_JaffaCakes118.exe
1740	117fc5afa709ad652f2e2cb9516c890e_JaffaCakes118.exe

pid	process
2268	takeown.exe
2936	icacls.exe

resource	yara_rule
behavioral1/memory/1740-0-0x0000000000400000-0x000000000041D000-memory.dmp	upx
behavioral1/memory/1740-28-0x0000000000400000-0x000000000041D000-memory.dmp	upx

description	ioc	process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\wlock = "C:\\Users\\Admin\\wlock\\wlock.exe"	reg.exe

Kills process with taskkill 64 IoCs

evasion

Processes:

taskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exe

pid	process
956	taskkill.exe
1500	taskkill.exe
2312	taskkill.exe
2292	taskkill.exe
2668	taskkill.exe
768	taskkill.exe
1832	taskkill.exe
2484	taskkill.exe
2980	taskkill.exe
804	taskkill.exe
2576	taskkill.exe
1468	taskkill.exe
2708	taskkill.exe
1268	taskkill.exe
2284	taskkill.exe
1576	taskkill.exe
808	taskkill.exe
1916	taskkill.exe
2544	taskkill.exe
2152	taskkill.exe
1904	taskkill.exe
1928	taskkill.exe
2244	taskkill.exe
2684	taskkill.exe
576	taskkill.exe
1344	taskkill.exe
996	taskkill.exe
1908	taskkill.exe
2504	taskkill.exe
1688	taskkill.exe
1812	taskkill.exe
672	taskkill.exe
560	taskkill.exe
2748	taskkill.exe
2288	taskkill.exe
2916	taskkill.exe
884	taskkill.exe
1600	taskkill.exe
576	taskkill.exe
276	taskkill.exe
808	taskkill.exe
1468	taskkill.exe
3028	taskkill.exe
2108	taskkill.exe
2480	taskkill.exe
2076	taskkill.exe
2344	taskkill.exe
2824	taskkill.exe
2024	taskkill.exe
1512	taskkill.exe
1716	taskkill.exe
1548	taskkill.exe
916	taskkill.exe
1404	taskkill.exe
2336	taskkill.exe
2868	taskkill.exe
284	taskkill.exe
1548	taskkill.exe
2628	taskkill.exe
2872	taskkill.exe
1380	taskkill.exe
2104	taskkill.exe
3064	taskkill.exe
844	taskkill.exe

Modifies Control Panel 1 IoCs
evasion

Processes:

wlock.exe

description ioc process

Set value (str) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Control Panel\Desktop\ScreenSaveActive = "0" wlock.exe

description	ioc	process
Set value (str)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Control Panel\Desktop\ScreenSaveActive = "0"	wlock.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

Processes:

takeown.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exe117fc5afa709ad652f2e2cb9516c890e_JaffaCakes118.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exetaskkill.exe

description	pid	process
Token: SeTakeOwnershipPrivilege	2268	takeown.exe
Token: SeDebugPrivilege	2376	taskkill.exe
Token: SeDebugPrivilege	1484	taskkill.exe
Token: SeDebugPrivilege	2544	taskkill.exe
Token: SeDebugPrivilege	2684	taskkill.exe
Token: SeDebugPrivilege	2776	taskkill.exe
Token: SeDebugPrivilege	1796	taskkill.exe
Token: SeDebugPrivilege	2292	taskkill.exe
Token: SeDebugPrivilege	2116	taskkill.exe
Token: SeDebugPrivilege	1548	taskkill.exe
Token: SeDebugPrivilege	832	taskkill.exe
Token: SeDebugPrivilege	1692	taskkill.exe
Token: SeDebugPrivilege	3052	taskkill.exe
Token: SeDebugPrivilege	1680	taskkill.exe
Token: SeDebugPrivilege	796	taskkill.exe
Token: SeDebugPrivilege	768	taskkill.exe
Token: SeDebugPrivilege	1056	taskkill.exe
Token: SeDebugPrivilege	2788	taskkill.exe
Token: SeDebugPrivilege	912	taskkill.exe
Token: SeDebugPrivilege	412	taskkill.exe
Token: SeDebugPrivilege	2928	taskkill.exe
Token: SeDebugPrivilege	2280	taskkill.exe
Token: SeDebugPrivilege	1264	taskkill.exe
Token: SeDebugPrivilege	920	taskkill.exe
Token: SeIncBasePriorityPrivilege	1740	117fc5afa709ad652f2e2cb9516c890e_JaffaCakes118.exe
Token: SeDebugPrivilege	1616	taskkill.exe
Token: SeDebugPrivilege	2148	taskkill.exe
Token: SeDebugPrivilege	892	taskkill.exe
Token: SeDebugPrivilege	1912	taskkill.exe
Token: SeDebugPrivilege	1500	taskkill.exe
Token: SeDebugPrivilege	1248	taskkill.exe
Token: SeDebugPrivilege	2568	taskkill.exe
Token: SeDebugPrivilege	2480	taskkill.exe
Token: SeDebugPrivilege	2528	taskkill.exe
Token: SeDebugPrivilege	2360	taskkill.exe
Token: SeDebugPrivilege	2376	taskkill.exe
Token: SeDebugPrivilege	2424	taskkill.exe
Token: SeDebugPrivilege	2660	taskkill.exe
Token: SeDebugPrivilege	2692	taskkill.exe
Token: SeDebugPrivilege	1760	taskkill.exe
Token: SeDebugPrivilege	1832	taskkill.exe
Token: SeDebugPrivilege	404	taskkill.exe
Token: SeDebugPrivilege	1812	taskkill.exe
Token: SeDebugPrivilege	1516	taskkill.exe
Token: SeDebugPrivilege	1244	taskkill.exe
Token: SeDebugPrivilege	2008	taskkill.exe
Token: SeDebugPrivilege	3052	taskkill.exe
Token: SeDebugPrivilege	1680	taskkill.exe
Token: SeDebugPrivilege	2208	taskkill.exe
Token: SeDebugPrivilege	768	taskkill.exe
Token: SeDebugPrivilege	1056	taskkill.exe
Token: SeDebugPrivilege	2788	taskkill.exe
Token: SeDebugPrivilege	2948	taskkill.exe
Token: SeDebugPrivilege	3060	taskkill.exe
Token: SeDebugPrivilege	1604	taskkill.exe
Token: SeDebugPrivilege	360	taskkill.exe
Token: SeDebugPrivilege	752	taskkill.exe
Token: SeDebugPrivilege	2944	taskkill.exe
Token: SeDebugPrivilege	2648	taskkill.exe
Token: SeDebugPrivilege	1892	taskkill.exe
Token: SeDebugPrivilege	1916	taskkill.exe
Token: SeDebugPrivilege	2236	taskkill.exe
Token: SeDebugPrivilege	2152	taskkill.exe
Token: SeDebugPrivilege	1736	taskkill.exe

Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

wlock.exe

pid process

2060 wlock.exe
2060 wlock.exe

pid	process
2060	wlock.exe
2060	wlock.exe

Suspicious use of WriteProcessMemory 64 IoCs

Processes:

117fc5afa709ad652f2e2cb9516c890e_JaffaCakes118.execmd.exewlock.exe

description	pid	process	target process
PID 1740 wrote to memory of 2268	1740	117fc5afa709ad652f2e2cb9516c890e_JaffaCakes118.exe	takeown.exe
PID 1740 wrote to memory of 2268	1740	117fc5afa709ad652f2e2cb9516c890e_JaffaCakes118.exe	takeown.exe
PID 1740 wrote to memory of 2268	1740	117fc5afa709ad652f2e2cb9516c890e_JaffaCakes118.exe	takeown.exe
PID 1740 wrote to memory of 2268	1740	117fc5afa709ad652f2e2cb9516c890e_JaffaCakes118.exe	takeown.exe
PID 1740 wrote to memory of 2936	1740	117fc5afa709ad652f2e2cb9516c890e_JaffaCakes118.exe	icacls.exe
PID 1740 wrote to memory of 2936	1740	117fc5afa709ad652f2e2cb9516c890e_JaffaCakes118.exe	icacls.exe
PID 1740 wrote to memory of 2936	1740	117fc5afa709ad652f2e2cb9516c890e_JaffaCakes118.exe	icacls.exe
PID 1740 wrote to memory of 2936	1740	117fc5afa709ad652f2e2cb9516c890e_JaffaCakes118.exe	icacls.exe
PID 1740 wrote to memory of 2036	1740	117fc5afa709ad652f2e2cb9516c890e_JaffaCakes118.exe	cmd.exe
PID 1740 wrote to memory of 2036	1740	117fc5afa709ad652f2e2cb9516c890e_JaffaCakes118.exe	cmd.exe
PID 1740 wrote to memory of 2036	1740	117fc5afa709ad652f2e2cb9516c890e_JaffaCakes118.exe	cmd.exe
PID 1740 wrote to memory of 2036	1740	117fc5afa709ad652f2e2cb9516c890e_JaffaCakes118.exe	cmd.exe
PID 1740 wrote to memory of 2564	1740	117fc5afa709ad652f2e2cb9516c890e_JaffaCakes118.exe	cmd.exe
PID 1740 wrote to memory of 2564	1740	117fc5afa709ad652f2e2cb9516c890e_JaffaCakes118.exe	cmd.exe
PID 1740 wrote to memory of 2564	1740	117fc5afa709ad652f2e2cb9516c890e_JaffaCakes118.exe	cmd.exe
PID 1740 wrote to memory of 2564	1740	117fc5afa709ad652f2e2cb9516c890e_JaffaCakes118.exe	cmd.exe
PID 2564 wrote to memory of 2556	2564	cmd.exe	reg.exe
PID 2564 wrote to memory of 2556	2564	cmd.exe	reg.exe
PID 2564 wrote to memory of 2556	2564	cmd.exe	reg.exe
PID 2564 wrote to memory of 2556	2564	cmd.exe	reg.exe
PID 1740 wrote to memory of 2060	1740	117fc5afa709ad652f2e2cb9516c890e_JaffaCakes118.exe	wlock.exe
PID 1740 wrote to memory of 2060	1740	117fc5afa709ad652f2e2cb9516c890e_JaffaCakes118.exe	wlock.exe
PID 1740 wrote to memory of 2060	1740	117fc5afa709ad652f2e2cb9516c890e_JaffaCakes118.exe	wlock.exe
PID 1740 wrote to memory of 2060	1740	117fc5afa709ad652f2e2cb9516c890e_JaffaCakes118.exe	wlock.exe
PID 2060 wrote to memory of 2376	2060	wlock.exe	taskkill.exe
PID 2060 wrote to memory of 2376	2060	wlock.exe	taskkill.exe
PID 2060 wrote to memory of 2376	2060	wlock.exe	taskkill.exe
PID 2060 wrote to memory of 2376	2060	wlock.exe	taskkill.exe
PID 2060 wrote to memory of 1484	2060	wlock.exe	taskkill.exe
PID 2060 wrote to memory of 1484	2060	wlock.exe	taskkill.exe
PID 2060 wrote to memory of 1484	2060	wlock.exe	taskkill.exe
PID 2060 wrote to memory of 1484	2060	wlock.exe	taskkill.exe
PID 2060 wrote to memory of 2544	2060	wlock.exe	taskkill.exe
PID 2060 wrote to memory of 2544	2060	wlock.exe	taskkill.exe
PID 2060 wrote to memory of 2544	2060	wlock.exe	taskkill.exe
PID 2060 wrote to memory of 2544	2060	wlock.exe	taskkill.exe
PID 2060 wrote to memory of 2684	2060	wlock.exe	taskkill.exe
PID 2060 wrote to memory of 2684	2060	wlock.exe	taskkill.exe
PID 2060 wrote to memory of 2684	2060	wlock.exe	taskkill.exe
PID 2060 wrote to memory of 2684	2060	wlock.exe	taskkill.exe
PID 2060 wrote to memory of 2776	2060	wlock.exe	taskkill.exe
PID 2060 wrote to memory of 2776	2060	wlock.exe	taskkill.exe
PID 2060 wrote to memory of 2776	2060	wlock.exe	taskkill.exe
PID 2060 wrote to memory of 2776	2060	wlock.exe	taskkill.exe
PID 2060 wrote to memory of 1796	2060	wlock.exe	taskkill.exe
PID 2060 wrote to memory of 1796	2060	wlock.exe	taskkill.exe
PID 2060 wrote to memory of 1796	2060	wlock.exe	taskkill.exe
PID 2060 wrote to memory of 1796	2060	wlock.exe	taskkill.exe
PID 2060 wrote to memory of 2292	2060	wlock.exe	taskkill.exe
PID 2060 wrote to memory of 2292	2060	wlock.exe	taskkill.exe
PID 2060 wrote to memory of 2292	2060	wlock.exe	taskkill.exe
PID 2060 wrote to memory of 2292	2060	wlock.exe	taskkill.exe
PID 2060 wrote to memory of 2116	2060	wlock.exe	taskkill.exe
PID 2060 wrote to memory of 2116	2060	wlock.exe	taskkill.exe
PID 2060 wrote to memory of 2116	2060	wlock.exe	taskkill.exe
PID 2060 wrote to memory of 2116	2060	wlock.exe	taskkill.exe
PID 2060 wrote to memory of 1548	2060	wlock.exe	taskkill.exe
PID 2060 wrote to memory of 1548	2060	wlock.exe	taskkill.exe
PID 2060 wrote to memory of 1548	2060	wlock.exe	taskkill.exe
PID 2060 wrote to memory of 1548	2060	wlock.exe	taskkill.exe
PID 2060 wrote to memory of 832	2060	wlock.exe	taskkill.exe
PID 2060 wrote to memory of 832	2060	wlock.exe	taskkill.exe
PID 2060 wrote to memory of 832	2060	wlock.exe	taskkill.exe
PID 2060 wrote to memory of 832	2060	wlock.exe	taskkill.exe

C:\Users\Admin\AppData\Local\Temp\117fc5afa709ad652f2e2cb9516c890e_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\117fc5afa709ad652f2e2cb9516c890e_JaffaCakes118.exe"
1⤵
- Loads dropped DLL
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:1740

C:\Windows\SysWOW64\takeown.exe
"C:\Windows\System32\takeown.exe" /f "C:\Windows\System32\rstrui.exe"
2⤵
- Possible privilege escalation attempt
- Modifies file permissions
- Suspicious use of AdjustPrivilegeToken
PID:2268

C:\Windows\SysWOW64\icacls.exe
"C:\Windows\System32\icacls.exe" "C:\Windows\System32\rstrui.exe" /grant Admin:F
2⤵
- Possible privilege escalation attempt
- Modifies file permissions
PID:2936

C:\Windows\SysWOW64\cmd.exe
"C:\Windows\System32\cmd.exe" /c del /f /q "C:\Windows\System32\rstrui.exe"
2⤵
PID:2036

C:\Windows\SysWOW64\cmd.exe
"C:\Windows\System32\cmd.exe" /c REG ADD HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v wlock /t REG_SZ /d "C:\Users\Admin\wlock\wlock.exe" /f
2⤵
- Suspicious use of WriteProcessMemory
PID:2564

C:\Windows\SysWOW64\reg.exe
REG ADD HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v wlock /t REG_SZ /d "C:\Users\Admin\wlock\wlock.exe" /f
3⤵
- Adds Run key to start application
PID:2556

C:\Users\Admin\wlock\wlock.exe
"C:\Users\Admin\wlock\wlock.exe" f
2⤵
- Executes dropped EXE
- Modifies Control Panel
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2060

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:2376

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:1484

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:2544

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
- Suspicious use of AdjustPrivilegeToken
PID:2684

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:2776

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:1796

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
- Suspicious use of AdjustPrivilegeToken
PID:2292

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:2116

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
- Suspicious use of AdjustPrivilegeToken
PID:1548

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:832

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:1692

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:3052

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:1680

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:796

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:768

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:1056

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:2788

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:912

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:412

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:2928

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:2280

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:1264

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:920

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:1616

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:2148

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:892

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:1912

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:1500

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:1248

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:2568

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
- Suspicious use of AdjustPrivilegeToken
PID:2480

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:2528

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:2360

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:2376

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:2424

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:2660

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:2692

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:1760

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:1832

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:404

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:1812

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:1516

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:1244

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:2008

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:3052

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:1680

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:2208

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:768

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:1056

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:2788

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:2948

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:3060

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:1604

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:360

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:752

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:2944

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:2648

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:1892

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:1916

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:2236

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
- Suspicious use of AdjustPrivilegeToken
PID:2152

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Suspicious use of AdjustPrivilegeToken
PID:1736

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1908

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2508

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2556

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2608

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2528

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2436

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2376

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2668

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1816

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1584

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1760

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:1832

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:404

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:1812

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1548

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1180

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1884

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2188

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:488

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:588

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:608

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1056

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2124

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2916

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1664

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1676

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:360

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:320

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:916

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2216

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2156

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1436

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2236

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1996

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2984

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2568

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2464

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2604

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2016

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2416

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2424

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2660

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2776

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:284

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2292

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1972

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:2284

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1240

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1692

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:888

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2044

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2040

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2188

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:936

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2012

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:804

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:912

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1704

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:956

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1720

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:3056

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2944

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2648

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:448

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:576

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:892

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1532

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2168

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:2872

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2492

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2728

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2480

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2604

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2484

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2384

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2424

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:2668

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:2544

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:284

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1796

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2808

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1324

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:1344

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:2024

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:888

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2044

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2040

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1412

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:848

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:608

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2336

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2904

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:3060

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1512

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1544

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:344

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:572

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:1904

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:3016

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:576

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:3064

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1896

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1912

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2572

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:2868

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2728

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2608

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2536

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2796

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2540

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1748

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:332

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:276

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:284

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1796

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2808

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2284

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2028

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1244

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2004

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:3052

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2040

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:808

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1076

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2696

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:2336

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:912

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1704

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:992

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1268

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:344

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:572

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1904

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:448

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:576

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:3064

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1532

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1912

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2872

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2492

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2364

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1712

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2476

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2796

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2252

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1784

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1804

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:276

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:284

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1796

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1332

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2284

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1516

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2024

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:540

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:3052

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2312

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2188

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2332

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2952

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2992

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1480

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:3060

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1700

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1720

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2192

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2132

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:844

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1980

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1964

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2456

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1896

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1736

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2388

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2532

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2528

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2464

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2672

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2432

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1840

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2080

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2084

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1832

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1456

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2460

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1596

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1136

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:2344

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:700

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:816

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:580

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:768

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:808

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:848

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2964

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1708

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:1512

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1704

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:992

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1268

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:344

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:996

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2752

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2236

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:576

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2508

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2564

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2480

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1380

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2016

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1484

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1016

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2096

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1828

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2668

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2296

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1476

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1228

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:1548

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2692

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:796

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2004

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2072

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2040

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2160

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1468

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2940

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2928

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:912

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2904

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2924

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1048

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2200

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:956

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1956

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1004

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1916

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:3064

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2036

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2628

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1992

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2340

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2464

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1000

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2660

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2112

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1648

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:300

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:276

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1204

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1144

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2348

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2732

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:2748

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2008

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:888

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:3052

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:876

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2792

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:848

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2964

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1128

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1480

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:1928

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:3012

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2512

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2192

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2132

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1536

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1980

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:1908

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2556

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2500

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2360

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:2576

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2016

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2580

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1016

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2096

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1828

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1560

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:2288

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2116

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1324

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1624

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:672

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1232

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1752

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2012

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2124

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1404

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:1468

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:904

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2136

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1580

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2316

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:2916

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2032

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2200

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:684

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2896

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2472

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1996

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:1500

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2412

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2872

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2380

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2608

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:2484

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2384

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2532

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1800

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1784

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1560

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2296

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1456

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1228

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1252

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2692

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:324

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1752

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2172

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2184

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2128

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2188

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1104

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:1716

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1284

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:3060

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1704

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:992

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:872

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:3000

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2132

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2152

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2468

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2436

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2232

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2688

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:660

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2672

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1556

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2660

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2540

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:2980

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1800

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1784

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1508

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:284

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1332

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2348

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1624

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2692

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:324

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1056

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:3048

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1576

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2884

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1564

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1076

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1104

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1716

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:916

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1700

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:2824

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:3056

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2212

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2192

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1956

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2152

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1996

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2728

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2340

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2476

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1840

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2416

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2276

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1984

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2096

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1828

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1832

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2600

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1692

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1228

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1808

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1888

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:336

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1080

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2632

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2040

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2996

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1296

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:500

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:912

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1836

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:752

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1256

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1132

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:320

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:892

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:880

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1284

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2896

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2572

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2588

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2480

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2492

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2584

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2476

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2016

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:2104

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2628

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2844

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2112

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1636

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1180

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2288

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2460

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1332

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1412

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2004

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2024

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1884

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2520

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2312

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:1576

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:380

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:412

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1512

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2928

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:328

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1580

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2140

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2824

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2840

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:448

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1904

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:3064

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2612

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1908

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2420

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2556

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2504

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2548

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1840

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2532

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:628

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2448

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2248

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1688

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1832

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1136

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1548

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2348

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1624

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2296

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1420

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2772

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:960

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2736

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:808

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1296

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:588

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2120

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1836

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:752

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1480

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2904

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2216

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:992

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:448

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1956

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2832

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2612

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2868

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2352

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1824

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2376

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2476

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2016

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1016

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2776

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1800

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:276

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1636

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1180

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2680

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2284

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:672

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:3068

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:3036

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1056

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1768

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1416

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2012

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:808

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1564

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:2076

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1512

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1836

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:328

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2924

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2032

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1620

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2368

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1980

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:3032

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2236

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2232

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2568

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1612

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2608

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2584

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2548

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2384

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1472

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:628

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1784

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1652

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2180

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:3028

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2452

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2028

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:796

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:560

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2692

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2064

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2240

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2748

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1676

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:1404

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1128

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1264

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2316

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1256

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:756

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1048

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2824

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2168

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2472

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:844

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2624

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2720

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2588

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2480

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2360

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1556

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:2108

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2540

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1568

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2628

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2672

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1204

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1144

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1684

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2856

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2020

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1332

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1412

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1588

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:3008

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1884

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2172

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:2312

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2012

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1576

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2712

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1668

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1700

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1212

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:328

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1544

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2648

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:3016

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:2244

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:3012

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1284

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2412

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:1380

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1908

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2636

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:2504

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1584

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2540

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2084

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:2628

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2672

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2708

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:276

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1636

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2856

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1344

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1332

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1228

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1588

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1972

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1884

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2888

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2632

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2040

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:808

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2196

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1668

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1700

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1720

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1936

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1048

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1104

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2200

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2244

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:3012

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2624

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2236

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2500

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2568

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2360

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2504

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:884

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2384

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1660

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2292

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2448

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1652

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:284

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:984

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2732

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2028

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1412

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:560

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1232

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:3048

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2772

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2736

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1676

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:1468

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:580

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2136

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1216

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2916

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1580

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2924

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2032

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:572

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2472

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1956

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2984

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:660

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1380

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1908

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2676

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2492

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1288

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1804

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2276

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:300

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1948

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2112

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1180

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2744

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1832

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:832

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:700

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:1688

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1080

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1136

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2064

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2240

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2748

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2696

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1420

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2928

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2172

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:380

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1256

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2512

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:320

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:576

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2148

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1212

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2944

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1500

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2388

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2468

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:1600

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2536

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1284

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2504

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2584

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2532

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2780

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1820

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2672

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:2708

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2820

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1684

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2544

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2372

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1648

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2044

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1056

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2792

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2128

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2312

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2188

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1576

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:580

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1264

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1704

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1836

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2952

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2924

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2648

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1620

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:1268

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2152

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
- Kills process with taskkill
PID:1916

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2412

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1380

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1908

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2556

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2492

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1960

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1584

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2564

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:300

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2292

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2308

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:404

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1144

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1816

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:336

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2008

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2184

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:3036

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1768

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1656

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2736

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1672

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2696

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2948

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2280

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:916

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2316

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1988

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1720

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2824

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:576

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2472

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2368

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2832

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2624

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2936

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2352

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2464

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2608

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1288

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1812

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2276

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2084

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2668

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:332

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2448

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:276

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1832

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2776

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2740

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:672

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2348

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:812

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:3036

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:704

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1884

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2748

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1676

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1244

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2920

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2860

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1644

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:3060

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1480

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2396

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2136

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2036

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:992

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:1980

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2896

C:\Windows\SysWOW64\taskkill.exe
taskkill /im taskmgr.exe /f
3⤵
PID:2508

C:\Windows\SysWOW64\cmd.exe
"C:\Windows\system32\cmd.exe" /C DEL C:\Users\Admin\AppData\Local\Temp\117FC5~1.EXE
2⤵
- Deletes itself
PID:1892

MITRE ATT&CK Matrix ATT&CK v13

Replay Monitor

Loading Replay Monitor...

Downloads

\Users\Admin\wlock\wlock.exe
Filesize
73KB

MD5
68db28477509a770acbf114b0de781a8

SHA1
3ac88ce18f440b64e3a4bc3a16c11c01ef9b4a23

SHA256
69586e31e8feac35f72e7da461dd8d4b98ce0ff1c6fec68d88d20c37156cea88

SHA512
c6f9e406ea7b8d08f8d5b37b19a9849a4eeee47f60284297e0fa908bc8c94422cedabd5d6b3462c2545035578b9bc08b47cf58667c7fc8999aca7ee2e919fd5a

Download Submit
memory/1740-0-0x0000000000400000-0x000000000041D000-memory.dmp

Filesize
116KB

Download
memory/1740-9-0x00000000002C0000-0x00000000002C1000-memory.dmp

Filesize
4KB

Download
memory/1740-28-0x0000000000400000-0x000000000041D000-memory.dmp

Filesize
116KB

Download
memory/1740-25-0x00000000002C0000-0x00000000002C1000-memory.dmp

Filesize
4KB

Download
memory/1740-26-0x00000000002C0000-0x00000000002C1000-memory.dmp

Filesize
4KB

Download
memory/2060-15-0x0000000000070000-0x0000000000071000-memory.dmp

Filesize
4KB

Download
memory/2060-12-0x0000000000070000-0x0000000000071000-memory.dmp

Filesize
4KB

Download
memory/2060-17-0x0000000000070000-0x0000000000071000-memory.dmp

Filesize
4KB

Download
memory/2060-16-0x0000000000070000-0x0000000000071000-memory.dmp

Filesize
4KB

Download
memory/2060-19-0x0000000000070000-0x0000000000071000-memory.dmp

Filesize
4KB

Download
memory/2060-14-0x0000000000070000-0x0000000000071000-memory.dmp

Filesize
4KB

Download
memory/2060-13-0x0000000000070000-0x0000000000071000-memory.dmp

Filesize
4KB

Download
memory/2060-18-0x0000000000070000-0x0000000000071000-memory.dmp

Filesize
4KB

Download
memory/2060-11-0x0000000000070000-0x0000000000071000-memory.dmp

Filesize
4KB

Download
memory/2060-24-0x0000000000070000-0x0000000000071000-memory.dmp

Filesize
4KB

Download
memory/2060-23-0x0000000000070000-0x0000000000071000-memory.dmp

Filesize
4KB

Download
memory/2060-20-0x0000000000070000-0x0000000000071000-memory.dmp

Filesize
4KB

Download
memory/2060-21-0x0000000000070000-0x0000000000071000-memory.dmp

Filesize
4KB

Download
memory/2060-22-0x0000000000070000-0x0000000000071000-memory.dmp

Filesize
4KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix ATT&CK v13

Replay Monitor

Loading Replay Monitor...

Downloads