rms | bf4182178ba2625f04c85d52f97fa88c4cfb15e7161f0343b056efc84ddf5eec

Analysis

max time kernel
162s
max time network
161s
platform
windows7_x64
resource
win7-en-20211208
submitted
28-01-2022 18:34

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

bf4182178ba2625f04c85d52f97fa88c4cfb15e7161f0343b056efc84ddf5eec.exe
Size

4.0MB
MD5

8721701be0cdc7029182765f1612ee6c
SHA1

855a9d88478538751e5a6cea832a0ddbcb60e308
SHA256

bf4182178ba2625f04c85d52f97fa88c4cfb15e7161f0343b056efc84ddf5eec
SHA512

c35fcd56894c80f36a492fab2fc44ec5574f14ab4d99f5dd8eddee12ec58498fe1d2ce2e18684cbfd33f3c7c11630111aaf9cd410ea6a7251c803758185fea20

Score

10^/10

rms persistence rat trojan

Malware Config

Signatures

RMS
Remote Manipulator System (RMS) is a remote access tool developed by Russian organization TektonIT.
trojan rat rms

Executes dropped EXE 5 IoCs

pid	Process
832	exit.exe
1100	chrome-service.exe
1388	exit.exe
1860	winserv.exe
676	winserv.exe

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-3846991908-3261386348-1409841751-1000\Control Panel\International\Geo\Nation	winserv.exe

Loads dropped DLL 10 IoCs

pid	Process
828	bf4182178ba2625f04c85d52f97fa88c4cfb15e7161f0343b056efc84ddf5eec.exe
828	bf4182178ba2625f04c85d52f97fa88c4cfb15e7161f0343b056efc84ddf5eec.exe
828	bf4182178ba2625f04c85d52f97fa88c4cfb15e7161f0343b056efc84ddf5eec.exe
828	bf4182178ba2625f04c85d52f97fa88c4cfb15e7161f0343b056efc84ddf5eec.exe
820	cmd.exe
1100	chrome-service.exe
1100	chrome-service.exe
1100	chrome-service.exe
1100	chrome-service.exe
1404	cmd.exe

Adds Run key to start application 2 TTPs 2 IoCs

persistence

Registry Run Keys / Startup Folder

T1060

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3846991908-3261386348-1409841751-1000\Software\Microsoft\Windows\CurrentVersion\Run	reg.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3846991908-3261386348-1409841751-1000\Software\Microsoft\Windows\CurrentVersion\Run\Chrome Maintenance Service = "C:\\ProgramData\\Chrome Maintenance Service\\winserv.exe"	reg.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

Kills process with taskkill 64 IoCs

evasion

pid	Process
992	taskkill.exe
1792	taskkill.exe
1096	Process not Found
1684	Process not Found
556	taskkill.exe
2024	taskkill.exe
1580	taskkill.exe
576	Process not Found
1528	Process not Found
992	Process not Found
1848	taskkill.exe
832	taskkill.exe
744	taskkill.exe
924	taskkill.exe
832	taskkill.exe
1644	taskkill.exe
1032	taskkill.exe
1924	Process not Found
568	taskkill.exe
1160	taskkill.exe
1980	taskkill.exe
2028	taskkill.exe
1784	taskkill.exe
1752	taskkill.exe
1664	Process not Found
1328	taskkill.exe
956	taskkill.exe
576	taskkill.exe
280	taskkill.exe
1668	taskkill.exe
2008	taskkill.exe
556	taskkill.exe
1108	Process not Found
1536	taskkill.exe
832	taskkill.exe
1256	taskkill.exe
368	taskkill.exe
956	taskkill.exe
956	taskkill.exe
1032	Process not Found
1720	Process not Found
1556	Process not Found
1512	taskkill.exe
596	taskkill.exe
1924	taskkill.exe
1040	taskkill.exe
820	taskkill.exe
848	taskkill.exe
1908	taskkill.exe
1060	Process not Found
1912	taskkill.exe
992	Process not Found
1664	Process not Found
1952	taskkill.exe
1536	taskkill.exe
1712	taskkill.exe
1096	taskkill.exe
1372	taskkill.exe
280	taskkill.exe
820	taskkill.exe
1000	taskkill.exe
1792	Process not Found
1708	Process not Found
660	taskkill.exe

Runs ping.exe 1 TTPs 2 IoCs

Remote System Discovery

T1018

pid	Process
1032	PING.EXE
1924	PING.EXE

Suspicious behavior: EnumeratesProcesses 9 IoCs

pid	Process
1860	winserv.exe
1860	winserv.exe
1860	winserv.exe
1860	winserv.exe
1860	winserv.exe
676	winserv.exe
676	winserv.exe
676	winserv.exe
676	winserv.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeDebugPrivilege	1160	taskkill.exe
Token: SeDebugPrivilege	1980	taskkill.exe
Token: SeDebugPrivilege	928	taskkill.exe
Token: SeDebugPrivilege	880	taskkill.exe
Token: SeDebugPrivilege	1952	taskkill.exe
Token: SeDebugPrivilege	1584	taskkill.exe
Token: SeDebugPrivilege	320	taskkill.exe
Token: SeDebugPrivilege	1860	winserv.exe
Token: SeDebugPrivilege	432	taskkill.exe
Token: SeDebugPrivilege	1260	taskkill.exe
Token: SeDebugPrivilege	556	taskkill.exe
Token: SeDebugPrivilege	1036	taskkill.exe
Token: SeDebugPrivilege	1508	taskkill.exe
Token: SeDebugPrivilege	1752	taskkill.exe
Token: SeTakeOwnershipPrivilege	676	winserv.exe
Token: SeTcbPrivilege	676	winserv.exe
Token: SeDebugPrivilege	1792	taskkill.exe
Token: SeTcbPrivilege	676	winserv.exe
Token: SeDebugPrivilege	1952	taskkill.exe
Token: SeDebugPrivilege	1580	taskkill.exe
Token: SeDebugPrivilege	1860	taskkill.exe
Token: SeDebugPrivilege	1796	taskkill.exe
Token: SeDebugPrivilege	1000	taskkill.exe
Token: SeDebugPrivilege	556	taskkill.exe
Token: SeDebugPrivilege	1036	taskkill.exe
Token: SeDebugPrivilege	1508	taskkill.exe
Token: SeDebugPrivilege	1720	taskkill.exe
Token: SeDebugPrivilege	2028	taskkill.exe
Token: SeDebugPrivilege	1576	taskkill.exe
Token: SeDebugPrivilege	900	taskkill.exe
Token: SeDebugPrivilege	1912	taskkill.exe
Token: SeDebugPrivilege	924	taskkill.exe
Token: SeDebugPrivilege	1328	taskkill.exe
Token: SeDebugPrivilege	368	taskkill.exe
Token: SeDebugPrivilege	1256	taskkill.exe
Token: SeDebugPrivilege	1192	taskkill.exe
Token: SeDebugPrivilege	1736	taskkill.exe
Token: SeDebugPrivilege	1160	taskkill.exe
Token: SeDebugPrivilege	1784	taskkill.exe
Token: SeDebugPrivilege	240	taskkill.exe
Token: SeDebugPrivilege	1696	taskkill.exe
Token: SeDebugPrivilege	320	taskkill.exe
Token: SeDebugPrivilege	1048	taskkill.exe
Token: SeDebugPrivilege	1040	taskkill.exe
Token: SeDebugPrivilege	568	taskkill.exe
Token: SeDebugPrivilege	956	taskkill.exe
Token: SeDebugPrivilege	1896	taskkill.exe
Token: SeDebugPrivilege	848	taskkill.exe
Token: SeDebugPrivilege	2020	taskkill.exe
Token: SeDebugPrivilege	596	taskkill.exe
Token: SeDebugPrivilege	1560	taskkill.exe
Token: SeDebugPrivilege	1544	taskkill.exe
Token: SeDebugPrivilege	1096	taskkill.exe
Token: SeDebugPrivilege	1616	taskkill.exe
Token: SeDebugPrivilege	1104	taskkill.exe
Token: SeDebugPrivilege	1536	taskkill.exe
Token: SeDebugPrivilege	832	taskkill.exe
Token: SeDebugPrivilege	1512	taskkill.exe
Token: SeDebugPrivilege	1248	taskkill.exe
Token: SeDebugPrivilege	1036	taskkill.exe
Token: SeDebugPrivilege	1700	taskkill.exe
Token: SeDebugPrivilege	916	taskkill.exe
Token: SeDebugPrivilege	1684	taskkill.exe
Token: SeDebugPrivilege	240	taskkill.exe

Suspicious use of SetWindowsHookEx 8 IoCs

pid	Process
1860	winserv.exe
1860	winserv.exe
1860	winserv.exe
1860	winserv.exe
676	winserv.exe
676	winserv.exe
676	winserv.exe
676	winserv.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 828 wrote to memory of 832	828	bf4182178ba2625f04c85d52f97fa88c4cfb15e7161f0343b056efc84ddf5eec.exe	27
PID 828 wrote to memory of 832	828	bf4182178ba2625f04c85d52f97fa88c4cfb15e7161f0343b056efc84ddf5eec.exe	27
PID 828 wrote to memory of 832	828	bf4182178ba2625f04c85d52f97fa88c4cfb15e7161f0343b056efc84ddf5eec.exe	27
PID 828 wrote to memory of 832	828	bf4182178ba2625f04c85d52f97fa88c4cfb15e7161f0343b056efc84ddf5eec.exe	27
PID 828 wrote to memory of 832	828	bf4182178ba2625f04c85d52f97fa88c4cfb15e7161f0343b056efc84ddf5eec.exe	27
PID 828 wrote to memory of 832	828	bf4182178ba2625f04c85d52f97fa88c4cfb15e7161f0343b056efc84ddf5eec.exe	27
PID 828 wrote to memory of 832	828	bf4182178ba2625f04c85d52f97fa88c4cfb15e7161f0343b056efc84ddf5eec.exe	27
PID 832 wrote to memory of 820	832	exit.exe	29
PID 832 wrote to memory of 820	832	exit.exe	29
PID 832 wrote to memory of 820	832	exit.exe	29
PID 832 wrote to memory of 820	832	exit.exe	29
PID 832 wrote to memory of 820	832	exit.exe	29
PID 832 wrote to memory of 820	832	exit.exe	29
PID 832 wrote to memory of 820	832	exit.exe	29
PID 820 wrote to memory of 1924	820	cmd.exe	30
PID 820 wrote to memory of 1924	820	cmd.exe	30
PID 820 wrote to memory of 1924	820	cmd.exe	30
PID 820 wrote to memory of 1924	820	cmd.exe	30
PID 820 wrote to memory of 1924	820	cmd.exe	30
PID 820 wrote to memory of 1924	820	cmd.exe	30
PID 820 wrote to memory of 1924	820	cmd.exe	30
PID 820 wrote to memory of 1032	820	cmd.exe	31
PID 820 wrote to memory of 1032	820	cmd.exe	31
PID 820 wrote to memory of 1032	820	cmd.exe	31
PID 820 wrote to memory of 1032	820	cmd.exe	31
PID 820 wrote to memory of 1032	820	cmd.exe	31
PID 820 wrote to memory of 1032	820	cmd.exe	31
PID 820 wrote to memory of 1032	820	cmd.exe	31
PID 820 wrote to memory of 1100	820	cmd.exe	32
PID 820 wrote to memory of 1100	820	cmd.exe	32
PID 820 wrote to memory of 1100	820	cmd.exe	32
PID 820 wrote to memory of 1100	820	cmd.exe	32
PID 820 wrote to memory of 1100	820	cmd.exe	32
PID 820 wrote to memory of 1100	820	cmd.exe	32
PID 820 wrote to memory of 1100	820	cmd.exe	32
PID 1100 wrote to memory of 1388	1100	chrome-service.exe	33
PID 1100 wrote to memory of 1388	1100	chrome-service.exe	33
PID 1100 wrote to memory of 1388	1100	chrome-service.exe	33
PID 1100 wrote to memory of 1388	1100	chrome-service.exe	33
PID 1100 wrote to memory of 1388	1100	chrome-service.exe	33
PID 1100 wrote to memory of 1388	1100	chrome-service.exe	33
PID 1100 wrote to memory of 1388	1100	chrome-service.exe	33
PID 1388 wrote to memory of 1404	1388	exit.exe	35
PID 1388 wrote to memory of 1404	1388	exit.exe	35
PID 1388 wrote to memory of 1404	1388	exit.exe	35
PID 1388 wrote to memory of 1404	1388	exit.exe	35
PID 1388 wrote to memory of 1404	1388	exit.exe	35
PID 1388 wrote to memory of 1404	1388	exit.exe	35
PID 1388 wrote to memory of 1404	1388	exit.exe	35
PID 1404 wrote to memory of 848	1404	cmd.exe	36
PID 1404 wrote to memory of 848	1404	cmd.exe	36
PID 1404 wrote to memory of 848	1404	cmd.exe	36
PID 1404 wrote to memory of 848	1404	cmd.exe	36
PID 1404 wrote to memory of 848	1404	cmd.exe	36
PID 1404 wrote to memory of 848	1404	cmd.exe	36
PID 1404 wrote to memory of 848	1404	cmd.exe	36
PID 1404 wrote to memory of 1860	1404	cmd.exe	37
PID 1404 wrote to memory of 1860	1404	cmd.exe	37
PID 1404 wrote to memory of 1860	1404	cmd.exe	37
PID 1404 wrote to memory of 1860	1404	cmd.exe	37
PID 1404 wrote to memory of 1860	1404	cmd.exe	37
PID 1404 wrote to memory of 1860	1404	cmd.exe	37
PID 1404 wrote to memory of 1860	1404	cmd.exe	37
PID 1404 wrote to memory of 1160	1404	cmd.exe	38

C:\Users\Admin\AppData\Local\Temp\bf4182178ba2625f04c85d52f97fa88c4cfb15e7161f0343b056efc84ddf5eec.exe
"C:\Users\Admin\AppData\Local\Temp\bf4182178ba2625f04c85d52f97fa88c4cfb15e7161f0343b056efc84ddf5eec.exe"
1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:828
- C:\Users\Admin\AppData\Local\Temp\exit.exe
  "C:\Users\Admin\AppData\Local\Temp\exit.exe"
  2⤵
  - Executes dropped EXE
  - Suspicious use of WriteProcessMemory
  PID:832
- - C:\Windows\SysWOW64\cmd.exe
    cmd /c i.cmd
    3⤵
    - Loads dropped DLL
    - Suspicious use of WriteProcessMemory
    PID:820
  - - C:\Windows\SysWOW64\PING.EXE
      ping cloudflare.com -n 3 -w 3000
      4⤵
      Runs ping.exe
      PID:1924
  - - C:\Windows\SysWOW64\PING.EXE
      ping cloudflare.com -n 3 -w 1000
      4⤵
      Runs ping.exe
      PID:1032
  - - C:\Users\Admin\AppData\Local\Temp\chrome-service.exe
      chrome-service.exe x -p3KPnoNJ3ReME4bEU5W9APkKS5ErkR3tNRT -y
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      Suspicious use of WriteProcessMemory
      PID:1100
    - - C:\ProgramData\Chrome Maintenance Service\exit.exe
        
        "C:\ProgramData\Chrome Maintenance Service\exit.exe"
        5⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:1388
      - C:\Windows\SysWOW64\cmd.exe
        
        cmd /c i.cmd
        6⤵
        Loads dropped DLL
        Suspicious use of WriteProcessMemory
        
        PID:1404
        
        C:\Windows\SysWOW64\reg.exe
        
        REG ADD "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /f /v "Chrome Maintenance Service" /t REG_SZ /d "C:\ProgramData\Chrome Maintenance Service\winserv.exe"
        7⤵
        Adds Run key to start application
        
        PID:848
        
        C:\ProgramData\Chrome Maintenance Service\winserv.exe
        
        "C:\ProgramData\Chrome Maintenance Service\winserv.exe"
        7⤵
        Executes dropped EXE
        Checks computer location settings
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of AdjustPrivilegeToken
        Suspicious use of SetWindowsHookEx
        
        PID:1860
        
        C:\ProgramData\Chrome Maintenance Service\winserv.exe
        
        "C:\ProgramData\Chrome Maintenance Service\winserv.exe" -second
        8⤵
        Executes dropped EXE
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of AdjustPrivilegeToken
        Suspicious use of SetWindowsHookEx
        
        PID:676
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1160
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1980
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:928
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:880
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1952
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1584
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:320
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:432
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1260
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:556
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1036
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1508
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1752
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1792
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1952
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1580
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1860
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1796
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        Suspicious use of AdjustPrivilegeToken
        
        PID:1000
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:556
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1036
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1508
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1720
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:2028
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1576
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:900
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        Suspicious use of AdjustPrivilegeToken
        
        PID:1912
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:924
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1328
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:368
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1256
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1192
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1736
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1160
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1784
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:240
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1696
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:320
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1048
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1040
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        Suspicious use of AdjustPrivilegeToken
        
        PID:568
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:956
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1896
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:848
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:2020
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:596
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1560
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1544
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1096
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1616
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1104
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1536
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:832
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1512
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1248
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1036
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1700
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:916
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1684
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:240
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1696
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:320
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1048
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2008
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:568
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1992
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1268
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1936
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1288
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1784
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:484
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:616
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1928
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1952
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1104
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1860
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:832
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1000
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:556
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:744
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1980
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:916
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1576
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:240
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1032
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1912
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1536
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:1328
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:368
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1256
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1192
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1720
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2028
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:880
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:900
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1616
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1528
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:1952
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1956
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:1512
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1248
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1000
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:556
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:744
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1948
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:916
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1612
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:280
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1032
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1924
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1536
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:736
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:368
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1700
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:848
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2020
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1288
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1588
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1684
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:616
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1928
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1804
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1104
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1860
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:568
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1960
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1752
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1556
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1644
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:240
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1696
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:280
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1032
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1924
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1536
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:736
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:368
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1700
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:848
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1356
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1680
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1576
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1544
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1040
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1328
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:956
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1992
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1268
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1936
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:596
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:880
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:900
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1560
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:820
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1616
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1304
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1952
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1256
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1512
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1720
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:2024
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:556
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1784
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:576
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:320
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1504
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2008
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1260
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1956
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:432
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:832
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1736
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1316
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1960
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1852
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1556
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:240
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1096
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:896
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1848
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:524
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1516
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2012
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1980
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1700
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1368
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1588
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1684
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1696
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1036
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:308
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1192
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1536
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1000
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1268
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1792
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:568
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:596
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1752
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:900
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1948
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:916
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1612
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1248
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1256
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:368
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:744
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1288
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1356
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1048
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1528
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1544
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1708
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1036
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1260
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1956
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:1536
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1000
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1268
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1792
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:568
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:596
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1752
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1556
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1948
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:816
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:736
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1512
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1936
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2028
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:880
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1644
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1576
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2020
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1616
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1924
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1696
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2008
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:896
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1304
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1516
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:924
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1796
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1980
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1700
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1368
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1588
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1912
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1948
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1248
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1256
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1512
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1712
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1316
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1356
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1852
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1528
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1328
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:956
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1612
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1192
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1036
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1260
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1304
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1516
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:924
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1796
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1980
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1700
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1368
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1752
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:900
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1848
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1104
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:744
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2012
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1960
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:556
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1040
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1032
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:320
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:616
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:432
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1804
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:816
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:1536
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1580
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1000
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1316
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1784
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:568
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:596
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1556
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1616
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1928
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1992
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1584
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1508
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1288
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:820
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1048
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:576
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1096
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:1160
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1736
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1544
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1744
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1956
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1512
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1712
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1304
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1792
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:924
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1684
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1980
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1700
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1924
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:524
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1192
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1848
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2024
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1508
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1288
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:820
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1936
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2028
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1980
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1700
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1924
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:524
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1192
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:1848
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2024
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1508
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:896
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1796
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1040
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:916
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:832
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:616
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:432
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:956
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:816
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1268
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:368
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1852
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1048
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1680
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1096
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1644
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1736
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1544
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1588
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1912
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1948
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1580
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1000
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:556
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1952
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1032
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:320
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1896
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:240
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1804
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1104
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1560
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1992
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1584
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1516
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1304
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1288
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1960
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:924
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1684
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:596
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1556
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1616
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2008
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:736
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1316
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1784
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1696
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1368
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1576
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1256
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1924
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:524
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:744
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1848
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:848
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1948
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1580
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1000
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:556
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1952
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1032
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:320
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1612
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1248
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1712
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1720
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1508
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:736
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1316
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1784
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1696
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1368
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1576
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1256
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1896
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1268
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:308
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:568
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:280
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:916
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:900
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1744
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1956
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1192
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1556
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:368
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:308
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:568
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1580
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:832
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1860
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:880
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1708
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:240
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1792
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:820
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1160
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1752
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2020
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:916
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:900
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1576
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1356
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1848
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1720
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1304
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1060
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:992
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1736
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1544
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1860
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:880
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1924
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1528
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1584
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2028
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1680
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1752
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1700
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:916
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:900
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:596
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1992
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1104
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1048
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1304
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1980
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1960
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1580
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1668
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:916
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:616
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1952
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1956
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1192
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1556
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:368
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:308
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1316
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:280
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1544
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2008
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1504
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1708
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1712
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:820
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2028
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1680
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1784
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:568
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:924
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1132
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1368
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1924
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:320
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1104
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1048
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1304
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1532
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2020
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:832
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1860
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:956
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:616
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1952
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1956
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:1712
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:820
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2028
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1960
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1580
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:1668
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:916
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1108
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1504
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1708
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1356
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1896
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1720
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1304
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:308
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1316
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:280
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1544
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:2008
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1744
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1256
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1584
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1804
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1688
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2028
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1960
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:1580
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1668
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:916
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1108
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1504
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1708
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1356
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1896
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1720
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1304
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:308
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1316
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:280
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1544
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2008
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1744
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1256
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1584
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1804
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:568
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1260
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1132
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1368
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1612
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1160
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:1096
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1048
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1736
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1696
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:576
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:924
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2020
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1848
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1860
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:524
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:240
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1108
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1504
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1708
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1356
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1896
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:368
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1752
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1908
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1036
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:320
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:1980
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:992
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1000
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1712
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1664
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:900
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1896
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:368
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1752
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1908
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1036
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:320
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1980
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:992
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1000
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1712
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1664
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:900
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1896
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:368
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1752
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1908
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:524
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:916
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:736
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1048
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1060
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:820
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1608
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2012
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:2028
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1960
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1732
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1348
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:280
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1544
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1504
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1784
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1256
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1696
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:556
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1532
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2020
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:624
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:848
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1908
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:524
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1700
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1980
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1056
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1000
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1712
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1664
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:900
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1896
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1992
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1752
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1040
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:432
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:616
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1032
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1528
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1192
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:576
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:568
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1664
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:596
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1848
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1860
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1612
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1500
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:280
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1544
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1504
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:1784
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1588
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1724
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1372
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1688
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:900
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1896
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1992
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1752
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1040
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:432
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1544
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1504
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1784
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1588
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1724
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:1372
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1688
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:900
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1896
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1860
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1612
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1500
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2008
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:484
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1736
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:820
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1608
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2012
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:832
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1924
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1580
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:756
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1992
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1752
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1040
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:280
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:992
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1256
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1696
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:556
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:108
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1372
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1688
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:900
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1896
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1860
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1612
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1500
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2008
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:484
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1736
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:820
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1608
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2012
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:832
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:1924
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1580
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:756
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1992
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:1752
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:1040
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:280
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:992
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1256
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1696
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1608
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2012
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:832
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1924
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1580
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:756
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1992
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1752
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1040
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:280
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:992
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1256
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:820
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:660
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:956
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1108
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:320
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1096
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:432
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1544
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1504
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1784
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1588
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1724
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1104
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1696
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1608
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2012
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:832
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1924
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1580
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:756
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1992
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1752
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1040
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:280
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:992
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1256
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:820
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:660
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:956
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1108
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:320
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1096
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:432
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1544
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1504
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1784
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1588
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1724
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1104
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1696
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1608
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2012
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:832
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1924
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1580
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:756
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1992
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1752
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1040
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:280
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:992
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1256
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:820
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:660
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:956
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1108
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1924
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1580
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:756
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1992
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1752
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1040
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:280
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:992
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1256
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:820
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:660
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:956
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1108
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1924
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1580
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:756
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1992
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1752
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1040
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:280
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:992
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1256
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:820
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:660
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:956
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1108
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1924
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1580
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:756
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1992
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1752
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1040
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:280
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:992
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2012
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:832
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1556
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:924
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2028
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:308
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:848
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1348
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1360
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:900
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:1792
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1032
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:992
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2012
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:832
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1556
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:924
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2028
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:308
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1848
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1908
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:240
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1104
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1696
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:624
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1708
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:320
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:576
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1304
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1132
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1960
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1776
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:848
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1348
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1360
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:900
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1792
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1032
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:992
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2012
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:832
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1556
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:924
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2028
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:308
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1848
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:1908
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:240
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1104
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1696
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:624
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1708
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:320
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:576
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1556
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:924
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2028
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:308
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1848
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1908
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:240
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1104
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1696
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:624
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1708
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:320
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:832
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1316
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:276
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:524
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1700
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1980
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1860
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:820
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1460
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:956
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:1644
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1924
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1504
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:576
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1556
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:924
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2028
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:308
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1848
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1908
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:240
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1460
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:956
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2012
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1924
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1504
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:576
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1556
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:924
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2028
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:308
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1848
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1908
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:240
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1460
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:556
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:756
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1960
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1776
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:848
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1956
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:1256
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1612
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1792
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1804
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:568
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2036
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1460
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:556
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:756
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1960
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1776
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:848
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1956
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1256
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1612
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1792
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1804
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:568
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2036
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1460
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:556
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:756
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1960
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1776
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:848
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1956
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1256
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1612
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1792
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1804
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:568
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2036
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1460
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:556
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:756
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1960
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1776
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:848
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1956
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1256
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1612
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1792
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1644
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:108
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1372
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:396
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1952
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:616
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1056
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1000
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1192
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1956
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1256
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1612
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1792
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1644
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:108
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1372
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:396
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1952
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:616
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1056
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1000
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1192
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1956
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1256
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1612
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1792
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1644
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:108
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1372
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:976
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1360
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1980
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1848
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1908
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:432
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1260
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:568
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:320
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1460
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1316
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:580
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1348
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1736
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1360
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1980
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1848
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:1032
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1696
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:624

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

T1060

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

Remote System Discovery

T1018

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/676-109-0x0000000005750000-0x0000000005751000-memory.dmp

Filesize
4KB

Download
memory/676-107-0x00000000054B0000-0x00000000054B1000-memory.dmp

Filesize
4KB

Download
memory/676-124-0x00000000066F0000-0x000000000684C000-memory.dmp

Filesize
1.4MB

Download
memory/676-103-0x00000000003F0000-0x00000000003F1000-memory.dmp

Filesize
4KB

Download
memory/676-104-0x0000000004BA0000-0x0000000004BA1000-memory.dmp

Filesize
4KB

Download
memory/676-105-0x0000000004BF0000-0x0000000004BF1000-memory.dmp

Filesize
4KB

Download
memory/676-106-0x0000000004E10000-0x0000000004E11000-memory.dmp

Filesize
4KB

Download
memory/676-108-0x0000000005600000-0x0000000005601000-memory.dmp

Filesize
4KB

Download
memory/676-123-0x0000000005E40000-0x0000000005E41000-memory.dmp

Filesize
4KB

Download
memory/676-112-0x0000000005E30000-0x0000000005E31000-memory.dmp

Filesize
4KB

Download
memory/676-110-0x0000000005500000-0x0000000005501000-memory.dmp

Filesize
4KB

Download
memory/676-111-0x0000000005B70000-0x0000000005B71000-memory.dmp

Filesize
4KB

Download
memory/676-115-0x00000000055D0000-0x00000000055D1000-memory.dmp

Filesize
4KB

Download
memory/676-116-0x00000000055E0000-0x00000000055E1000-memory.dmp

Filesize
4KB

Download
memory/676-114-0x00000000054F0000-0x00000000054F1000-memory.dmp

Filesize
4KB

Download
memory/828-54-0x0000000075B51000-0x0000000075B53000-memory.dmp

Filesize
8KB

Download
memory/1860-92-0x0000000000350000-0x0000000000351000-memory.dmp

Filesize
4KB

Download
memory/1860-91-0x0000000000400000-0x0000000000E2B000-memory.dmp

Filesize
10.2MB

Download