Malware Analysis Report

2024-11-30 19:48

Sample ID 220128-w781rsagh7
Target bf4182178ba2625f04c85d52f97fa88c4cfb15e7161f0343b056efc84ddf5eec
SHA256 bf4182178ba2625f04c85d52f97fa88c4cfb15e7161f0343b056efc84ddf5eec
Tags
rms persistence rat trojan
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V6

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

bf4182178ba2625f04c85d52f97fa88c4cfb15e7161f0343b056efc84ddf5eec

Threat Level: Known bad

The file bf4182178ba2625f04c85d52f97fa88c4cfb15e7161f0343b056efc84ddf5eec was found to be: Known bad.

Malicious Activity Summary

rms persistence rat trojan

RMS

Executes dropped EXE

Checks computer location settings

Loads dropped DLL

Adds Run key to start application

Enumerates physical storage devices

Suspicious use of AdjustPrivilegeToken

Suspicious use of WriteProcessMemory

Suspicious use of SetWindowsHookEx

Modifies data under HKEY_USERS

Kills process with taskkill

Suspicious behavior: EnumeratesProcesses

Runs ping.exe

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2022-01-28 18:34

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2022-01-28 18:34

Reported

2022-01-28 18:50

Platform

win7-en-20211208

Max time kernel

162s

Max time network

161s

Command Line

"C:\Users\Admin\AppData\Local\Temp\bf4182178ba2625f04c85d52f97fa88c4cfb15e7161f0343b056efc84ddf5eec.exe"

Signatures

RMS

trojan rat rms

Checks computer location settings

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-3846991908-3261386348-1409841751-1000\Control Panel\International\Geo\Nation C:\ProgramData\Chrome Maintenance Service\winserv.exe N/A

Adds Run key to start application

persistence
Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-3846991908-3261386348-1409841751-1000\Software\Microsoft\Windows\CurrentVersion\Run C:\Windows\SysWOW64\reg.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3846991908-3261386348-1409841751-1000\Software\Microsoft\Windows\CurrentVersion\Run\Chrome Maintenance Service = "C:\\ProgramData\\Chrome Maintenance Service\\winserv.exe" C:\Windows\SysWOW64\reg.exe N/A

Enumerates physical storage devices

Kills process with taskkill

evasion
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A

Runs ping.exe

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\PING.EXE N/A
N/A N/A C:\Windows\SysWOW64\PING.EXE N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\ProgramData\Chrome Maintenance Service\winserv.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\ProgramData\Chrome Maintenance Service\winserv.exe N/A
Token: SeTcbPrivilege N/A C:\ProgramData\Chrome Maintenance Service\winserv.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeTcbPrivilege N/A C:\ProgramData\Chrome Maintenance Service\winserv.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 828 wrote to memory of 832 N/A C:\Users\Admin\AppData\Local\Temp\bf4182178ba2625f04c85d52f97fa88c4cfb15e7161f0343b056efc84ddf5eec.exe C:\Users\Admin\AppData\Local\Temp\exit.exe
PID 828 wrote to memory of 832 N/A C:\Users\Admin\AppData\Local\Temp\bf4182178ba2625f04c85d52f97fa88c4cfb15e7161f0343b056efc84ddf5eec.exe C:\Users\Admin\AppData\Local\Temp\exit.exe
PID 828 wrote to memory of 832 N/A C:\Users\Admin\AppData\Local\Temp\bf4182178ba2625f04c85d52f97fa88c4cfb15e7161f0343b056efc84ddf5eec.exe C:\Users\Admin\AppData\Local\Temp\exit.exe
PID 828 wrote to memory of 832 N/A C:\Users\Admin\AppData\Local\Temp\bf4182178ba2625f04c85d52f97fa88c4cfb15e7161f0343b056efc84ddf5eec.exe C:\Users\Admin\AppData\Local\Temp\exit.exe
PID 828 wrote to memory of 832 N/A C:\Users\Admin\AppData\Local\Temp\bf4182178ba2625f04c85d52f97fa88c4cfb15e7161f0343b056efc84ddf5eec.exe C:\Users\Admin\AppData\Local\Temp\exit.exe
PID 828 wrote to memory of 832 N/A C:\Users\Admin\AppData\Local\Temp\bf4182178ba2625f04c85d52f97fa88c4cfb15e7161f0343b056efc84ddf5eec.exe C:\Users\Admin\AppData\Local\Temp\exit.exe
PID 828 wrote to memory of 832 N/A C:\Users\Admin\AppData\Local\Temp\bf4182178ba2625f04c85d52f97fa88c4cfb15e7161f0343b056efc84ddf5eec.exe C:\Users\Admin\AppData\Local\Temp\exit.exe
PID 832 wrote to memory of 820 N/A C:\Users\Admin\AppData\Local\Temp\exit.exe C:\Windows\SysWOW64\cmd.exe
PID 832 wrote to memory of 820 N/A C:\Users\Admin\AppData\Local\Temp\exit.exe C:\Windows\SysWOW64\cmd.exe
PID 832 wrote to memory of 820 N/A C:\Users\Admin\AppData\Local\Temp\exit.exe C:\Windows\SysWOW64\cmd.exe
PID 832 wrote to memory of 820 N/A C:\Users\Admin\AppData\Local\Temp\exit.exe C:\Windows\SysWOW64\cmd.exe
PID 832 wrote to memory of 820 N/A C:\Users\Admin\AppData\Local\Temp\exit.exe C:\Windows\SysWOW64\cmd.exe
PID 832 wrote to memory of 820 N/A C:\Users\Admin\AppData\Local\Temp\exit.exe C:\Windows\SysWOW64\cmd.exe
PID 832 wrote to memory of 820 N/A C:\Users\Admin\AppData\Local\Temp\exit.exe C:\Windows\SysWOW64\cmd.exe
PID 820 wrote to memory of 1924 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE
PID 820 wrote to memory of 1924 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE
PID 820 wrote to memory of 1924 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE
PID 820 wrote to memory of 1924 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE
PID 820 wrote to memory of 1924 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE
PID 820 wrote to memory of 1924 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE
PID 820 wrote to memory of 1924 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE
PID 820 wrote to memory of 1032 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE
PID 820 wrote to memory of 1032 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE
PID 820 wrote to memory of 1032 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE
PID 820 wrote to memory of 1032 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE
PID 820 wrote to memory of 1032 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE
PID 820 wrote to memory of 1032 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE
PID 820 wrote to memory of 1032 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE
PID 820 wrote to memory of 1100 N/A C:\Windows\SysWOW64\cmd.exe C:\Users\Admin\AppData\Local\Temp\chrome-service.exe
PID 820 wrote to memory of 1100 N/A C:\Windows\SysWOW64\cmd.exe C:\Users\Admin\AppData\Local\Temp\chrome-service.exe
PID 820 wrote to memory of 1100 N/A C:\Windows\SysWOW64\cmd.exe C:\Users\Admin\AppData\Local\Temp\chrome-service.exe
PID 820 wrote to memory of 1100 N/A C:\Windows\SysWOW64\cmd.exe C:\Users\Admin\AppData\Local\Temp\chrome-service.exe
PID 820 wrote to memory of 1100 N/A C:\Windows\SysWOW64\cmd.exe C:\Users\Admin\AppData\Local\Temp\chrome-service.exe
PID 820 wrote to memory of 1100 N/A C:\Windows\SysWOW64\cmd.exe C:\Users\Admin\AppData\Local\Temp\chrome-service.exe
PID 820 wrote to memory of 1100 N/A C:\Windows\SysWOW64\cmd.exe C:\Users\Admin\AppData\Local\Temp\chrome-service.exe
PID 1100 wrote to memory of 1388 N/A C:\Users\Admin\AppData\Local\Temp\chrome-service.exe C:\ProgramData\Chrome Maintenance Service\exit.exe
PID 1100 wrote to memory of 1388 N/A C:\Users\Admin\AppData\Local\Temp\chrome-service.exe C:\ProgramData\Chrome Maintenance Service\exit.exe
PID 1100 wrote to memory of 1388 N/A C:\Users\Admin\AppData\Local\Temp\chrome-service.exe C:\ProgramData\Chrome Maintenance Service\exit.exe
PID 1100 wrote to memory of 1388 N/A C:\Users\Admin\AppData\Local\Temp\chrome-service.exe C:\ProgramData\Chrome Maintenance Service\exit.exe
PID 1100 wrote to memory of 1388 N/A C:\Users\Admin\AppData\Local\Temp\chrome-service.exe C:\ProgramData\Chrome Maintenance Service\exit.exe
PID 1100 wrote to memory of 1388 N/A C:\Users\Admin\AppData\Local\Temp\chrome-service.exe C:\ProgramData\Chrome Maintenance Service\exit.exe
PID 1100 wrote to memory of 1388 N/A C:\Users\Admin\AppData\Local\Temp\chrome-service.exe C:\ProgramData\Chrome Maintenance Service\exit.exe
PID 1388 wrote to memory of 1404 N/A C:\ProgramData\Chrome Maintenance Service\exit.exe C:\Windows\SysWOW64\cmd.exe
PID 1388 wrote to memory of 1404 N/A C:\ProgramData\Chrome Maintenance Service\exit.exe C:\Windows\SysWOW64\cmd.exe
PID 1388 wrote to memory of 1404 N/A C:\ProgramData\Chrome Maintenance Service\exit.exe C:\Windows\SysWOW64\cmd.exe
PID 1388 wrote to memory of 1404 N/A C:\ProgramData\Chrome Maintenance Service\exit.exe C:\Windows\SysWOW64\cmd.exe
PID 1388 wrote to memory of 1404 N/A C:\ProgramData\Chrome Maintenance Service\exit.exe C:\Windows\SysWOW64\cmd.exe
PID 1388 wrote to memory of 1404 N/A C:\ProgramData\Chrome Maintenance Service\exit.exe C:\Windows\SysWOW64\cmd.exe
PID 1388 wrote to memory of 1404 N/A C:\ProgramData\Chrome Maintenance Service\exit.exe C:\Windows\SysWOW64\cmd.exe
PID 1404 wrote to memory of 848 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\reg.exe
PID 1404 wrote to memory of 848 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\reg.exe
PID 1404 wrote to memory of 848 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\reg.exe
PID 1404 wrote to memory of 848 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\reg.exe
PID 1404 wrote to memory of 848 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\reg.exe
PID 1404 wrote to memory of 848 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\reg.exe
PID 1404 wrote to memory of 848 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\reg.exe
PID 1404 wrote to memory of 1860 N/A C:\Windows\SysWOW64\cmd.exe C:\ProgramData\Chrome Maintenance Service\winserv.exe
PID 1404 wrote to memory of 1860 N/A C:\Windows\SysWOW64\cmd.exe C:\ProgramData\Chrome Maintenance Service\winserv.exe
PID 1404 wrote to memory of 1860 N/A C:\Windows\SysWOW64\cmd.exe C:\ProgramData\Chrome Maintenance Service\winserv.exe
PID 1404 wrote to memory of 1860 N/A C:\Windows\SysWOW64\cmd.exe C:\ProgramData\Chrome Maintenance Service\winserv.exe
PID 1404 wrote to memory of 1860 N/A C:\Windows\SysWOW64\cmd.exe C:\ProgramData\Chrome Maintenance Service\winserv.exe
PID 1404 wrote to memory of 1860 N/A C:\Windows\SysWOW64\cmd.exe C:\ProgramData\Chrome Maintenance Service\winserv.exe
PID 1404 wrote to memory of 1860 N/A C:\Windows\SysWOW64\cmd.exe C:\ProgramData\Chrome Maintenance Service\winserv.exe
PID 1404 wrote to memory of 1160 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe

Processes

C:\Users\Admin\AppData\Local\Temp\bf4182178ba2625f04c85d52f97fa88c4cfb15e7161f0343b056efc84ddf5eec.exe

"C:\Users\Admin\AppData\Local\Temp\bf4182178ba2625f04c85d52f97fa88c4cfb15e7161f0343b056efc84ddf5eec.exe"

C:\Users\Admin\AppData\Local\Temp\exit.exe

"C:\Users\Admin\AppData\Local\Temp\exit.exe"

C:\Windows\SysWOW64\cmd.exe

cmd /c i.cmd

C:\Windows\SysWOW64\PING.EXE

ping cloudflare.com -n 3 -w 3000

C:\Windows\SysWOW64\PING.EXE

ping cloudflare.com -n 3 -w 1000

C:\Users\Admin\AppData\Local\Temp\chrome-service.exe

chrome-service.exe x -p3KPnoNJ3ReME4bEU5W9APkKS5ErkR3tNRT -y

C:\ProgramData\Chrome Maintenance Service\exit.exe

"C:\ProgramData\Chrome Maintenance Service\exit.exe"

C:\Windows\SysWOW64\cmd.exe

cmd /c i.cmd

C:\Windows\SysWOW64\reg.exe

REG ADD "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /f /v "Chrome Maintenance Service" /t REG_SZ /d "C:\ProgramData\Chrome Maintenance Service\winserv.exe"

C:\ProgramData\Chrome Maintenance Service\winserv.exe

"C:\ProgramData\Chrome Maintenance Service\winserv.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\ProgramData\Chrome Maintenance Service\winserv.exe

"C:\ProgramData\Chrome Maintenance Service\winserv.exe" -second

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

Network

Country Destination Domain Proto
US 8.8.8.8:53 cloudflare.com udp
NL 92.63.197.163:5655 tcp
NL 92.63.197.163:5655 tcp
NL 92.63.197.163:5655 tcp
NL 92.63.197.163:5655 tcp
NL 92.63.197.163:5655 tcp
NL 92.63.197.163:5655 tcp
NL 92.63.197.163:5655 tcp
NL 92.63.197.163:5655 tcp
NL 92.63.197.163:5655 tcp
NL 92.63.197.163:5655 tcp
NL 92.63.197.163:5655 tcp
NL 92.63.197.163:5655 tcp
NL 92.63.197.163:5655 tcp
NL 92.63.197.163:5655 tcp
NL 92.63.197.163:5655 tcp
NL 92.63.197.163:5655 tcp
NL 92.63.197.163:5655 tcp

Files

memory/828-54-0x0000000075B51000-0x0000000075B53000-memory.dmp

\Users\Admin\AppData\Local\Temp\exit.exe

MD5 d2f314f78d0ac5a5c5dbd119a41bad5a
SHA1 49415ae9a0f85699349f13c95cb4fd3ce0eaf932
SHA256 cc81dd1eba5b887d09b0eecb8443916dea82dc58e1cf847f1653413fb804210c
SHA512 42cdb86ebd0e1ef75d9527ee946d43e87abda73f3480e04ef90efb8fbcc7db0b2d29b366fb8715b1cb19896a35dc0dae1a05a23b91032923fbd52ce193c72c5b

\Users\Admin\AppData\Local\Temp\exit.exe

MD5 d2f314f78d0ac5a5c5dbd119a41bad5a
SHA1 49415ae9a0f85699349f13c95cb4fd3ce0eaf932
SHA256 cc81dd1eba5b887d09b0eecb8443916dea82dc58e1cf847f1653413fb804210c
SHA512 42cdb86ebd0e1ef75d9527ee946d43e87abda73f3480e04ef90efb8fbcc7db0b2d29b366fb8715b1cb19896a35dc0dae1a05a23b91032923fbd52ce193c72c5b

\Users\Admin\AppData\Local\Temp\exit.exe

MD5 d2f314f78d0ac5a5c5dbd119a41bad5a
SHA1 49415ae9a0f85699349f13c95cb4fd3ce0eaf932
SHA256 cc81dd1eba5b887d09b0eecb8443916dea82dc58e1cf847f1653413fb804210c
SHA512 42cdb86ebd0e1ef75d9527ee946d43e87abda73f3480e04ef90efb8fbcc7db0b2d29b366fb8715b1cb19896a35dc0dae1a05a23b91032923fbd52ce193c72c5b

\Users\Admin\AppData\Local\Temp\exit.exe

MD5 d2f314f78d0ac5a5c5dbd119a41bad5a
SHA1 49415ae9a0f85699349f13c95cb4fd3ce0eaf932
SHA256 cc81dd1eba5b887d09b0eecb8443916dea82dc58e1cf847f1653413fb804210c
SHA512 42cdb86ebd0e1ef75d9527ee946d43e87abda73f3480e04ef90efb8fbcc7db0b2d29b366fb8715b1cb19896a35dc0dae1a05a23b91032923fbd52ce193c72c5b

C:\Users\Admin\AppData\Local\Temp\exit.exe

MD5 d2f314f78d0ac5a5c5dbd119a41bad5a
SHA1 49415ae9a0f85699349f13c95cb4fd3ce0eaf932
SHA256 cc81dd1eba5b887d09b0eecb8443916dea82dc58e1cf847f1653413fb804210c
SHA512 42cdb86ebd0e1ef75d9527ee946d43e87abda73f3480e04ef90efb8fbcc7db0b2d29b366fb8715b1cb19896a35dc0dae1a05a23b91032923fbd52ce193c72c5b

C:\Users\Admin\AppData\Local\Temp\i.cmd

MD5 3e4e7e27a1069dcb64b843ac88cb0515
SHA1 d100032fba1f7f0c3d748a5fd6fb04278d77910d
SHA256 5f1c8209f1f4981c38fa047cd1eeb14974da297803054579f35e7e6291c0a9ce
SHA512 4fb88c4ad56c13f36dabaf2874d2c4d6fbd9be32427ef3d44f9080a5273d296250790629bc5b6b5b034613a63dbc84f873b8f6f8a08613040dbc11aea656946a

C:\Users\Admin\AppData\Local\Temp\syst.dll

MD5 82202a20979db3a61aedd37357472db9
SHA1 363d0bc8c6e4ec03ad4fb873d65f530b52fff095
SHA256 8fe1490464a7435fce651cfa8e35350981b122fefe9c7ff733daedaf9a842eae
SHA512 d31be072f98475b59f69f264633817fbeadd014eaeab111456780e3813b7c974b3245819ac1577cbd5600bf66b5c20ec2a5e32395becf63224eb52fe3baf8a07

\Users\Admin\AppData\Local\Temp\chrome-service.exe

MD5 82202a20979db3a61aedd37357472db9
SHA1 363d0bc8c6e4ec03ad4fb873d65f530b52fff095
SHA256 8fe1490464a7435fce651cfa8e35350981b122fefe9c7ff733daedaf9a842eae
SHA512 d31be072f98475b59f69f264633817fbeadd014eaeab111456780e3813b7c974b3245819ac1577cbd5600bf66b5c20ec2a5e32395becf63224eb52fe3baf8a07

C:\Users\Admin\AppData\Local\Temp\chrome-service.exe

MD5 82202a20979db3a61aedd37357472db9
SHA1 363d0bc8c6e4ec03ad4fb873d65f530b52fff095
SHA256 8fe1490464a7435fce651cfa8e35350981b122fefe9c7ff733daedaf9a842eae
SHA512 d31be072f98475b59f69f264633817fbeadd014eaeab111456780e3813b7c974b3245819ac1577cbd5600bf66b5c20ec2a5e32395becf63224eb52fe3baf8a07

\ProgramData\Chrome Maintenance Service\exit.exe

MD5 d2f314f78d0ac5a5c5dbd119a41bad5a
SHA1 49415ae9a0f85699349f13c95cb4fd3ce0eaf932
SHA256 cc81dd1eba5b887d09b0eecb8443916dea82dc58e1cf847f1653413fb804210c
SHA512 42cdb86ebd0e1ef75d9527ee946d43e87abda73f3480e04ef90efb8fbcc7db0b2d29b366fb8715b1cb19896a35dc0dae1a05a23b91032923fbd52ce193c72c5b

\ProgramData\Chrome Maintenance Service\exit.exe

MD5 d2f314f78d0ac5a5c5dbd119a41bad5a
SHA1 49415ae9a0f85699349f13c95cb4fd3ce0eaf932
SHA256 cc81dd1eba5b887d09b0eecb8443916dea82dc58e1cf847f1653413fb804210c
SHA512 42cdb86ebd0e1ef75d9527ee946d43e87abda73f3480e04ef90efb8fbcc7db0b2d29b366fb8715b1cb19896a35dc0dae1a05a23b91032923fbd52ce193c72c5b

\ProgramData\Chrome Maintenance Service\exit.exe

MD5 d2f314f78d0ac5a5c5dbd119a41bad5a
SHA1 49415ae9a0f85699349f13c95cb4fd3ce0eaf932
SHA256 cc81dd1eba5b887d09b0eecb8443916dea82dc58e1cf847f1653413fb804210c
SHA512 42cdb86ebd0e1ef75d9527ee946d43e87abda73f3480e04ef90efb8fbcc7db0b2d29b366fb8715b1cb19896a35dc0dae1a05a23b91032923fbd52ce193c72c5b

\ProgramData\Chrome Maintenance Service\exit.exe

MD5 d2f314f78d0ac5a5c5dbd119a41bad5a
SHA1 49415ae9a0f85699349f13c95cb4fd3ce0eaf932
SHA256 cc81dd1eba5b887d09b0eecb8443916dea82dc58e1cf847f1653413fb804210c
SHA512 42cdb86ebd0e1ef75d9527ee946d43e87abda73f3480e04ef90efb8fbcc7db0b2d29b366fb8715b1cb19896a35dc0dae1a05a23b91032923fbd52ce193c72c5b

C:\ProgramData\Chrome Maintenance Service\exit.exe

MD5 d2f314f78d0ac5a5c5dbd119a41bad5a
SHA1 49415ae9a0f85699349f13c95cb4fd3ce0eaf932
SHA256 cc81dd1eba5b887d09b0eecb8443916dea82dc58e1cf847f1653413fb804210c
SHA512 42cdb86ebd0e1ef75d9527ee946d43e87abda73f3480e04ef90efb8fbcc7db0b2d29b366fb8715b1cb19896a35dc0dae1a05a23b91032923fbd52ce193c72c5b

C:\ProgramData\Chrome Maintenance Service\i.cmd

MD5 809888a45ea3ba5973f9df09b8c58afc
SHA1 1343c0259183b701a5aca161bd8006fc7a7e69bd
SHA256 50b5458805fc94391b5589a3921ed5928bb72abfb067e01d8f6e0820214ec2fe
SHA512 cc4a620c77779c291fd8dcc09afae44bc48d776a2cdedd450458acdebf5c44ddfa5475b4df039b1fecf1bf4ce08a16633b7b322e8c981a435a671f761bd878c8

\ProgramData\Chrome Maintenance Service\winserv.exe

MD5 cf2ab077a46219b6ce4a53517dd489ea
SHA1 651b8d1377910e4728e85dcd231e269313ab9e1d
SHA256 609b0a416f9b16a6df9b967dc32cd739402af31566e019a8fb8abdf3cb573e30
SHA512 53fb1ac822467168ea8e7abdd72c78cdd90070b10773ce8c700c6784ab4cc3a03eb53887d158ce3a27779a5fbcf3300d2ccbedab79a34bfd42ddc91f68dbdad7

C:\ProgramData\Chrome Maintenance Service\winserv.exe

MD5 cf2ab077a46219b6ce4a53517dd489ea
SHA1 651b8d1377910e4728e85dcd231e269313ab9e1d
SHA256 609b0a416f9b16a6df9b967dc32cd739402af31566e019a8fb8abdf3cb573e30
SHA512 53fb1ac822467168ea8e7abdd72c78cdd90070b10773ce8c700c6784ab4cc3a03eb53887d158ce3a27779a5fbcf3300d2ccbedab79a34bfd42ddc91f68dbdad7

C:\ProgramData\Chrome Maintenance Service\winserv.exe

MD5 cf2ab077a46219b6ce4a53517dd489ea
SHA1 651b8d1377910e4728e85dcd231e269313ab9e1d
SHA256 609b0a416f9b16a6df9b967dc32cd739402af31566e019a8fb8abdf3cb573e30
SHA512 53fb1ac822467168ea8e7abdd72c78cdd90070b10773ce8c700c6784ab4cc3a03eb53887d158ce3a27779a5fbcf3300d2ccbedab79a34bfd42ddc91f68dbdad7

memory/1860-91-0x0000000000400000-0x0000000000E2B000-memory.dmp

memory/1860-92-0x0000000000350000-0x0000000000351000-memory.dmp

C:\ProgramData\Chrome Maintenance Service\winserv.exe

MD5 cf2ab077a46219b6ce4a53517dd489ea
SHA1 651b8d1377910e4728e85dcd231e269313ab9e1d
SHA256 609b0a416f9b16a6df9b967dc32cd739402af31566e019a8fb8abdf3cb573e30
SHA512 53fb1ac822467168ea8e7abdd72c78cdd90070b10773ce8c700c6784ab4cc3a03eb53887d158ce3a27779a5fbcf3300d2ccbedab79a34bfd42ddc91f68dbdad7

C:\ProgramData\Chrome Maintenance Service\settings.dat

MD5 c21b802a67dc597835713bcee5b408a0
SHA1 3e1910e7e33ce2c7ff40730f4e5eea51d64b4deb
SHA256 8a35ab3244bc7c37702fd6f9da19caff9bfc5a28d9b07fa5d54bd1221fa38f5e
SHA512 d8ceca3e9ef3d9bf62a3c637756ebce0e70e3210a065bce10d8c105cfe5189504b9984e066ec77b91db13c7928528ca0c01363535f0685ef56ed7c31958e0674

memory/676-103-0x00000000003F0000-0x00000000003F1000-memory.dmp

memory/676-104-0x0000000004BA0000-0x0000000004BA1000-memory.dmp

memory/676-105-0x0000000004BF0000-0x0000000004BF1000-memory.dmp

memory/676-106-0x0000000004E10000-0x0000000004E11000-memory.dmp

memory/676-108-0x0000000005600000-0x0000000005601000-memory.dmp

memory/676-109-0x0000000005750000-0x0000000005751000-memory.dmp

memory/676-107-0x00000000054B0000-0x00000000054B1000-memory.dmp

memory/676-110-0x0000000005500000-0x0000000005501000-memory.dmp

memory/676-111-0x0000000005B70000-0x0000000005B71000-memory.dmp

memory/676-115-0x00000000055D0000-0x00000000055D1000-memory.dmp

memory/676-116-0x00000000055E0000-0x00000000055E1000-memory.dmp

memory/676-114-0x00000000054F0000-0x00000000054F1000-memory.dmp

memory/676-112-0x0000000005E30000-0x0000000005E31000-memory.dmp

memory/676-123-0x0000000005E40000-0x0000000005E41000-memory.dmp

memory/676-124-0x00000000066F0000-0x000000000684C000-memory.dmp

Analysis: behavioral2

Detonation Overview

Submitted

2022-01-28 18:34

Reported

2022-01-28 18:50

Platform

win10-en-20211208

Max time kernel

163s

Max time network

159s

Command Line

"C:\Users\Admin\AppData\Local\Temp\bf4182178ba2625f04c85d52f97fa88c4cfb15e7161f0343b056efc84ddf5eec.exe"

Signatures

RMS

trojan rat rms

Checks computer location settings

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-369956170-74428499-1628131376-1000\Control Panel\International\Geo\Nation C:\ProgramData\Chrome Maintenance Service\winserv.exe N/A

Adds Run key to start application

persistence
Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-369956170-74428499-1628131376-1000\Software\Microsoft\Windows\CurrentVersion\Run C:\Windows\SysWOW64\reg.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-369956170-74428499-1628131376-1000\Software\Microsoft\Windows\CurrentVersion\Run\Chrome Maintenance Service = "C:\\ProgramData\\Chrome Maintenance Service\\winserv.exe" C:\Windows\SysWOW64\reg.exe N/A

Enumerates physical storage devices

Kills process with taskkill

evasion
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Set value (data) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\16\52C64B7E\LanguageList = 65006e002d0055005300000065006e0000000000 C:\ProgramData\Chrome Maintenance Service\winserv.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\16\52C64B7E\@C:\Windows\SysWOW64\FirewallControlPanel.dll,-12122 = "Windows Firewall" C:\ProgramData\Chrome Maintenance Service\winserv.exe N/A

Runs ping.exe

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\PING.EXE N/A
N/A N/A C:\Windows\SysWOW64\PING.EXE N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\ProgramData\Chrome Maintenance Service\winserv.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\ProgramData\Chrome Maintenance Service\winserv.exe N/A
Token: SeTcbPrivilege N/A C:\ProgramData\Chrome Maintenance Service\winserv.exe N/A
Token: SeTcbPrivilege N/A C:\ProgramData\Chrome Maintenance Service\winserv.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2360 wrote to memory of 1836 N/A C:\Users\Admin\AppData\Local\Temp\bf4182178ba2625f04c85d52f97fa88c4cfb15e7161f0343b056efc84ddf5eec.exe C:\Users\Admin\AppData\Local\Temp\exit.exe
PID 2360 wrote to memory of 1836 N/A C:\Users\Admin\AppData\Local\Temp\bf4182178ba2625f04c85d52f97fa88c4cfb15e7161f0343b056efc84ddf5eec.exe C:\Users\Admin\AppData\Local\Temp\exit.exe
PID 2360 wrote to memory of 1836 N/A C:\Users\Admin\AppData\Local\Temp\bf4182178ba2625f04c85d52f97fa88c4cfb15e7161f0343b056efc84ddf5eec.exe C:\Users\Admin\AppData\Local\Temp\exit.exe
PID 1836 wrote to memory of 396 N/A C:\Users\Admin\AppData\Local\Temp\exit.exe C:\Windows\SysWOW64\cmd.exe
PID 1836 wrote to memory of 396 N/A C:\Users\Admin\AppData\Local\Temp\exit.exe C:\Windows\SysWOW64\cmd.exe
PID 1836 wrote to memory of 396 N/A C:\Users\Admin\AppData\Local\Temp\exit.exe C:\Windows\SysWOW64\cmd.exe
PID 396 wrote to memory of 3648 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE
PID 396 wrote to memory of 3648 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE
PID 396 wrote to memory of 3648 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE
PID 396 wrote to memory of 3984 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE
PID 396 wrote to memory of 3984 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE
PID 396 wrote to memory of 3984 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE
PID 396 wrote to memory of 1404 N/A C:\Windows\SysWOW64\cmd.exe C:\Users\Admin\AppData\Local\Temp\chrome-service.exe
PID 396 wrote to memory of 1404 N/A C:\Windows\SysWOW64\cmd.exe C:\Users\Admin\AppData\Local\Temp\chrome-service.exe
PID 396 wrote to memory of 1404 N/A C:\Windows\SysWOW64\cmd.exe C:\Users\Admin\AppData\Local\Temp\chrome-service.exe
PID 1404 wrote to memory of 2424 N/A C:\Users\Admin\AppData\Local\Temp\chrome-service.exe C:\ProgramData\Chrome Maintenance Service\exit.exe
PID 1404 wrote to memory of 2424 N/A C:\Users\Admin\AppData\Local\Temp\chrome-service.exe C:\ProgramData\Chrome Maintenance Service\exit.exe
PID 1404 wrote to memory of 2424 N/A C:\Users\Admin\AppData\Local\Temp\chrome-service.exe C:\ProgramData\Chrome Maintenance Service\exit.exe
PID 2424 wrote to memory of 3700 N/A C:\ProgramData\Chrome Maintenance Service\exit.exe C:\Windows\SysWOW64\cmd.exe
PID 2424 wrote to memory of 3700 N/A C:\ProgramData\Chrome Maintenance Service\exit.exe C:\Windows\SysWOW64\cmd.exe
PID 2424 wrote to memory of 3700 N/A C:\ProgramData\Chrome Maintenance Service\exit.exe C:\Windows\SysWOW64\cmd.exe
PID 3700 wrote to memory of 2184 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\reg.exe
PID 3700 wrote to memory of 2184 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\reg.exe
PID 3700 wrote to memory of 2184 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\reg.exe
PID 3700 wrote to memory of 1132 N/A C:\Windows\SysWOW64\cmd.exe C:\ProgramData\Chrome Maintenance Service\winserv.exe
PID 3700 wrote to memory of 1132 N/A C:\Windows\SysWOW64\cmd.exe C:\ProgramData\Chrome Maintenance Service\winserv.exe
PID 3700 wrote to memory of 1132 N/A C:\Windows\SysWOW64\cmd.exe C:\ProgramData\Chrome Maintenance Service\winserv.exe
PID 3700 wrote to memory of 1152 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 3700 wrote to memory of 1152 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 3700 wrote to memory of 1152 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 3700 wrote to memory of 3564 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 3700 wrote to memory of 3564 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 3700 wrote to memory of 3564 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 3700 wrote to memory of 3228 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 3700 wrote to memory of 3228 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 3700 wrote to memory of 3228 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 3700 wrote to memory of 1372 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 3700 wrote to memory of 1372 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 3700 wrote to memory of 1372 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 3700 wrote to memory of 668 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 3700 wrote to memory of 668 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 3700 wrote to memory of 668 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 3700 wrote to memory of 2396 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 3700 wrote to memory of 2396 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 3700 wrote to memory of 2396 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 3700 wrote to memory of 3652 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 3700 wrote to memory of 3652 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 3700 wrote to memory of 3652 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 3700 wrote to memory of 3904 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 3700 wrote to memory of 3904 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 3700 wrote to memory of 3904 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 3700 wrote to memory of 1252 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 3700 wrote to memory of 1252 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 3700 wrote to memory of 1252 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 3700 wrote to memory of 3580 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 3700 wrote to memory of 3580 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 3700 wrote to memory of 3580 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 3700 wrote to memory of 1164 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 3700 wrote to memory of 1164 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 3700 wrote to memory of 1164 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 3700 wrote to memory of 592 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 3700 wrote to memory of 592 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 3700 wrote to memory of 592 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 3700 wrote to memory of 1448 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe

Processes

C:\Users\Admin\AppData\Local\Temp\bf4182178ba2625f04c85d52f97fa88c4cfb15e7161f0343b056efc84ddf5eec.exe

"C:\Users\Admin\AppData\Local\Temp\bf4182178ba2625f04c85d52f97fa88c4cfb15e7161f0343b056efc84ddf5eec.exe"

C:\Users\Admin\AppData\Local\Temp\exit.exe

"C:\Users\Admin\AppData\Local\Temp\exit.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c i.cmd

C:\Windows\SysWOW64\PING.EXE

ping cloudflare.com -n 3 -w 3000

C:\Windows\SysWOW64\PING.EXE

ping cloudflare.com -n 3 -w 1000

C:\Users\Admin\AppData\Local\Temp\chrome-service.exe

chrome-service.exe x -p3KPnoNJ3ReME4bEU5W9APkKS5ErkR3tNRT -y

C:\ProgramData\Chrome Maintenance Service\exit.exe

"C:\ProgramData\Chrome Maintenance Service\exit.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c i.cmd

C:\Windows\SysWOW64\reg.exe

REG ADD "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /f /v "Chrome Maintenance Service" /t REG_SZ /d "C:\ProgramData\Chrome Maintenance Service\winserv.exe"

C:\ProgramData\Chrome Maintenance Service\winserv.exe

"C:\ProgramData\Chrome Maintenance Service\winserv.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\ProgramData\Chrome Maintenance Service\winserv.exe

"C:\ProgramData\Chrome Maintenance Service\winserv.exe" -second

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "rundll32.exe"

Network

Country Destination Domain Proto
US 8.8.8.8:53 cloudflare.com udp
NL 92.63.197.163:5655 tcp
NL 92.63.197.163:5655 tcp
NL 92.63.197.163:5655 tcp
NL 92.63.197.163:5655 tcp
NL 92.63.197.163:5655 tcp
NL 92.63.197.163:5655 tcp
NL 92.63.197.163:5655 tcp
NL 92.63.197.163:5655 tcp
NL 92.63.197.163:5655 tcp
NL 92.63.197.163:5655 tcp
NL 92.63.197.163:5655 tcp
NL 92.63.197.163:5655 tcp
NL 92.63.197.163:5655 tcp
NL 92.63.197.163:5655 tcp
NL 92.63.197.163:5655 tcp
NL 92.63.197.163:5655 tcp

Files

C:\Users\Admin\AppData\Local\Temp\exit.exe

MD5 d2f314f78d0ac5a5c5dbd119a41bad5a
SHA1 49415ae9a0f85699349f13c95cb4fd3ce0eaf932
SHA256 cc81dd1eba5b887d09b0eecb8443916dea82dc58e1cf847f1653413fb804210c
SHA512 42cdb86ebd0e1ef75d9527ee946d43e87abda73f3480e04ef90efb8fbcc7db0b2d29b366fb8715b1cb19896a35dc0dae1a05a23b91032923fbd52ce193c72c5b

C:\Users\Admin\AppData\Local\Temp\exit.exe

MD5 d2f314f78d0ac5a5c5dbd119a41bad5a
SHA1 49415ae9a0f85699349f13c95cb4fd3ce0eaf932
SHA256 cc81dd1eba5b887d09b0eecb8443916dea82dc58e1cf847f1653413fb804210c
SHA512 42cdb86ebd0e1ef75d9527ee946d43e87abda73f3480e04ef90efb8fbcc7db0b2d29b366fb8715b1cb19896a35dc0dae1a05a23b91032923fbd52ce193c72c5b

C:\Users\Admin\AppData\Local\Temp\i.cmd

MD5 3e4e7e27a1069dcb64b843ac88cb0515
SHA1 d100032fba1f7f0c3d748a5fd6fb04278d77910d
SHA256 5f1c8209f1f4981c38fa047cd1eeb14974da297803054579f35e7e6291c0a9ce
SHA512 4fb88c4ad56c13f36dabaf2874d2c4d6fbd9be32427ef3d44f9080a5273d296250790629bc5b6b5b034613a63dbc84f873b8f6f8a08613040dbc11aea656946a

C:\Users\Admin\AppData\Local\Temp\syst.dll

MD5 82202a20979db3a61aedd37357472db9
SHA1 363d0bc8c6e4ec03ad4fb873d65f530b52fff095
SHA256 8fe1490464a7435fce651cfa8e35350981b122fefe9c7ff733daedaf9a842eae
SHA512 d31be072f98475b59f69f264633817fbeadd014eaeab111456780e3813b7c974b3245819ac1577cbd5600bf66b5c20ec2a5e32395becf63224eb52fe3baf8a07

C:\Users\Admin\AppData\Local\Temp\chrome-service.exe

MD5 82202a20979db3a61aedd37357472db9
SHA1 363d0bc8c6e4ec03ad4fb873d65f530b52fff095
SHA256 8fe1490464a7435fce651cfa8e35350981b122fefe9c7ff733daedaf9a842eae
SHA512 d31be072f98475b59f69f264633817fbeadd014eaeab111456780e3813b7c974b3245819ac1577cbd5600bf66b5c20ec2a5e32395becf63224eb52fe3baf8a07

C:\ProgramData\Chrome Maintenance Service\exit.exe

MD5 d2f314f78d0ac5a5c5dbd119a41bad5a
SHA1 49415ae9a0f85699349f13c95cb4fd3ce0eaf932
SHA256 cc81dd1eba5b887d09b0eecb8443916dea82dc58e1cf847f1653413fb804210c
SHA512 42cdb86ebd0e1ef75d9527ee946d43e87abda73f3480e04ef90efb8fbcc7db0b2d29b366fb8715b1cb19896a35dc0dae1a05a23b91032923fbd52ce193c72c5b

C:\ProgramData\Chrome Maintenance Service\exit.exe

MD5 d2f314f78d0ac5a5c5dbd119a41bad5a
SHA1 49415ae9a0f85699349f13c95cb4fd3ce0eaf932
SHA256 cc81dd1eba5b887d09b0eecb8443916dea82dc58e1cf847f1653413fb804210c
SHA512 42cdb86ebd0e1ef75d9527ee946d43e87abda73f3480e04ef90efb8fbcc7db0b2d29b366fb8715b1cb19896a35dc0dae1a05a23b91032923fbd52ce193c72c5b

C:\ProgramData\Chrome Maintenance Service\i.cmd

MD5 809888a45ea3ba5973f9df09b8c58afc
SHA1 1343c0259183b701a5aca161bd8006fc7a7e69bd
SHA256 50b5458805fc94391b5589a3921ed5928bb72abfb067e01d8f6e0820214ec2fe
SHA512 cc4a620c77779c291fd8dcc09afae44bc48d776a2cdedd450458acdebf5c44ddfa5475b4df039b1fecf1bf4ce08a16633b7b322e8c981a435a671f761bd878c8

C:\ProgramData\Chrome Maintenance Service\winserv.exe

MD5 cf2ab077a46219b6ce4a53517dd489ea
SHA1 651b8d1377910e4728e85dcd231e269313ab9e1d
SHA256 609b0a416f9b16a6df9b967dc32cd739402af31566e019a8fb8abdf3cb573e30
SHA512 53fb1ac822467168ea8e7abdd72c78cdd90070b10773ce8c700c6784ab4cc3a03eb53887d158ce3a27779a5fbcf3300d2ccbedab79a34bfd42ddc91f68dbdad7

C:\ProgramData\Chrome Maintenance Service\winserv.exe

MD5 cf2ab077a46219b6ce4a53517dd489ea
SHA1 651b8d1377910e4728e85dcd231e269313ab9e1d
SHA256 609b0a416f9b16a6df9b967dc32cd739402af31566e019a8fb8abdf3cb573e30
SHA512 53fb1ac822467168ea8e7abdd72c78cdd90070b10773ce8c700c6784ab4cc3a03eb53887d158ce3a27779a5fbcf3300d2ccbedab79a34bfd42ddc91f68dbdad7

C:\ProgramData\Chrome Maintenance Service\winserv.exe

MD5 cf2ab077a46219b6ce4a53517dd489ea
SHA1 651b8d1377910e4728e85dcd231e269313ab9e1d
SHA256 609b0a416f9b16a6df9b967dc32cd739402af31566e019a8fb8abdf3cb573e30
SHA512 53fb1ac822467168ea8e7abdd72c78cdd90070b10773ce8c700c6784ab4cc3a03eb53887d158ce3a27779a5fbcf3300d2ccbedab79a34bfd42ddc91f68dbdad7

memory/3436-309-0x00000000010F0000-0x00000000010F1000-memory.dmp

C:\ProgramData\Chrome Maintenance Service\settings.dat

MD5 c21b802a67dc597835713bcee5b408a0
SHA1 3e1910e7e33ce2c7ff40730f4e5eea51d64b4deb
SHA256 8a35ab3244bc7c37702fd6f9da19caff9bfc5a28d9b07fa5d54bd1221fa38f5e
SHA512 d8ceca3e9ef3d9bf62a3c637756ebce0e70e3210a065bce10d8c105cfe5189504b9984e066ec77b91db13c7928528ca0c01363535f0685ef56ed7c31958e0674

memory/3436-322-0x0000000004990000-0x0000000004991000-memory.dmp

memory/3436-321-0x0000000004840000-0x0000000004841000-memory.dmp

memory/3436-323-0x00000000049A0000-0x00000000049A1000-memory.dmp

memory/3436-324-0x0000000005000000-0x0000000005001000-memory.dmp

memory/3436-326-0x00000000052A0000-0x00000000052A1000-memory.dmp

memory/3436-325-0x0000000005150000-0x0000000005151000-memory.dmp

memory/3436-327-0x0000000004970000-0x0000000004971000-memory.dmp

memory/3436-328-0x0000000004980000-0x0000000004981000-memory.dmp

memory/3436-330-0x0000000005790000-0x0000000005791000-memory.dmp

memory/3436-329-0x0000000005640000-0x0000000005641000-memory.dmp

memory/3436-331-0x0000000006F10000-0x0000000006F11000-memory.dmp

memory/3436-332-0x0000000007110000-0x0000000007111000-memory.dmp

memory/3436-333-0x00000000073A0000-0x0000000007471000-memory.dmp

memory/3436-334-0x00000000074F0000-0x00000000074F1000-memory.dmp