Analysis Overview
SHA256
bf4182178ba2625f04c85d52f97fa88c4cfb15e7161f0343b056efc84ddf5eec
Threat Level: Known bad
The file bf4182178ba2625f04c85d52f97fa88c4cfb15e7161f0343b056efc84ddf5eec was found to be: Known bad.
Malicious Activity Summary
RMS
Executes dropped EXE
Checks computer location settings
Loads dropped DLL
Adds Run key to start application
Enumerates physical storage devices
Suspicious use of AdjustPrivilegeToken
Suspicious use of WriteProcessMemory
Suspicious use of SetWindowsHookEx
Modifies data under HKEY_USERS
Kills process with taskkill
Suspicious behavior: EnumeratesProcesses
Runs ping.exe
MITRE ATT&CK
Enterprise Matrix V6
Analysis: static1
Detonation Overview
Reported
2022-01-28 18:34
Signatures
Analysis: behavioral1
Detonation Overview
Submitted
2022-01-28 18:34
Reported
2022-01-28 18:50
Platform
win7-en-20211208
Max time kernel
162s
Max time network
161s
Command Line
Signatures
RMS
Executes dropped EXE
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Users\Admin\AppData\Local\Temp\exit.exe | N/A |
| N/A | N/A | C:\Users\Admin\AppData\Local\Temp\chrome-service.exe | N/A |
| N/A | N/A | C:\ProgramData\Chrome Maintenance Service\exit.exe | N/A |
| N/A | N/A | C:\ProgramData\Chrome Maintenance Service\winserv.exe | N/A |
| N/A | N/A | C:\ProgramData\Chrome Maintenance Service\winserv.exe | N/A |
Checks computer location settings
| Description | Indicator | Process | Target |
| Key value queried | \REGISTRY\USER\S-1-5-21-3846991908-3261386348-1409841751-1000\Control Panel\International\Geo\Nation | C:\ProgramData\Chrome Maintenance Service\winserv.exe | N/A |
Loads dropped DLL
Adds Run key to start application
| Description | Indicator | Process | Target |
| Key created | \REGISTRY\USER\S-1-5-21-3846991908-3261386348-1409841751-1000\Software\Microsoft\Windows\CurrentVersion\Run | C:\Windows\SysWOW64\reg.exe | N/A |
| Set value (str) | \REGISTRY\USER\S-1-5-21-3846991908-3261386348-1409841751-1000\Software\Microsoft\Windows\CurrentVersion\Run\Chrome Maintenance Service = "C:\\ProgramData\\Chrome Maintenance Service\\winserv.exe" | C:\Windows\SysWOW64\reg.exe | N/A |
Enumerates physical storage devices
Kills process with taskkill
Runs ping.exe
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Windows\SysWOW64\PING.EXE | N/A |
| N/A | N/A | C:\Windows\SysWOW64\PING.EXE | N/A |
Suspicious behavior: EnumeratesProcesses
| Description | Indicator | Process | Target |
| N/A | N/A | C:\ProgramData\Chrome Maintenance Service\winserv.exe | N/A |
| N/A | N/A | C:\ProgramData\Chrome Maintenance Service\winserv.exe | N/A |
| N/A | N/A | C:\ProgramData\Chrome Maintenance Service\winserv.exe | N/A |
| N/A | N/A | C:\ProgramData\Chrome Maintenance Service\winserv.exe | N/A |
| N/A | N/A | C:\ProgramData\Chrome Maintenance Service\winserv.exe | N/A |
| N/A | N/A | C:\ProgramData\Chrome Maintenance Service\winserv.exe | N/A |
| N/A | N/A | C:\ProgramData\Chrome Maintenance Service\winserv.exe | N/A |
| N/A | N/A | C:\ProgramData\Chrome Maintenance Service\winserv.exe | N/A |
| N/A | N/A | C:\ProgramData\Chrome Maintenance Service\winserv.exe | N/A |
Suspicious use of AdjustPrivilegeToken
| Description | Indicator | Process | Target |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\ProgramData\Chrome Maintenance Service\winserv.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeTakeOwnershipPrivilege | N/A | C:\ProgramData\Chrome Maintenance Service\winserv.exe | N/A |
| Token: SeTcbPrivilege | N/A | C:\ProgramData\Chrome Maintenance Service\winserv.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeTcbPrivilege | N/A | C:\ProgramData\Chrome Maintenance Service\winserv.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
Suspicious use of SetWindowsHookEx
| Description | Indicator | Process | Target |
| N/A | N/A | C:\ProgramData\Chrome Maintenance Service\winserv.exe | N/A |
| N/A | N/A | C:\ProgramData\Chrome Maintenance Service\winserv.exe | N/A |
| N/A | N/A | C:\ProgramData\Chrome Maintenance Service\winserv.exe | N/A |
| N/A | N/A | C:\ProgramData\Chrome Maintenance Service\winserv.exe | N/A |
| N/A | N/A | C:\ProgramData\Chrome Maintenance Service\winserv.exe | N/A |
| N/A | N/A | C:\ProgramData\Chrome Maintenance Service\winserv.exe | N/A |
| N/A | N/A | C:\ProgramData\Chrome Maintenance Service\winserv.exe | N/A |
| N/A | N/A | C:\ProgramData\Chrome Maintenance Service\winserv.exe | N/A |
Suspicious use of WriteProcessMemory
Processes
C:\Users\Admin\AppData\Local\Temp\bf4182178ba2625f04c85d52f97fa88c4cfb15e7161f0343b056efc84ddf5eec.exe
"C:\Users\Admin\AppData\Local\Temp\bf4182178ba2625f04c85d52f97fa88c4cfb15e7161f0343b056efc84ddf5eec.exe"
C:\Users\Admin\AppData\Local\Temp\exit.exe
"C:\Users\Admin\AppData\Local\Temp\exit.exe"
C:\Windows\SysWOW64\cmd.exe
cmd /c i.cmd
C:\Windows\SysWOW64\PING.EXE
ping cloudflare.com -n 3 -w 3000
C:\Windows\SysWOW64\PING.EXE
ping cloudflare.com -n 3 -w 1000
C:\Users\Admin\AppData\Local\Temp\chrome-service.exe
chrome-service.exe x -p3KPnoNJ3ReME4bEU5W9APkKS5ErkR3tNRT -y
C:\ProgramData\Chrome Maintenance Service\exit.exe
"C:\ProgramData\Chrome Maintenance Service\exit.exe"
C:\Windows\SysWOW64\cmd.exe
cmd /c i.cmd
C:\Windows\SysWOW64\reg.exe
REG ADD "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /f /v "Chrome Maintenance Service" /t REG_SZ /d "C:\ProgramData\Chrome Maintenance Service\winserv.exe"
C:\ProgramData\Chrome Maintenance Service\winserv.exe
"C:\ProgramData\Chrome Maintenance Service\winserv.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\ProgramData\Chrome Maintenance Service\winserv.exe
"C:\ProgramData\Chrome Maintenance Service\winserv.exe" -second
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | cloudflare.com | udp |
| NL | 92.63.197.163:5655 | tcp | |
| NL | 92.63.197.163:5655 | tcp | |
| NL | 92.63.197.163:5655 | tcp | |
| NL | 92.63.197.163:5655 | tcp | |
| NL | 92.63.197.163:5655 | tcp | |
| NL | 92.63.197.163:5655 | tcp | |
| NL | 92.63.197.163:5655 | tcp | |
| NL | 92.63.197.163:5655 | tcp | |
| NL | 92.63.197.163:5655 | tcp | |
| NL | 92.63.197.163:5655 | tcp | |
| NL | 92.63.197.163:5655 | tcp | |
| NL | 92.63.197.163:5655 | tcp | |
| NL | 92.63.197.163:5655 | tcp | |
| NL | 92.63.197.163:5655 | tcp | |
| NL | 92.63.197.163:5655 | tcp | |
| NL | 92.63.197.163:5655 | tcp | |
| NL | 92.63.197.163:5655 | tcp |
Files
memory/828-54-0x0000000075B51000-0x0000000075B53000-memory.dmp
\Users\Admin\AppData\Local\Temp\exit.exe
| MD5 | d2f314f78d0ac5a5c5dbd119a41bad5a |
| SHA1 | 49415ae9a0f85699349f13c95cb4fd3ce0eaf932 |
| SHA256 | cc81dd1eba5b887d09b0eecb8443916dea82dc58e1cf847f1653413fb804210c |
| SHA512 | 42cdb86ebd0e1ef75d9527ee946d43e87abda73f3480e04ef90efb8fbcc7db0b2d29b366fb8715b1cb19896a35dc0dae1a05a23b91032923fbd52ce193c72c5b |
\Users\Admin\AppData\Local\Temp\exit.exe
| MD5 | d2f314f78d0ac5a5c5dbd119a41bad5a |
| SHA1 | 49415ae9a0f85699349f13c95cb4fd3ce0eaf932 |
| SHA256 | cc81dd1eba5b887d09b0eecb8443916dea82dc58e1cf847f1653413fb804210c |
| SHA512 | 42cdb86ebd0e1ef75d9527ee946d43e87abda73f3480e04ef90efb8fbcc7db0b2d29b366fb8715b1cb19896a35dc0dae1a05a23b91032923fbd52ce193c72c5b |
\Users\Admin\AppData\Local\Temp\exit.exe
| MD5 | d2f314f78d0ac5a5c5dbd119a41bad5a |
| SHA1 | 49415ae9a0f85699349f13c95cb4fd3ce0eaf932 |
| SHA256 | cc81dd1eba5b887d09b0eecb8443916dea82dc58e1cf847f1653413fb804210c |
| SHA512 | 42cdb86ebd0e1ef75d9527ee946d43e87abda73f3480e04ef90efb8fbcc7db0b2d29b366fb8715b1cb19896a35dc0dae1a05a23b91032923fbd52ce193c72c5b |
\Users\Admin\AppData\Local\Temp\exit.exe
| MD5 | d2f314f78d0ac5a5c5dbd119a41bad5a |
| SHA1 | 49415ae9a0f85699349f13c95cb4fd3ce0eaf932 |
| SHA256 | cc81dd1eba5b887d09b0eecb8443916dea82dc58e1cf847f1653413fb804210c |
| SHA512 | 42cdb86ebd0e1ef75d9527ee946d43e87abda73f3480e04ef90efb8fbcc7db0b2d29b366fb8715b1cb19896a35dc0dae1a05a23b91032923fbd52ce193c72c5b |
C:\Users\Admin\AppData\Local\Temp\exit.exe
| MD5 | d2f314f78d0ac5a5c5dbd119a41bad5a |
| SHA1 | 49415ae9a0f85699349f13c95cb4fd3ce0eaf932 |
| SHA256 | cc81dd1eba5b887d09b0eecb8443916dea82dc58e1cf847f1653413fb804210c |
| SHA512 | 42cdb86ebd0e1ef75d9527ee946d43e87abda73f3480e04ef90efb8fbcc7db0b2d29b366fb8715b1cb19896a35dc0dae1a05a23b91032923fbd52ce193c72c5b |
C:\Users\Admin\AppData\Local\Temp\i.cmd
| MD5 | 3e4e7e27a1069dcb64b843ac88cb0515 |
| SHA1 | d100032fba1f7f0c3d748a5fd6fb04278d77910d |
| SHA256 | 5f1c8209f1f4981c38fa047cd1eeb14974da297803054579f35e7e6291c0a9ce |
| SHA512 | 4fb88c4ad56c13f36dabaf2874d2c4d6fbd9be32427ef3d44f9080a5273d296250790629bc5b6b5b034613a63dbc84f873b8f6f8a08613040dbc11aea656946a |
C:\Users\Admin\AppData\Local\Temp\syst.dll
| MD5 | 82202a20979db3a61aedd37357472db9 |
| SHA1 | 363d0bc8c6e4ec03ad4fb873d65f530b52fff095 |
| SHA256 | 8fe1490464a7435fce651cfa8e35350981b122fefe9c7ff733daedaf9a842eae |
| SHA512 | d31be072f98475b59f69f264633817fbeadd014eaeab111456780e3813b7c974b3245819ac1577cbd5600bf66b5c20ec2a5e32395becf63224eb52fe3baf8a07 |
\Users\Admin\AppData\Local\Temp\chrome-service.exe
| MD5 | 82202a20979db3a61aedd37357472db9 |
| SHA1 | 363d0bc8c6e4ec03ad4fb873d65f530b52fff095 |
| SHA256 | 8fe1490464a7435fce651cfa8e35350981b122fefe9c7ff733daedaf9a842eae |
| SHA512 | d31be072f98475b59f69f264633817fbeadd014eaeab111456780e3813b7c974b3245819ac1577cbd5600bf66b5c20ec2a5e32395becf63224eb52fe3baf8a07 |
C:\Users\Admin\AppData\Local\Temp\chrome-service.exe
| MD5 | 82202a20979db3a61aedd37357472db9 |
| SHA1 | 363d0bc8c6e4ec03ad4fb873d65f530b52fff095 |
| SHA256 | 8fe1490464a7435fce651cfa8e35350981b122fefe9c7ff733daedaf9a842eae |
| SHA512 | d31be072f98475b59f69f264633817fbeadd014eaeab111456780e3813b7c974b3245819ac1577cbd5600bf66b5c20ec2a5e32395becf63224eb52fe3baf8a07 |
\ProgramData\Chrome Maintenance Service\exit.exe
| MD5 | d2f314f78d0ac5a5c5dbd119a41bad5a |
| SHA1 | 49415ae9a0f85699349f13c95cb4fd3ce0eaf932 |
| SHA256 | cc81dd1eba5b887d09b0eecb8443916dea82dc58e1cf847f1653413fb804210c |
| SHA512 | 42cdb86ebd0e1ef75d9527ee946d43e87abda73f3480e04ef90efb8fbcc7db0b2d29b366fb8715b1cb19896a35dc0dae1a05a23b91032923fbd52ce193c72c5b |
\ProgramData\Chrome Maintenance Service\exit.exe
| MD5 | d2f314f78d0ac5a5c5dbd119a41bad5a |
| SHA1 | 49415ae9a0f85699349f13c95cb4fd3ce0eaf932 |
| SHA256 | cc81dd1eba5b887d09b0eecb8443916dea82dc58e1cf847f1653413fb804210c |
| SHA512 | 42cdb86ebd0e1ef75d9527ee946d43e87abda73f3480e04ef90efb8fbcc7db0b2d29b366fb8715b1cb19896a35dc0dae1a05a23b91032923fbd52ce193c72c5b |
\ProgramData\Chrome Maintenance Service\exit.exe
| MD5 | d2f314f78d0ac5a5c5dbd119a41bad5a |
| SHA1 | 49415ae9a0f85699349f13c95cb4fd3ce0eaf932 |
| SHA256 | cc81dd1eba5b887d09b0eecb8443916dea82dc58e1cf847f1653413fb804210c |
| SHA512 | 42cdb86ebd0e1ef75d9527ee946d43e87abda73f3480e04ef90efb8fbcc7db0b2d29b366fb8715b1cb19896a35dc0dae1a05a23b91032923fbd52ce193c72c5b |
\ProgramData\Chrome Maintenance Service\exit.exe
| MD5 | d2f314f78d0ac5a5c5dbd119a41bad5a |
| SHA1 | 49415ae9a0f85699349f13c95cb4fd3ce0eaf932 |
| SHA256 | cc81dd1eba5b887d09b0eecb8443916dea82dc58e1cf847f1653413fb804210c |
| SHA512 | 42cdb86ebd0e1ef75d9527ee946d43e87abda73f3480e04ef90efb8fbcc7db0b2d29b366fb8715b1cb19896a35dc0dae1a05a23b91032923fbd52ce193c72c5b |
C:\ProgramData\Chrome Maintenance Service\exit.exe
| MD5 | d2f314f78d0ac5a5c5dbd119a41bad5a |
| SHA1 | 49415ae9a0f85699349f13c95cb4fd3ce0eaf932 |
| SHA256 | cc81dd1eba5b887d09b0eecb8443916dea82dc58e1cf847f1653413fb804210c |
| SHA512 | 42cdb86ebd0e1ef75d9527ee946d43e87abda73f3480e04ef90efb8fbcc7db0b2d29b366fb8715b1cb19896a35dc0dae1a05a23b91032923fbd52ce193c72c5b |
C:\ProgramData\Chrome Maintenance Service\i.cmd
| MD5 | 809888a45ea3ba5973f9df09b8c58afc |
| SHA1 | 1343c0259183b701a5aca161bd8006fc7a7e69bd |
| SHA256 | 50b5458805fc94391b5589a3921ed5928bb72abfb067e01d8f6e0820214ec2fe |
| SHA512 | cc4a620c77779c291fd8dcc09afae44bc48d776a2cdedd450458acdebf5c44ddfa5475b4df039b1fecf1bf4ce08a16633b7b322e8c981a435a671f761bd878c8 |
\ProgramData\Chrome Maintenance Service\winserv.exe
| MD5 | cf2ab077a46219b6ce4a53517dd489ea |
| SHA1 | 651b8d1377910e4728e85dcd231e269313ab9e1d |
| SHA256 | 609b0a416f9b16a6df9b967dc32cd739402af31566e019a8fb8abdf3cb573e30 |
| SHA512 | 53fb1ac822467168ea8e7abdd72c78cdd90070b10773ce8c700c6784ab4cc3a03eb53887d158ce3a27779a5fbcf3300d2ccbedab79a34bfd42ddc91f68dbdad7 |
C:\ProgramData\Chrome Maintenance Service\winserv.exe
| MD5 | cf2ab077a46219b6ce4a53517dd489ea |
| SHA1 | 651b8d1377910e4728e85dcd231e269313ab9e1d |
| SHA256 | 609b0a416f9b16a6df9b967dc32cd739402af31566e019a8fb8abdf3cb573e30 |
| SHA512 | 53fb1ac822467168ea8e7abdd72c78cdd90070b10773ce8c700c6784ab4cc3a03eb53887d158ce3a27779a5fbcf3300d2ccbedab79a34bfd42ddc91f68dbdad7 |
C:\ProgramData\Chrome Maintenance Service\winserv.exe
| MD5 | cf2ab077a46219b6ce4a53517dd489ea |
| SHA1 | 651b8d1377910e4728e85dcd231e269313ab9e1d |
| SHA256 | 609b0a416f9b16a6df9b967dc32cd739402af31566e019a8fb8abdf3cb573e30 |
| SHA512 | 53fb1ac822467168ea8e7abdd72c78cdd90070b10773ce8c700c6784ab4cc3a03eb53887d158ce3a27779a5fbcf3300d2ccbedab79a34bfd42ddc91f68dbdad7 |
memory/1860-91-0x0000000000400000-0x0000000000E2B000-memory.dmp
memory/1860-92-0x0000000000350000-0x0000000000351000-memory.dmp
C:\ProgramData\Chrome Maintenance Service\winserv.exe
| MD5 | cf2ab077a46219b6ce4a53517dd489ea |
| SHA1 | 651b8d1377910e4728e85dcd231e269313ab9e1d |
| SHA256 | 609b0a416f9b16a6df9b967dc32cd739402af31566e019a8fb8abdf3cb573e30 |
| SHA512 | 53fb1ac822467168ea8e7abdd72c78cdd90070b10773ce8c700c6784ab4cc3a03eb53887d158ce3a27779a5fbcf3300d2ccbedab79a34bfd42ddc91f68dbdad7 |
C:\ProgramData\Chrome Maintenance Service\settings.dat
| MD5 | c21b802a67dc597835713bcee5b408a0 |
| SHA1 | 3e1910e7e33ce2c7ff40730f4e5eea51d64b4deb |
| SHA256 | 8a35ab3244bc7c37702fd6f9da19caff9bfc5a28d9b07fa5d54bd1221fa38f5e |
| SHA512 | d8ceca3e9ef3d9bf62a3c637756ebce0e70e3210a065bce10d8c105cfe5189504b9984e066ec77b91db13c7928528ca0c01363535f0685ef56ed7c31958e0674 |
memory/676-103-0x00000000003F0000-0x00000000003F1000-memory.dmp
memory/676-104-0x0000000004BA0000-0x0000000004BA1000-memory.dmp
memory/676-105-0x0000000004BF0000-0x0000000004BF1000-memory.dmp
memory/676-106-0x0000000004E10000-0x0000000004E11000-memory.dmp
memory/676-108-0x0000000005600000-0x0000000005601000-memory.dmp
memory/676-109-0x0000000005750000-0x0000000005751000-memory.dmp
memory/676-107-0x00000000054B0000-0x00000000054B1000-memory.dmp
memory/676-110-0x0000000005500000-0x0000000005501000-memory.dmp
memory/676-111-0x0000000005B70000-0x0000000005B71000-memory.dmp
memory/676-115-0x00000000055D0000-0x00000000055D1000-memory.dmp
memory/676-116-0x00000000055E0000-0x00000000055E1000-memory.dmp
memory/676-114-0x00000000054F0000-0x00000000054F1000-memory.dmp
memory/676-112-0x0000000005E30000-0x0000000005E31000-memory.dmp
memory/676-123-0x0000000005E40000-0x0000000005E41000-memory.dmp
memory/676-124-0x00000000066F0000-0x000000000684C000-memory.dmp
Analysis: behavioral2
Detonation Overview
Submitted
2022-01-28 18:34
Reported
2022-01-28 18:50
Platform
win10-en-20211208
Max time kernel
163s
Max time network
159s
Command Line
Signatures
RMS
Executes dropped EXE
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Users\Admin\AppData\Local\Temp\exit.exe | N/A |
| N/A | N/A | C:\Users\Admin\AppData\Local\Temp\chrome-service.exe | N/A |
| N/A | N/A | C:\ProgramData\Chrome Maintenance Service\exit.exe | N/A |
| N/A | N/A | C:\ProgramData\Chrome Maintenance Service\winserv.exe | N/A |
| N/A | N/A | C:\ProgramData\Chrome Maintenance Service\winserv.exe | N/A |
Checks computer location settings
| Description | Indicator | Process | Target |
| Key value queried | \REGISTRY\USER\S-1-5-21-369956170-74428499-1628131376-1000\Control Panel\International\Geo\Nation | C:\ProgramData\Chrome Maintenance Service\winserv.exe | N/A |
Adds Run key to start application
| Description | Indicator | Process | Target |
| Key created | \REGISTRY\USER\S-1-5-21-369956170-74428499-1628131376-1000\Software\Microsoft\Windows\CurrentVersion\Run | C:\Windows\SysWOW64\reg.exe | N/A |
| Set value (str) | \REGISTRY\USER\S-1-5-21-369956170-74428499-1628131376-1000\Software\Microsoft\Windows\CurrentVersion\Run\Chrome Maintenance Service = "C:\\ProgramData\\Chrome Maintenance Service\\winserv.exe" | C:\Windows\SysWOW64\reg.exe | N/A |
Enumerates physical storage devices
Kills process with taskkill
Modifies data under HKEY_USERS
| Description | Indicator | Process | Target |
| Set value (data) | \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\16\52C64B7E\LanguageList = 65006e002d0055005300000065006e0000000000 | C:\ProgramData\Chrome Maintenance Service\winserv.exe | N/A |
| Set value (str) | \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\16\52C64B7E\@C:\Windows\SysWOW64\FirewallControlPanel.dll,-12122 = "Windows Firewall" | C:\ProgramData\Chrome Maintenance Service\winserv.exe | N/A |
Runs ping.exe
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Windows\SysWOW64\PING.EXE | N/A |
| N/A | N/A | C:\Windows\SysWOW64\PING.EXE | N/A |
Suspicious behavior: EnumeratesProcesses
| Description | Indicator | Process | Target |
| N/A | N/A | C:\ProgramData\Chrome Maintenance Service\winserv.exe | N/A |
| N/A | N/A | C:\ProgramData\Chrome Maintenance Service\winserv.exe | N/A |
| N/A | N/A | C:\ProgramData\Chrome Maintenance Service\winserv.exe | N/A |
| N/A | N/A | C:\ProgramData\Chrome Maintenance Service\winserv.exe | N/A |
| N/A | N/A | C:\ProgramData\Chrome Maintenance Service\winserv.exe | N/A |
| N/A | N/A | C:\ProgramData\Chrome Maintenance Service\winserv.exe | N/A |
| N/A | N/A | C:\ProgramData\Chrome Maintenance Service\winserv.exe | N/A |
| N/A | N/A | C:\ProgramData\Chrome Maintenance Service\winserv.exe | N/A |
| N/A | N/A | C:\ProgramData\Chrome Maintenance Service\winserv.exe | N/A |
| N/A | N/A | C:\ProgramData\Chrome Maintenance Service\winserv.exe | N/A |
Suspicious use of AdjustPrivilegeToken
| Description | Indicator | Process | Target |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\ProgramData\Chrome Maintenance Service\winserv.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeTakeOwnershipPrivilege | N/A | C:\ProgramData\Chrome Maintenance Service\winserv.exe | N/A |
| Token: SeTcbPrivilege | N/A | C:\ProgramData\Chrome Maintenance Service\winserv.exe | N/A |
| Token: SeTcbPrivilege | N/A | C:\ProgramData\Chrome Maintenance Service\winserv.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
Suspicious use of SetWindowsHookEx
| Description | Indicator | Process | Target |
| N/A | N/A | C:\ProgramData\Chrome Maintenance Service\winserv.exe | N/A |
| N/A | N/A | C:\ProgramData\Chrome Maintenance Service\winserv.exe | N/A |
| N/A | N/A | C:\ProgramData\Chrome Maintenance Service\winserv.exe | N/A |
| N/A | N/A | C:\ProgramData\Chrome Maintenance Service\winserv.exe | N/A |
| N/A | N/A | C:\ProgramData\Chrome Maintenance Service\winserv.exe | N/A |
| N/A | N/A | C:\ProgramData\Chrome Maintenance Service\winserv.exe | N/A |
| N/A | N/A | C:\ProgramData\Chrome Maintenance Service\winserv.exe | N/A |
| N/A | N/A | C:\ProgramData\Chrome Maintenance Service\winserv.exe | N/A |
Suspicious use of WriteProcessMemory
Processes
C:\Users\Admin\AppData\Local\Temp\bf4182178ba2625f04c85d52f97fa88c4cfb15e7161f0343b056efc84ddf5eec.exe
"C:\Users\Admin\AppData\Local\Temp\bf4182178ba2625f04c85d52f97fa88c4cfb15e7161f0343b056efc84ddf5eec.exe"
C:\Users\Admin\AppData\Local\Temp\exit.exe
"C:\Users\Admin\AppData\Local\Temp\exit.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c i.cmd
C:\Windows\SysWOW64\PING.EXE
ping cloudflare.com -n 3 -w 3000
C:\Windows\SysWOW64\PING.EXE
ping cloudflare.com -n 3 -w 1000
C:\Users\Admin\AppData\Local\Temp\chrome-service.exe
chrome-service.exe x -p3KPnoNJ3ReME4bEU5W9APkKS5ErkR3tNRT -y
C:\ProgramData\Chrome Maintenance Service\exit.exe
"C:\ProgramData\Chrome Maintenance Service\exit.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c i.cmd
C:\Windows\SysWOW64\reg.exe
REG ADD "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /f /v "Chrome Maintenance Service" /t REG_SZ /d "C:\ProgramData\Chrome Maintenance Service\winserv.exe"
C:\ProgramData\Chrome Maintenance Service\winserv.exe
"C:\ProgramData\Chrome Maintenance Service\winserv.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\ProgramData\Chrome Maintenance Service\winserv.exe
"C:\ProgramData\Chrome Maintenance Service\winserv.exe" -second
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "rundll32.exe"
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | cloudflare.com | udp |
| NL | 92.63.197.163:5655 | tcp | |
| NL | 92.63.197.163:5655 | tcp | |
| NL | 92.63.197.163:5655 | tcp | |
| NL | 92.63.197.163:5655 | tcp | |
| NL | 92.63.197.163:5655 | tcp | |
| NL | 92.63.197.163:5655 | tcp | |
| NL | 92.63.197.163:5655 | tcp | |
| NL | 92.63.197.163:5655 | tcp | |
| NL | 92.63.197.163:5655 | tcp | |
| NL | 92.63.197.163:5655 | tcp | |
| NL | 92.63.197.163:5655 | tcp | |
| NL | 92.63.197.163:5655 | tcp | |
| NL | 92.63.197.163:5655 | tcp | |
| NL | 92.63.197.163:5655 | tcp | |
| NL | 92.63.197.163:5655 | tcp | |
| NL | 92.63.197.163:5655 | tcp |
Files
C:\Users\Admin\AppData\Local\Temp\exit.exe
| MD5 | d2f314f78d0ac5a5c5dbd119a41bad5a |
| SHA1 | 49415ae9a0f85699349f13c95cb4fd3ce0eaf932 |
| SHA256 | cc81dd1eba5b887d09b0eecb8443916dea82dc58e1cf847f1653413fb804210c |
| SHA512 | 42cdb86ebd0e1ef75d9527ee946d43e87abda73f3480e04ef90efb8fbcc7db0b2d29b366fb8715b1cb19896a35dc0dae1a05a23b91032923fbd52ce193c72c5b |
C:\Users\Admin\AppData\Local\Temp\exit.exe
| MD5 | d2f314f78d0ac5a5c5dbd119a41bad5a |
| SHA1 | 49415ae9a0f85699349f13c95cb4fd3ce0eaf932 |
| SHA256 | cc81dd1eba5b887d09b0eecb8443916dea82dc58e1cf847f1653413fb804210c |
| SHA512 | 42cdb86ebd0e1ef75d9527ee946d43e87abda73f3480e04ef90efb8fbcc7db0b2d29b366fb8715b1cb19896a35dc0dae1a05a23b91032923fbd52ce193c72c5b |
C:\Users\Admin\AppData\Local\Temp\i.cmd
| MD5 | 3e4e7e27a1069dcb64b843ac88cb0515 |
| SHA1 | d100032fba1f7f0c3d748a5fd6fb04278d77910d |
| SHA256 | 5f1c8209f1f4981c38fa047cd1eeb14974da297803054579f35e7e6291c0a9ce |
| SHA512 | 4fb88c4ad56c13f36dabaf2874d2c4d6fbd9be32427ef3d44f9080a5273d296250790629bc5b6b5b034613a63dbc84f873b8f6f8a08613040dbc11aea656946a |
C:\Users\Admin\AppData\Local\Temp\syst.dll
| MD5 | 82202a20979db3a61aedd37357472db9 |
| SHA1 | 363d0bc8c6e4ec03ad4fb873d65f530b52fff095 |
| SHA256 | 8fe1490464a7435fce651cfa8e35350981b122fefe9c7ff733daedaf9a842eae |
| SHA512 | d31be072f98475b59f69f264633817fbeadd014eaeab111456780e3813b7c974b3245819ac1577cbd5600bf66b5c20ec2a5e32395becf63224eb52fe3baf8a07 |
C:\Users\Admin\AppData\Local\Temp\chrome-service.exe
| MD5 | 82202a20979db3a61aedd37357472db9 |
| SHA1 | 363d0bc8c6e4ec03ad4fb873d65f530b52fff095 |
| SHA256 | 8fe1490464a7435fce651cfa8e35350981b122fefe9c7ff733daedaf9a842eae |
| SHA512 | d31be072f98475b59f69f264633817fbeadd014eaeab111456780e3813b7c974b3245819ac1577cbd5600bf66b5c20ec2a5e32395becf63224eb52fe3baf8a07 |
C:\ProgramData\Chrome Maintenance Service\exit.exe
| MD5 | d2f314f78d0ac5a5c5dbd119a41bad5a |
| SHA1 | 49415ae9a0f85699349f13c95cb4fd3ce0eaf932 |
| SHA256 | cc81dd1eba5b887d09b0eecb8443916dea82dc58e1cf847f1653413fb804210c |
| SHA512 | 42cdb86ebd0e1ef75d9527ee946d43e87abda73f3480e04ef90efb8fbcc7db0b2d29b366fb8715b1cb19896a35dc0dae1a05a23b91032923fbd52ce193c72c5b |
C:\ProgramData\Chrome Maintenance Service\exit.exe
| MD5 | d2f314f78d0ac5a5c5dbd119a41bad5a |
| SHA1 | 49415ae9a0f85699349f13c95cb4fd3ce0eaf932 |
| SHA256 | cc81dd1eba5b887d09b0eecb8443916dea82dc58e1cf847f1653413fb804210c |
| SHA512 | 42cdb86ebd0e1ef75d9527ee946d43e87abda73f3480e04ef90efb8fbcc7db0b2d29b366fb8715b1cb19896a35dc0dae1a05a23b91032923fbd52ce193c72c5b |
C:\ProgramData\Chrome Maintenance Service\i.cmd
| MD5 | 809888a45ea3ba5973f9df09b8c58afc |
| SHA1 | 1343c0259183b701a5aca161bd8006fc7a7e69bd |
| SHA256 | 50b5458805fc94391b5589a3921ed5928bb72abfb067e01d8f6e0820214ec2fe |
| SHA512 | cc4a620c77779c291fd8dcc09afae44bc48d776a2cdedd450458acdebf5c44ddfa5475b4df039b1fecf1bf4ce08a16633b7b322e8c981a435a671f761bd878c8 |
C:\ProgramData\Chrome Maintenance Service\winserv.exe
| MD5 | cf2ab077a46219b6ce4a53517dd489ea |
| SHA1 | 651b8d1377910e4728e85dcd231e269313ab9e1d |
| SHA256 | 609b0a416f9b16a6df9b967dc32cd739402af31566e019a8fb8abdf3cb573e30 |
| SHA512 | 53fb1ac822467168ea8e7abdd72c78cdd90070b10773ce8c700c6784ab4cc3a03eb53887d158ce3a27779a5fbcf3300d2ccbedab79a34bfd42ddc91f68dbdad7 |
C:\ProgramData\Chrome Maintenance Service\winserv.exe
| MD5 | cf2ab077a46219b6ce4a53517dd489ea |
| SHA1 | 651b8d1377910e4728e85dcd231e269313ab9e1d |
| SHA256 | 609b0a416f9b16a6df9b967dc32cd739402af31566e019a8fb8abdf3cb573e30 |
| SHA512 | 53fb1ac822467168ea8e7abdd72c78cdd90070b10773ce8c700c6784ab4cc3a03eb53887d158ce3a27779a5fbcf3300d2ccbedab79a34bfd42ddc91f68dbdad7 |
C:\ProgramData\Chrome Maintenance Service\winserv.exe
| MD5 | cf2ab077a46219b6ce4a53517dd489ea |
| SHA1 | 651b8d1377910e4728e85dcd231e269313ab9e1d |
| SHA256 | 609b0a416f9b16a6df9b967dc32cd739402af31566e019a8fb8abdf3cb573e30 |
| SHA512 | 53fb1ac822467168ea8e7abdd72c78cdd90070b10773ce8c700c6784ab4cc3a03eb53887d158ce3a27779a5fbcf3300d2ccbedab79a34bfd42ddc91f68dbdad7 |
memory/3436-309-0x00000000010F0000-0x00000000010F1000-memory.dmp
C:\ProgramData\Chrome Maintenance Service\settings.dat
| MD5 | c21b802a67dc597835713bcee5b408a0 |
| SHA1 | 3e1910e7e33ce2c7ff40730f4e5eea51d64b4deb |
| SHA256 | 8a35ab3244bc7c37702fd6f9da19caff9bfc5a28d9b07fa5d54bd1221fa38f5e |
| SHA512 | d8ceca3e9ef3d9bf62a3c637756ebce0e70e3210a065bce10d8c105cfe5189504b9984e066ec77b91db13c7928528ca0c01363535f0685ef56ed7c31958e0674 |
memory/3436-322-0x0000000004990000-0x0000000004991000-memory.dmp
memory/3436-321-0x0000000004840000-0x0000000004841000-memory.dmp
memory/3436-323-0x00000000049A0000-0x00000000049A1000-memory.dmp
memory/3436-324-0x0000000005000000-0x0000000005001000-memory.dmp
memory/3436-326-0x00000000052A0000-0x00000000052A1000-memory.dmp
memory/3436-325-0x0000000005150000-0x0000000005151000-memory.dmp
memory/3436-327-0x0000000004970000-0x0000000004971000-memory.dmp
memory/3436-328-0x0000000004980000-0x0000000004981000-memory.dmp
memory/3436-330-0x0000000005790000-0x0000000005791000-memory.dmp
memory/3436-329-0x0000000005640000-0x0000000005641000-memory.dmp
memory/3436-331-0x0000000006F10000-0x0000000006F11000-memory.dmp
memory/3436-332-0x0000000007110000-0x0000000007111000-memory.dmp
memory/3436-333-0x00000000073A0000-0x0000000007471000-memory.dmp
memory/3436-334-0x00000000074F0000-0x00000000074F1000-memory.dmp