rms | 12276357f43dfa5815029d7bd4774ec73aa02abb3b07f6f3e96c0e4a8b4a9831

Analysis

max time kernel
152s
max time network
162s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
03-06-2022 22:19

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

12276357f43dfa5815029d7bd4774ec73aa02abb3b07f6f3e96c0e4a8b4a9831.exe
Size

2.9MB
MD5

7bf2240fa126d8dc1932abb59a5208a6
SHA1

7bda75778723115ffa08fd83db82e6654bb9be9f
SHA256

12276357f43dfa5815029d7bd4774ec73aa02abb3b07f6f3e96c0e4a8b4a9831
SHA512

f43797804d709e84559ab3053b9b22457d30757c9a8d552e8985d0ff08ba80714f60f86e7575791308e3fab9131973d02fa231e298bb815158b3db01a482a6d1

Score

10^/10

rms persistence rat trojan

Malware Config

Signatures

RMS
Remote Manipulator System (RMS) is a remote access tool developed by Russian organization TektonIT.
trojan rat rms

Suspicious use of NtCreateUserProcessOtherParentProcess 1 IoCs

description	pid	Process	procid_target
PID 5000 created 4696	5000	svchost.exe	92

Executes dropped EXE 5 IoCs

pid	Process
4636	exit.exe
4708	7zinstall.exe
4680	exit.exe
4696	winserv.exe
2596	winserv.exe

Checks computer location settings 2 TTPs 3 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-3751123196-3323558407-1869646069-1000\Control Panel\International\Geo\Nation	12276357f43dfa5815029d7bd4774ec73aa02abb3b07f6f3e96c0e4a8b4a9831.exe
Key value queried	\REGISTRY\USER\S-1-5-21-3751123196-3323558407-1869646069-1000\Control Panel\International\Geo\Nation	7zinstall.exe
Key value queried	\REGISTRY\USER\S-1-5-21-3751123196-3323558407-1869646069-1000\Control Panel\International\Geo\Nation	winserv.exe

Adds Run key to start application 2 TTPs 2 IoCs

persistence

Registry Run Keys / Startup Folder

T1060

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3751123196-3323558407-1869646069-1000\Software\Microsoft\Windows\CurrentVersion\Run	reg.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3751123196-3323558407-1869646069-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Mdayz = "C:\\ProgramData\\Mdayz\\winserv.exe"	reg.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

Kills process with taskkill 64 IoCs

evasion

pid	Process
748	taskkill.exe
4980	taskkill.exe
4756	Process not Found
4860	taskkill.exe
3180	taskkill.exe
3564	taskkill.exe
4412	taskkill.exe
1848	taskkill.exe
4916	taskkill.exe
540	taskkill.exe
3220	taskkill.exe
3132	taskkill.exe
1856	taskkill.exe
5048	taskkill.exe
1096	taskkill.exe
796	taskkill.exe
3516	taskkill.exe
4932	taskkill.exe
4676	taskkill.exe
2812	taskkill.exe
3776	taskkill.exe
4784	taskkill.exe
2560	taskkill.exe
1848	taskkill.exe
3256	taskkill.exe
4812	Process not Found
1388	taskkill.exe
204	taskkill.exe
1696	taskkill.exe
2288	taskkill.exe
1300	taskkill.exe
4620	taskkill.exe
1428	taskkill.exe
2436	taskkill.exe
1628	taskkill.exe
4340	taskkill.exe
3856	taskkill.exe
2616	taskkill.exe
1536	taskkill.exe
4792	taskkill.exe
1500	taskkill.exe
3324	taskkill.exe
2388	taskkill.exe
2392	taskkill.exe
428	taskkill.exe
1668	Process not Found
3988	taskkill.exe
5116	taskkill.exe
5068	taskkill.exe
1432	taskkill.exe
5024	taskkill.exe
3564	taskkill.exe
1152	taskkill.exe
1680	taskkill.exe
1368	taskkill.exe
3132	taskkill.exe
452	taskkill.exe
4976	taskkill.exe
1840	taskkill.exe
3448	taskkill.exe
796	taskkill.exe
3708	taskkill.exe
1300	taskkill.exe
1776	taskkill.exe

Runs ping.exe 1 TTPs 2 IoCs

Remote System Discovery

T1018

pid	Process
4256	PING.EXE
4776	PING.EXE

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4696	winserv.exe
4696	winserv.exe
4696	winserv.exe
4696	winserv.exe
4696	winserv.exe
4696	winserv.exe
2596	winserv.exe
2596	winserv.exe
2596	winserv.exe
2596	winserv.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeDebugPrivilege	4652	taskkill.exe
Token: SeDebugPrivilege	1592	taskkill.exe
Token: SeDebugPrivilege	4696	winserv.exe
Token: SeDebugPrivilege	3196	taskkill.exe
Token: SeTcbPrivilege	5000	svchost.exe
Token: SeTcbPrivilege	5000	svchost.exe
Token: SeDebugPrivilege	4692	taskkill.exe
Token: SeDebugPrivilege	4108	taskkill.exe
Token: SeTakeOwnershipPrivilege	2596	winserv.exe
Token: SeTcbPrivilege	2596	winserv.exe
Token: SeDebugPrivilege	3684	taskkill.exe
Token: SeTcbPrivilege	2596	winserv.exe
Token: SeDebugPrivilege	3328	taskkill.exe
Token: SeDebugPrivilege	4460	taskkill.exe
Token: SeDebugPrivilege	928	taskkill.exe
Token: SeDebugPrivilege	720	taskkill.exe
Token: SeDebugPrivilege	1560	taskkill.exe
Token: SeDebugPrivilege	4520	taskkill.exe
Token: SeDebugPrivilege	1148	taskkill.exe
Token: SeDebugPrivilege	444	taskkill.exe
Token: SeDebugPrivilege	3752	taskkill.exe
Token: SeDebugPrivilege	3204	taskkill.exe
Token: SeDebugPrivilege	4792	taskkill.exe
Token: SeDebugPrivilege	4372	taskkill.exe
Token: SeDebugPrivilege	4296	taskkill.exe
Token: SeDebugPrivilege	2860	taskkill.exe
Token: SeDebugPrivilege	3764	taskkill.exe
Token: SeDebugPrivilege	3760	taskkill.exe
Token: SeDebugPrivilege	612	taskkill.exe
Token: SeDebugPrivilege	2752	taskkill.exe
Token: SeDebugPrivilege	3656	taskkill.exe
Token: SeDebugPrivilege	1924	taskkill.exe
Token: SeDebugPrivilege	1468	taskkill.exe
Token: SeDebugPrivilege	2480	taskkill.exe
Token: SeDebugPrivilege	3300	taskkill.exe
Token: SeDebugPrivilege	1732	taskkill.exe
Token: SeDebugPrivilege	2828	taskkill.exe
Token: SeDebugPrivilege	1504	taskkill.exe
Token: SeDebugPrivilege	4988	taskkill.exe
Token: SeDebugPrivilege	536	taskkill.exe
Token: SeDebugPrivilege	1756	taskkill.exe
Token: SeDebugPrivilege	2144	taskkill.exe
Token: SeDebugPrivilege	4932	taskkill.exe
Token: SeDebugPrivilege	2808	taskkill.exe
Token: SeDebugPrivilege	4872	taskkill.exe
Token: SeDebugPrivilege	4348	taskkill.exe
Token: SeDebugPrivilege	5048	taskkill.exe
Token: SeDebugPrivilege	4684	taskkill.exe
Token: SeDebugPrivilege	4604	taskkill.exe
Token: SeDebugPrivilege	2432	taskkill.exe
Token: SeDebugPrivilege	2096	taskkill.exe
Token: SeDebugPrivilege	4424	taskkill.exe
Token: SeDebugPrivilege	3472	taskkill.exe
Token: SeDebugPrivilege	2560	taskkill.exe
Token: SeDebugPrivilege	2132	taskkill.exe
Token: SeDebugPrivilege	1388	taskkill.exe
Token: SeDebugPrivilege	2392	taskkill.exe
Token: SeDebugPrivilege	2440	taskkill.exe
Token: SeDebugPrivilege	3708	taskkill.exe
Token: SeDebugPrivilege	3932	taskkill.exe
Token: SeDebugPrivilege	632	taskkill.exe
Token: SeDebugPrivilege	816	taskkill.exe
Token: SeDebugPrivilege	2692	taskkill.exe
Token: SeDebugPrivilege	1136	taskkill.exe

Suspicious use of SetWindowsHookEx 8 IoCs

pid	Process
4696	winserv.exe
4696	winserv.exe
4696	winserv.exe
4696	winserv.exe
2596	winserv.exe
2596	winserv.exe
2596	winserv.exe
2596	winserv.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3416 wrote to memory of 4636	3416	12276357f43dfa5815029d7bd4774ec73aa02abb3b07f6f3e96c0e4a8b4a9831.exe	81
PID 3416 wrote to memory of 4636	3416	12276357f43dfa5815029d7bd4774ec73aa02abb3b07f6f3e96c0e4a8b4a9831.exe	81
PID 3416 wrote to memory of 4636	3416	12276357f43dfa5815029d7bd4774ec73aa02abb3b07f6f3e96c0e4a8b4a9831.exe	81
PID 4636 wrote to memory of 2276	4636	exit.exe	83
PID 4636 wrote to memory of 2276	4636	exit.exe	83
PID 4636 wrote to memory of 2276	4636	exit.exe	83
PID 2276 wrote to memory of 4256	2276	cmd.exe	85
PID 2276 wrote to memory of 4256	2276	cmd.exe	85
PID 2276 wrote to memory of 4256	2276	cmd.exe	85
PID 2276 wrote to memory of 4776	2276	cmd.exe	86
PID 2276 wrote to memory of 4776	2276	cmd.exe	86
PID 2276 wrote to memory of 4776	2276	cmd.exe	86
PID 2276 wrote to memory of 4708	2276	cmd.exe	87
PID 2276 wrote to memory of 4708	2276	cmd.exe	87
PID 2276 wrote to memory of 4708	2276	cmd.exe	87
PID 4708 wrote to memory of 4680	4708	7zinstall.exe	88
PID 4708 wrote to memory of 4680	4708	7zinstall.exe	88
PID 4708 wrote to memory of 4680	4708	7zinstall.exe	88
PID 4680 wrote to memory of 2176	4680	exit.exe	89
PID 4680 wrote to memory of 2176	4680	exit.exe	89
PID 4680 wrote to memory of 2176	4680	exit.exe	89
PID 2176 wrote to memory of 4748	2176	cmd.exe	91
PID 2176 wrote to memory of 4748	2176	cmd.exe	91
PID 2176 wrote to memory of 4748	2176	cmd.exe	91
PID 2176 wrote to memory of 4696	2176	cmd.exe	92
PID 2176 wrote to memory of 4696	2176	cmd.exe	92
PID 2176 wrote to memory of 4696	2176	cmd.exe	92
PID 2176 wrote to memory of 4652	2176	cmd.exe	93
PID 2176 wrote to memory of 4652	2176	cmd.exe	93
PID 2176 wrote to memory of 4652	2176	cmd.exe	93
PID 2176 wrote to memory of 1592	2176	cmd.exe	94
PID 2176 wrote to memory of 1592	2176	cmd.exe	94
PID 2176 wrote to memory of 1592	2176	cmd.exe	94
PID 2176 wrote to memory of 3196	2176	cmd.exe	95
PID 2176 wrote to memory of 3196	2176	cmd.exe	95
PID 2176 wrote to memory of 3196	2176	cmd.exe	95
PID 5000 wrote to memory of 2596	5000	svchost.exe	97
PID 5000 wrote to memory of 2596	5000	svchost.exe	97
PID 5000 wrote to memory of 2596	5000	svchost.exe	97
PID 2176 wrote to memory of 4692	2176	cmd.exe	98
PID 2176 wrote to memory of 4692	2176	cmd.exe	98
PID 2176 wrote to memory of 4692	2176	cmd.exe	98
PID 2176 wrote to memory of 4108	2176	cmd.exe	100
PID 2176 wrote to memory of 4108	2176	cmd.exe	100
PID 2176 wrote to memory of 4108	2176	cmd.exe	100
PID 2176 wrote to memory of 3684	2176	cmd.exe	101
PID 2176 wrote to memory of 3684	2176	cmd.exe	101
PID 2176 wrote to memory of 3684	2176	cmd.exe	101
PID 2176 wrote to memory of 3328	2176	cmd.exe	102
PID 2176 wrote to memory of 3328	2176	cmd.exe	102
PID 2176 wrote to memory of 3328	2176	cmd.exe	102
PID 2176 wrote to memory of 4460	2176	cmd.exe	103
PID 2176 wrote to memory of 4460	2176	cmd.exe	103
PID 2176 wrote to memory of 4460	2176	cmd.exe	103
PID 2176 wrote to memory of 928	2176	cmd.exe	104
PID 2176 wrote to memory of 928	2176	cmd.exe	104
PID 2176 wrote to memory of 928	2176	cmd.exe	104
PID 2176 wrote to memory of 720	2176	cmd.exe	105
PID 2176 wrote to memory of 720	2176	cmd.exe	105
PID 2176 wrote to memory of 720	2176	cmd.exe	105
PID 2176 wrote to memory of 1560	2176	cmd.exe	106
PID 2176 wrote to memory of 1560	2176	cmd.exe	106
PID 2176 wrote to memory of 1560	2176	cmd.exe	106
PID 2176 wrote to memory of 4520	2176	cmd.exe	107

C:\Users\Admin\AppData\Local\Temp\12276357f43dfa5815029d7bd4774ec73aa02abb3b07f6f3e96c0e4a8b4a9831.exe
"C:\Users\Admin\AppData\Local\Temp\12276357f43dfa5815029d7bd4774ec73aa02abb3b07f6f3e96c0e4a8b4a9831.exe"
1⤵
- Checks computer location settings
- Suspicious use of WriteProcessMemory
PID:3416
- C:\Users\Admin\AppData\Local\Temp\exit.exe
  "C:\Users\Admin\AppData\Local\Temp\exit.exe"
  2⤵
  - Executes dropped EXE
  - Suspicious use of WriteProcessMemory
  PID:4636
- - C:\Windows\SysWOW64\cmd.exe
    cmd.exe /C i.cmd
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:2276
  - - C:\Windows\SysWOW64\PING.EXE
      ping cloudflare.com -n 3 -w 3000
      4⤵
      Runs ping.exe
      PID:4256
  - - C:\Windows\SysWOW64\PING.EXE
      ping cloudflare.com -n 3 -w 3000
      4⤵
      Runs ping.exe
      PID:4776
  - - C:\Users\Admin\AppData\Local\Temp\7zinstall.exe
      7zinstall.exe x -p3KPnoNJ3ReME4bEU5W9APkKS5ErkR3tNRT -y
      4⤵
      Executes dropped EXE
      Checks computer location settings
      Suspicious use of WriteProcessMemory
      PID:4708
    - - C:\ProgramData\Mdayz\exit.exe
        
        "C:\ProgramData\Mdayz\exit.exe"
        5⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4680
      - C:\Windows\SysWOW64\cmd.exe
        
        cmd.exe /C i.cmd
        6⤵
        Suspicious use of WriteProcessMemory
        
        PID:2176
        
        C:\Windows\SysWOW64\reg.exe
        
        REG ADD "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /f /v "Mdayz" /t REG_SZ /d "C:\ProgramData\Mdayz\winserv.exe"
        7⤵
        Adds Run key to start application
        
        PID:4748
        
        C:\ProgramData\Mdayz\winserv.exe
        
        "C:\ProgramData\Mdayz\winserv.exe"
        7⤵
        Executes dropped EXE
        Checks computer location settings
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of AdjustPrivilegeToken
        Suspicious use of SetWindowsHookEx
        
        PID:4696
        
        C:\ProgramData\Mdayz\winserv.exe
        
        C:\ProgramData\Mdayz\winserv.exe -second
        8⤵
        Executes dropped EXE
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of AdjustPrivilegeToken
        Suspicious use of SetWindowsHookEx
        
        PID:2596
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:4652
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1592
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:3196
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:4692
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:4108
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:3684
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:3328
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:4460
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:928
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:720
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1560
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:4520
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1148
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:444
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:3752
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:3204
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        Suspicious use of AdjustPrivilegeToken
        
        PID:4792
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:4372
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:4296
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:2860
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:3764
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:3760
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:612
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:2752
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:3656
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1924
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1468
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:2480
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:3300
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1732
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:2828
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1504
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:4988
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:536
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1756
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:2144
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:4932
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:2808
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:4872
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:4348
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:5048
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:4684
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:4604
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:2432
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:2096
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:4424
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:3472
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:2560
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:2132
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1388
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:2392
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:2440
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        Suspicious use of AdjustPrivilegeToken
        
        PID:3708
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:3932
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:632
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:816
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:2692
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1136
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3120
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3668
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:3988
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3172
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3324
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3776
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3856
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2860
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3848
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4244
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2040
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4532
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:540
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3656
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1584
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1248
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1856
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1432
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2984
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1324
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:372
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2172
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2928
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1496
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:384
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2624
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3112
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:4932
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2844
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3948
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4776
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2276
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1240
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:4620
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2800
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2432
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3936
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4652
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:5116
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3196
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:1428
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:212
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1388
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2392
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3576
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3328
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1036
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:1500
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4888
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1560
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1828
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4436
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4428
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3668
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4240
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3172
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:3324
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3776
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3560
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1492
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:756
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:4860
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3944
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1008
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1016
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1688
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1468
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1000
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2124
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3372
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4848
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4880
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1504
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1816
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1232
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3096
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4048
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2732
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3416
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1236
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2844
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3948
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4776
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2276
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1240
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4620
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2800
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2432
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3936
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4652
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1644
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5076
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4984
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4032
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3140
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2980
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2888
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2848
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1352
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1848
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:748
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3528
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4660
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1164
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:820
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1040
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3204
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4204
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4452
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4208
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3844
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:428
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3892
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2040
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4532
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:540
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3656
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1584
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1248
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3408
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:824
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1732
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4948
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1368
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4644
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2468
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1552
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1756
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:3564
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:912
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2824
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2664
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:8
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4684
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5072
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4760
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:2388
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2800
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2432
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3936
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4652
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1644
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:452
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2132
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2368
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2376
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2224
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2440
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4548
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3784
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1352
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4628
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:748
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3528
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4660
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1164
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:820
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1040
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3204
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4384
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3772
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3560
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1492
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1916
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4860
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3944
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1896
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4148
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1536
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1444
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1976
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:376
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3520
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1456
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3620
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4864
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3100
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4876
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2144
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2624
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3604
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:956
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4932
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3948
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:5048
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2276
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1240
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4708
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1032
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4340
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:4976
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4968
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5100
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:4412
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:116
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4612
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:1388
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3032
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2980
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2888
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2848
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:632
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5112
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1664
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1940
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4492
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3528
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4428
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1920
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4368
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3908
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3868
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3764
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4532
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:992
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2996
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1468
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4592
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3300
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1464
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3956
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2592
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1816
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1232
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3096
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1908
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3112
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5096
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2616
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:956
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4932
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3948
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2840
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4572
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2704
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4388
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3272
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3704
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3472
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3968
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1508
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4516
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2884
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1200
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2392
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4736
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3292
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2436
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1404
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4712
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:608
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4784
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1560
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1132
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:444
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1980
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4504
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1344
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4368
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3908
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:3776
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4216
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:1152
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4064
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1856
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1296
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2168
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1976
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1640
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4880
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1504
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4952
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1512
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5020
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:384
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3564
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3604
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:320
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3188
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2676
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4688
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4604
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2116
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1240
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5068
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1592
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:768
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1752
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4112
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4692
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:1840
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4164
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2420
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2748
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3576
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2412
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3756
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2160
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5024
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:396
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3804
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1812
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3336
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4492
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3528
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4428
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1920
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:796
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3856
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4328
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:776
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3944
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1516
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4064
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1468
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3372
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2828
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1732
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1368
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1816
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1232
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3520
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2732
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:204
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4348
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1448
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4932
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3948
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2840
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4572
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1936
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1556
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2656
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5104
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:768
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3936
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3952
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4692
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1840
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2680
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1388
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3032
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2980
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:2436
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1404
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5024
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4828
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1628
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1828
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3120
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4400
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4240
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4504
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1344
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4368
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3908
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3132
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2192
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:992
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3124
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1000
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4592
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3216
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3956
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3288
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1300
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2468
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4476
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3040
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5096
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1756
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1028
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:320
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4632
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:8
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4684
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2600
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4748
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2096
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4424
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:5068
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1592
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4976
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4112
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1436
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1644
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5076
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2420
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4052
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3328
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4044
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3756
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2160
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1352
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5024
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1912
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1136
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3740
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3120
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4400
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4240
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3812
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4384
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:968
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4216
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2960
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3136
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3500
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4320
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3372
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1976
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4472
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4544
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3620
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4864
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3100
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3096
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:384
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2384
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5108
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3092
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4348
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1448
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4676
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4752
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5072
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4708
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4388
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4352
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2656
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2560
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3196
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:212
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3952
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2884
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3912
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2580
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4724
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3932
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1036
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:632
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4712
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1664
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:4784
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1824
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1560
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1132
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4456
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4000
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4392
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3988
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3680
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1896
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3132
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2192
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:992
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3124
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1000
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4592
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4948
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:372
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4404
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1496
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1552
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3520
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2732
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:3564
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2744
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4008
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4780
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2356
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2824
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5060
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4128
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5048
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4980
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4972
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4264
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3704
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3108
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4968
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1508
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4956
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:116
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2392
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4736
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3292
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:3220
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4272
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:1848
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5112
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3804
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4464
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4784
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1824
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1560
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1132
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4456
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4792
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1932
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2704
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3856
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4920
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2480
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1668
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:824
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:1680
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2984
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3436
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1620
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3956
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4952
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4820
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2788
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2144
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2812
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4876
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2628
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5036
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3092
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2676
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3512
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4744
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2276
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1936
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2096
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:4916
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4964
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5104
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4976
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4112
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4652
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4692
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5076
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2420
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4052
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3328
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2244
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4460
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:3448
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4712
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1664
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4828
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:1096
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4500
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1164
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3528
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4428
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1312
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4504
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:428
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2724
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3856
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4920
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2480
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1668
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:824
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1680
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2984
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1048
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4544
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1512
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4868
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3888
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5028
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2732
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3860
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3632
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4008
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4780
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2616
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1448
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:4676
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4396
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2276
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1936
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2096
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4916
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4964
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1592
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4732
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:452
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1436
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4692
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5076
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2420
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4052
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3328
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2436
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3756
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4940
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1460
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4888
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4628
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1912
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1136
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4436
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3752
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1588
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4000
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4392
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1344
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1924
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1052
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3764
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4532
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1248
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1444
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3344
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2280
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:536
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3620
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4864
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3100
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:308
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2144
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3216
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4876
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2628
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1028
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:320
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4348
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4688
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4604
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4572
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1684
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2184
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5116
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3472
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1428
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:2560
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3196
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:212
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3488
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4612
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4756
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2660
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2224
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4548
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1036
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:632
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1500
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2692
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5024
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1144
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1236
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4520
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3516
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1692
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:3180
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1920
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:796
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:880
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3908
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3944
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1516
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2168
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3408
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1504
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1732
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2300
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:1368
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3768
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1300
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2468
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4476
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2812
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5096
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1756
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2744
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5036
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3092
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2676
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3512
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4744
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4748
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:868
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:4980
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4972
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4264
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3704
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3108
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4968
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1508
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3952
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3824
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:2392
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4736
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3292
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3220
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4272
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:1848
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5112
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3804
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4464
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1144
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1236
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4520
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:3516
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1692
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3180
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1920
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:796
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3680
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2724
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:1696
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1468
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3124
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3300
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:1432
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1732
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2300
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1368
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3760
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:1300
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2468
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:792
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3520
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5064
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:3256
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3188
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4776
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4720
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4740
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2116
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4760
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1556
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2800
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4416
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:768
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3936
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4516
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2132
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3460
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:216
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2376
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3296
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3708
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2888
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1404
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3784
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1352
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5092
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:748
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:1628
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4628
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1096
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4500
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1164
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3528
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4428
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1312
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4504
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4216
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:3132
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2092
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:3856
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4920
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2480
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3408
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:376
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1432
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1732
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2300
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3768
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4820
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1300
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2468
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5108
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3436
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4008
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4780
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:2616
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1448
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4676
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4752
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5072
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1032
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2200
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4340
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2656
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2996
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3936
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4516
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2132
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2680
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1388
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3032
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2980
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4812
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:396
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1940
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:732
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1812
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3336
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4492
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:908
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4628
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1096
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4500
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1164
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3528
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4428
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1312
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4504
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4216
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:1536
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3136
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3500
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1528
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1248
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1976
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4948
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:372
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4880
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3772
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2700
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3112
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5028
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2384
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4884
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5096
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1756
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2744
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1028
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:320
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4740
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5056
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5072
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1032
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2200
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:4340
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2656
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2996
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4112
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1436
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4692
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2748
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3576
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2412
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4736
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3292
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3220
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:928
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:524
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1500
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2692
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4464
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1040
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:2288
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4208
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4384
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:776
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:428
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:1856
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:1776
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:3132
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3136
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3500
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1528
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1248
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2280
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1464
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1732
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2644
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1908
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:1300
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3860
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4884
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4008
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2824
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5060
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2676
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4396
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1240
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2388
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4916
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4056
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3936
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3108
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1508
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3708
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2436
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3220
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:928
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:524
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4492
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:5024
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:908
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1560
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1132
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4208
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4384
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4616
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3680
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1896
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1052
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3764
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3372
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:824
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1456
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1816
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2984
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:372
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4952
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1732
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2644
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1908
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1300
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:2812
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3632
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3256
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1440
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2600
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:320
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4688
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5056
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1684
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2664
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1324
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:452
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4968
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2420
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3328
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2224
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:632
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2244
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2692
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1096
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1560
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1588
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1600
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1920
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1924
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:608
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1856
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1776
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2828
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4920
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1504
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1248
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3288
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1464
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1368
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3888
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4048
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1552
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2384
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5064
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:8
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3188
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3092
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4128
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2116

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k netsvcs -p -s seclogon
1⤵
- Suspicious use of NtCreateUserProcessOtherParentProcess
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:5000

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

T1060

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

Remote System Discovery

T1018

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\ProgramData\Mdayz\exit.exe

Filesize
45KB

MD5
cffbcaeca9db17e38750177db145c36f

SHA1
1bc2fe4610d597578ac9cb9f26c89c33744973b8

SHA256
37c366eb89af2cb3dd992dadf622cee0b48fb1217576bec82bc4fd36859c2638

SHA512
e5fbb005624b2916f77af9ab18abaef2c9a21369e159f18bd12bf7c7ac191b7363919e80169959fc06fa5f2fb50c89a29245ccfcf8e4ab2545be7696e73c6336

Download Submit
C:\ProgramData\Mdayz\exit.exe

Filesize
45KB

MD5
cffbcaeca9db17e38750177db145c36f

SHA1
1bc2fe4610d597578ac9cb9f26c89c33744973b8

SHA256
37c366eb89af2cb3dd992dadf622cee0b48fb1217576bec82bc4fd36859c2638

SHA512
e5fbb005624b2916f77af9ab18abaef2c9a21369e159f18bd12bf7c7ac191b7363919e80169959fc06fa5f2fb50c89a29245ccfcf8e4ab2545be7696e73c6336

Download Submit
C:\ProgramData\Mdayz\i.cmd

Filesize
258B

MD5
8634e4c0115f91bb29abd925c23965cf

SHA1
a311a27fd5d8cb4d3f2623109fd4d383e449044a

SHA256
89c1260653c84f1da18147b9854a9bfa6e336aecdecb419d41e225451bb967f4

SHA512
c0aec422453885310ce64ec959423fe9e2feb95ef1ec4a7ae833298099aab63571184af3267c64b112bbfe859e60a59a2a9ded261154b55d37eb7307d32f922e

Download Submit
C:\ProgramData\Mdayz\settings.dat

Filesize
2KB

MD5
d9b0bfc154f5c3b996e99e2f978674f8

SHA1
b562845f8d23d2d4368ad724ed286ac0d523dd17

SHA256
1bd321bf03265b3b6d24e9c6fcd24ecf28e94eac635d5cf59c158ede5e6dff95

SHA512
ba9d710a77ae9fd64a3bc9ee153d1d6caecffc09f2886156ce2093269052f29c7273488a6a7aef7fbb5e9746b3585bd9279da2aed7a718d5aa12832dd535fe8f

Download Submit
C:\ProgramData\Mdayz\winserv.exe

Filesize
2.7MB

MD5
cf2ab077a46219b6ce4a53517dd489ea

SHA1
651b8d1377910e4728e85dcd231e269313ab9e1d

SHA256
609b0a416f9b16a6df9b967dc32cd739402af31566e019a8fb8abdf3cb573e30

SHA512
53fb1ac822467168ea8e7abdd72c78cdd90070b10773ce8c700c6784ab4cc3a03eb53887d158ce3a27779a5fbcf3300d2ccbedab79a34bfd42ddc91f68dbdad7

Download Submit
C:\ProgramData\Mdayz\winserv.exe

Filesize
2.7MB

MD5
cf2ab077a46219b6ce4a53517dd489ea

SHA1
651b8d1377910e4728e85dcd231e269313ab9e1d

SHA256
609b0a416f9b16a6df9b967dc32cd739402af31566e019a8fb8abdf3cb573e30

SHA512
53fb1ac822467168ea8e7abdd72c78cdd90070b10773ce8c700c6784ab4cc3a03eb53887d158ce3a27779a5fbcf3300d2ccbedab79a34bfd42ddc91f68dbdad7

Download Submit
C:\ProgramData\Mdayz\winserv.exe

Filesize
2.7MB

MD5
cf2ab077a46219b6ce4a53517dd489ea

SHA1
651b8d1377910e4728e85dcd231e269313ab9e1d

SHA256
609b0a416f9b16a6df9b967dc32cd739402af31566e019a8fb8abdf3cb573e30

SHA512
53fb1ac822467168ea8e7abdd72c78cdd90070b10773ce8c700c6784ab4cc3a03eb53887d158ce3a27779a5fbcf3300d2ccbedab79a34bfd42ddc91f68dbdad7

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zinstall.exe

Filesize
2.8MB

MD5
8e768b96d5a94d743033df869569fbf5

SHA1
c538f580eb4edc7d194c6130098efd9ab9ba4fa2

SHA256
06b7348335a8cbb228a7e76c020a8769320cf780d85e4a332520d1a416517ff7

SHA512
1f3033ca18a6c1687dff42ce01f55c002ecc032899b7fc3d35ca538308dcc193a5f9e5a3b7a7d9e69273c080f9a4a8f722d7c7b6332ca2a6e789bfcbbc2ae05b

Download Submit
C:\Users\Admin\AppData\Local\Temp\exit.exe

Filesize
45KB

MD5
cffbcaeca9db17e38750177db145c36f

SHA1
1bc2fe4610d597578ac9cb9f26c89c33744973b8

SHA256
37c366eb89af2cb3dd992dadf622cee0b48fb1217576bec82bc4fd36859c2638

SHA512
e5fbb005624b2916f77af9ab18abaef2c9a21369e159f18bd12bf7c7ac191b7363919e80169959fc06fa5f2fb50c89a29245ccfcf8e4ab2545be7696e73c6336

Download Submit
C:\Users\Admin\AppData\Local\Temp\exit.exe

Filesize
45KB

MD5
cffbcaeca9db17e38750177db145c36f

SHA1
1bc2fe4610d597578ac9cb9f26c89c33744973b8

SHA256
37c366eb89af2cb3dd992dadf622cee0b48fb1217576bec82bc4fd36859c2638

SHA512
e5fbb005624b2916f77af9ab18abaef2c9a21369e159f18bd12bf7c7ac191b7363919e80169959fc06fa5f2fb50c89a29245ccfcf8e4ab2545be7696e73c6336

Download Submit
C:\Users\Admin\AppData\Local\Temp\i.cmd

Filesize
243B

MD5
a09b1fae1a7f4daf463cafea31884641

SHA1
394cd2a82e61affeba132236715737ef0645e901

SHA256
d2d9245a692204edf485353e23043ee7134c5114a7e231ae5d5c41461d38e800

SHA512
8d39b0591415220ea92eba49797cc8af156e76b8b6088fec6ece1d767f5c22f8420cfdf126be41b3c65d8518f1e1cd254968e54297961d8d3704d3ca3d1f199e

Download Submit
C:\Users\Admin\AppData\Local\Temp\syst.dll

Filesize
2.8MB

MD5
8e768b96d5a94d743033df869569fbf5

SHA1
c538f580eb4edc7d194c6130098efd9ab9ba4fa2

SHA256
06b7348335a8cbb228a7e76c020a8769320cf780d85e4a332520d1a416517ff7

SHA512
1f3033ca18a6c1687dff42ce01f55c002ecc032899b7fc3d35ca538308dcc193a5f9e5a3b7a7d9e69273c080f9a4a8f722d7c7b6332ca2a6e789bfcbbc2ae05b

Download Submit
memory/2596-209-0x0000000000400000-0x0000000000E2B000-memory.dmp

Filesize
10.2MB

Download
memory/2596-156-0x0000000000400000-0x0000000000E2B000-memory.dmp

Filesize
10.2MB

Download
memory/4696-155-0x0000000000400000-0x0000000000E2B000-memory.dmp

Filesize
10.2MB

Download
memory/4696-150-0x0000000000400000-0x0000000000E2B000-memory.dmp

Filesize
10.2MB

Download