rms | 107de953b02fb0dd7e31a0b618c3748f2c285070577ef1abaabeb30ab3153424

Analysis

max time kernel
186s
max time network
189s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
04-06-2022 12:12

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

107de953b02fb0dd7e31a0b618c3748f2c285070577ef1abaabeb30ab3153424.exe
Size

3.0MB
MD5

9fde87763e721ea2ebdae8aa4c3f6b53
SHA1

4423a6b64b8c483b802065a0d14cb21bbfcd3e2d
SHA256

107de953b02fb0dd7e31a0b618c3748f2c285070577ef1abaabeb30ab3153424
SHA512

de66e9b9c913ac43bd9e42198562d731f57b5ad21abcb679924386ea93030be69864c513aa0b43a2565c785c703f4348273798a4fb1b18e181b884a2f29b9c11

Score

10^/10

rms persistence rat trojan

Malware Config

Signatures

RMS
Remote Manipulator System (RMS) is a remote access tool developed by Russian organization TektonIT.
trojan rat rms

Suspicious use of NtCreateUserProcessOtherParentProcess 1 IoCs

description	pid	Process	procid_target
PID 4848 created 2588	4848	svchost.exe	92

Executes dropped EXE 5 IoCs

pid	Process
4996	exit.exe
4364	uninstall.exe
60	exit.exe
2588	winserv.exe
2860	winserv.exe

Checks computer location settings 2 TTPs 3 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-3751123196-3323558407-1869646069-1000\Control Panel\International\Geo\Nation	107de953b02fb0dd7e31a0b618c3748f2c285070577ef1abaabeb30ab3153424.exe
Key value queried	\REGISTRY\USER\S-1-5-21-3751123196-3323558407-1869646069-1000\Control Panel\International\Geo\Nation	uninstall.exe
Key value queried	\REGISTRY\USER\S-1-5-21-3751123196-3323558407-1869646069-1000\Control Panel\International\Geo\Nation	winserv.exe

Adds Run key to start application 2 TTPs 2 IoCs

persistence

Registry Run Keys / Startup Folder

T1060

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3751123196-3323558407-1869646069-1000\Software\Microsoft\Windows\CurrentVersion\Run	reg.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3751123196-3323558407-1869646069-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Windows Anytime Upgrade = "C:\\ProgramData\\Windows Anytime Upgrade\\winserv.exe"	reg.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

Kills process with taskkill 64 IoCs

evasion

pid	Process
824	taskkill.exe
4468	taskkill.exe
4284	Process not Found
4288	taskkill.exe
3740	taskkill.exe
3004	taskkill.exe
4876	Process not Found
3828	Process not Found
176	Process not Found
4972	taskkill.exe
3104	taskkill.exe
1392	taskkill.exe
5052	taskkill.exe
1780	taskkill.exe
3196	taskkill.exe
1848	taskkill.exe
1152	taskkill.exe
1192	taskkill.exe
4288	taskkill.exe
4076	Process not Found
2188	taskkill.exe
1104	taskkill.exe
3268	taskkill.exe
552	Process not Found
4232	Process not Found
3244	taskkill.exe
1244	taskkill.exe
2728	taskkill.exe
1796	taskkill.exe
3036	Process not Found
3104	taskkill.exe
2516	taskkill.exe
1448	taskkill.exe
3372	taskkill.exe
3240	taskkill.exe
2608	Process not Found
3812	taskkill.exe
3472	taskkill.exe
772	taskkill.exe
2132	taskkill.exe
5000	taskkill.exe
2912	taskkill.exe
2732	Process not Found
5084	taskkill.exe
1728	taskkill.exe
3468	taskkill.exe
3400	taskkill.exe
4860	taskkill.exe
2160	taskkill.exe
4936	taskkill.exe
3344	taskkill.exe
788	taskkill.exe
936	Process not Found
1840	taskkill.exe
2852	taskkill.exe
4032	taskkill.exe
4880	Process not Found
3340	taskkill.exe
4012	taskkill.exe
1412	taskkill.exe
2428	Process not Found
5016	taskkill.exe
2296	taskkill.exe
2184	taskkill.exe

Runs ping.exe 1 TTPs 2 IoCs

Remote System Discovery

T1018

pid	Process
5024	PING.EXE
4404	PING.EXE

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2588	winserv.exe
2588	winserv.exe
2588	winserv.exe
2588	winserv.exe
2588	winserv.exe
2588	winserv.exe
2860	winserv.exe
2860	winserv.exe
2860	winserv.exe
2860	winserv.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeDebugPrivilege	3104	taskkill.exe
Token: SeDebugPrivilege	1744	taskkill.exe
Token: SeDebugPrivilege	316	taskkill.exe
Token: SeDebugPrivilege	2588	winserv.exe
Token: SeDebugPrivilege	1680	taskkill.exe
Token: SeTcbPrivilege	4848	svchost.exe
Token: SeTcbPrivilege	4848	svchost.exe
Token: SeDebugPrivilege	2936	taskkill.exe
Token: SeDebugPrivilege	620	taskkill.exe
Token: SeTakeOwnershipPrivilege	2860	winserv.exe
Token: SeTcbPrivilege	2860	winserv.exe
Token: SeDebugPrivilege	3672	taskkill.exe
Token: SeTcbPrivilege	2860	winserv.exe
Token: SeDebugPrivilege	1564	taskkill.exe
Token: SeDebugPrivilege	1416	taskkill.exe
Token: SeDebugPrivilege	4060	taskkill.exe
Token: SeDebugPrivilege	1616	taskkill.exe
Token: SeDebugPrivilege	4972	taskkill.exe
Token: SeDebugPrivilege	996	taskkill.exe
Token: SeDebugPrivilege	3828	taskkill.exe
Token: SeDebugPrivilege	2428	taskkill.exe
Token: SeDebugPrivilege	3892	taskkill.exe
Token: SeDebugPrivilege	2704	taskkill.exe
Token: SeDebugPrivilege	2188	taskkill.exe
Token: SeDebugPrivilege	1516	taskkill.exe
Token: SeDebugPrivilege	1400	taskkill.exe
Token: SeDebugPrivilege	2276	taskkill.exe
Token: SeDebugPrivilege	2396	taskkill.exe
Token: SeDebugPrivilege	5000	taskkill.exe
Token: SeDebugPrivilege	1880	taskkill.exe
Token: SeDebugPrivilege	1604	taskkill.exe
Token: SeDebugPrivilege	3064	taskkill.exe
Token: SeDebugPrivilege	1452	taskkill.exe
Token: SeDebugPrivilege	2816	taskkill.exe
Token: SeDebugPrivilege	1908	taskkill.exe
Token: SeDebugPrivilege	416	taskkill.exe
Token: SeDebugPrivilege	2324	taskkill.exe
Token: SeDebugPrivilege	4656	taskkill.exe
Token: SeDebugPrivilege	1480	taskkill.exe
Token: SeDebugPrivilege	1376	taskkill.exe
Token: SeDebugPrivilege	4652	taskkill.exe
Token: SeDebugPrivilege	3604	taskkill.exe
Token: SeDebugPrivilege	2716	taskkill.exe
Token: SeDebugPrivilege	2916	taskkill.exe
Token: SeDebugPrivilege	3664	taskkill.exe
Token: SeDebugPrivilege	1676	taskkill.exe
Token: SeDebugPrivilege	4836	taskkill.exe
Token: SeDebugPrivilege	2820	taskkill.exe
Token: SeDebugPrivilege	4476	taskkill.exe
Token: SeDebugPrivilege	3396	taskkill.exe
Token: SeDebugPrivilege	5108	taskkill.exe
Token: SeDebugPrivilege	1992	taskkill.exe
Token: SeDebugPrivilege	4356	taskkill.exe
Token: SeDebugPrivilege	4588	taskkill.exe
Token: SeDebugPrivilege	4544	taskkill.exe
Token: SeDebugPrivilege	2132	taskkill.exe
Token: SeDebugPrivilege	4540	taskkill.exe
Token: SeDebugPrivilege	4340	taskkill.exe
Token: SeDebugPrivilege	960	taskkill.exe
Token: SeDebugPrivilege	536	taskkill.exe
Token: SeDebugPrivilege	1576	taskkill.exe
Token: SeDebugPrivilege	5032	taskkill.exe
Token: SeDebugPrivilege	4140	taskkill.exe
Token: SeDebugPrivilege	3052	taskkill.exe

Suspicious use of SetWindowsHookEx 8 IoCs

pid	Process
2588	winserv.exe
2588	winserv.exe
2588	winserv.exe
2588	winserv.exe
2860	winserv.exe
2860	winserv.exe
2860	winserv.exe
2860	winserv.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 400 wrote to memory of 4996	400	107de953b02fb0dd7e31a0b618c3748f2c285070577ef1abaabeb30ab3153424.exe	81
PID 400 wrote to memory of 4996	400	107de953b02fb0dd7e31a0b618c3748f2c285070577ef1abaabeb30ab3153424.exe	81
PID 400 wrote to memory of 4996	400	107de953b02fb0dd7e31a0b618c3748f2c285070577ef1abaabeb30ab3153424.exe	81
PID 4996 wrote to memory of 3096	4996	exit.exe	83
PID 4996 wrote to memory of 3096	4996	exit.exe	83
PID 4996 wrote to memory of 3096	4996	exit.exe	83
PID 3096 wrote to memory of 5024	3096	cmd.exe	85
PID 3096 wrote to memory of 5024	3096	cmd.exe	85
PID 3096 wrote to memory of 5024	3096	cmd.exe	85
PID 3096 wrote to memory of 4404	3096	cmd.exe	86
PID 3096 wrote to memory of 4404	3096	cmd.exe	86
PID 3096 wrote to memory of 4404	3096	cmd.exe	86
PID 3096 wrote to memory of 4364	3096	cmd.exe	87
PID 3096 wrote to memory of 4364	3096	cmd.exe	87
PID 3096 wrote to memory of 4364	3096	cmd.exe	87
PID 4364 wrote to memory of 60	4364	uninstall.exe	88
PID 4364 wrote to memory of 60	4364	uninstall.exe	88
PID 4364 wrote to memory of 60	4364	uninstall.exe	88
PID 60 wrote to memory of 4336	60	exit.exe	89
PID 60 wrote to memory of 4336	60	exit.exe	89
PID 60 wrote to memory of 4336	60	exit.exe	89
PID 4336 wrote to memory of 4780	4336	cmd.exe	91
PID 4336 wrote to memory of 4780	4336	cmd.exe	91
PID 4336 wrote to memory of 4780	4336	cmd.exe	91
PID 4336 wrote to memory of 2588	4336	cmd.exe	92
PID 4336 wrote to memory of 2588	4336	cmd.exe	92
PID 4336 wrote to memory of 2588	4336	cmd.exe	92
PID 4336 wrote to memory of 3104	4336	cmd.exe	93
PID 4336 wrote to memory of 3104	4336	cmd.exe	93
PID 4336 wrote to memory of 3104	4336	cmd.exe	93
PID 4336 wrote to memory of 1744	4336	cmd.exe	94
PID 4336 wrote to memory of 1744	4336	cmd.exe	94
PID 4336 wrote to memory of 1744	4336	cmd.exe	94
PID 4336 wrote to memory of 316	4336	cmd.exe	95
PID 4336 wrote to memory of 316	4336	cmd.exe	95
PID 4336 wrote to memory of 316	4336	cmd.exe	95
PID 4336 wrote to memory of 1680	4336	cmd.exe	96
PID 4336 wrote to memory of 1680	4336	cmd.exe	96
PID 4336 wrote to memory of 1680	4336	cmd.exe	96
PID 4848 wrote to memory of 2860	4848	svchost.exe	98
PID 4848 wrote to memory of 2860	4848	svchost.exe	98
PID 4848 wrote to memory of 2860	4848	svchost.exe	98
PID 4336 wrote to memory of 2936	4336	cmd.exe	99
PID 4336 wrote to memory of 2936	4336	cmd.exe	99
PID 4336 wrote to memory of 2936	4336	cmd.exe	99
PID 4336 wrote to memory of 620	4336	cmd.exe	100
PID 4336 wrote to memory of 620	4336	cmd.exe	100
PID 4336 wrote to memory of 620	4336	cmd.exe	100
PID 4336 wrote to memory of 3672	4336	cmd.exe	101
PID 4336 wrote to memory of 3672	4336	cmd.exe	101
PID 4336 wrote to memory of 3672	4336	cmd.exe	101
PID 4336 wrote to memory of 1564	4336	cmd.exe	102
PID 4336 wrote to memory of 1564	4336	cmd.exe	102
PID 4336 wrote to memory of 1564	4336	cmd.exe	102
PID 4336 wrote to memory of 1416	4336	cmd.exe	103
PID 4336 wrote to memory of 1416	4336	cmd.exe	103
PID 4336 wrote to memory of 1416	4336	cmd.exe	103
PID 4336 wrote to memory of 4060	4336	cmd.exe	104
PID 4336 wrote to memory of 4060	4336	cmd.exe	104
PID 4336 wrote to memory of 4060	4336	cmd.exe	104
PID 4336 wrote to memory of 1616	4336	cmd.exe	105
PID 4336 wrote to memory of 1616	4336	cmd.exe	105
PID 4336 wrote to memory of 1616	4336	cmd.exe	105
PID 4336 wrote to memory of 4972	4336	cmd.exe	106

C:\Users\Admin\AppData\Local\Temp\107de953b02fb0dd7e31a0b618c3748f2c285070577ef1abaabeb30ab3153424.exe
"C:\Users\Admin\AppData\Local\Temp\107de953b02fb0dd7e31a0b618c3748f2c285070577ef1abaabeb30ab3153424.exe"
1⤵
- Checks computer location settings
- Suspicious use of WriteProcessMemory
PID:400
- C:\Users\Admin\AppData\Local\Temp\exit.exe
  "C:\Users\Admin\AppData\Local\Temp\exit.exe"
  2⤵
  - Executes dropped EXE
  - Suspicious use of WriteProcessMemory
  PID:4996
- - C:\Windows\SysWOW64\cmd.exe
    cmd /c i.cmd
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:3096
  - - C:\Windows\SysWOW64\PING.EXE
      ping www.cloudflare.com -n 3 -w 3000
      4⤵
      Runs ping.exe
      PID:5024
  - - C:\Windows\SysWOW64\PING.EXE
      ping www.cloudflare.com -n 3 -w 1000
      4⤵
      Runs ping.exe
      PID:4404
  - - C:\Users\Admin\AppData\Local\Temp\uninstall.exe
      uninstall.exe x -pQELRatcwbU2EJ5 -y
      4⤵
      Executes dropped EXE
      Checks computer location settings
      Suspicious use of WriteProcessMemory
      PID:4364
    - - C:\ProgramData\Windows Anytime Upgrade\exit.exe
        
        "C:\ProgramData\Windows Anytime Upgrade\exit.exe"
        5⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:60
      - C:\Windows\SysWOW64\cmd.exe
        
        cmd /c i.cmd
        6⤵
        Suspicious use of WriteProcessMemory
        
        PID:4336
        
        C:\Windows\SysWOW64\reg.exe
        
        REG ADD "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /f /v "Windows Anytime Upgrade" /t REG_SZ /d "C:\ProgramData\Windows Anytime Upgrade\winserv.exe"
        7⤵
        Adds Run key to start application
        
        PID:4780
        
        C:\ProgramData\Windows Anytime Upgrade\winserv.exe
        
        "C:\ProgramData\Windows Anytime Upgrade\winserv.exe"
        7⤵
        Executes dropped EXE
        Checks computer location settings
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of AdjustPrivilegeToken
        Suspicious use of SetWindowsHookEx
        
        PID:2588
        
        C:\ProgramData\Windows Anytime Upgrade\winserv.exe
        
        "C:\ProgramData\Windows Anytime Upgrade\winserv.exe" -second
        8⤵
        Executes dropped EXE
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of AdjustPrivilegeToken
        Suspicious use of SetWindowsHookEx
        
        PID:2860
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        Suspicious use of AdjustPrivilegeToken
        
        PID:3104
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1744
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:316
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1680
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:2936
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:620
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:3672
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1564
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1416
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:4060
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1616
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:4972
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:996
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:3828
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:2428
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:3892
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:2704
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        Suspicious use of AdjustPrivilegeToken
        
        PID:2188
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1516
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1400
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:2276
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:2396
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:5000
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1880
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1604
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:3064
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1452
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:2816
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1908
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:416
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:2324
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:4656
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1480
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1376
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:4652
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:3604
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:2716
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:2916
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:3664
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1676
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:4836
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:2820
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:4476
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:3396
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:5108
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1992
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:4356
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:4588
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:4544
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:2132
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:4540
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:4340
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:960
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:536
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:1576
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:5032
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:4140
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:3052
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1680
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2724
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4992
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4824
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3672
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1712
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:3244
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3712
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3360
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1616
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:452
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3812
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3924
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1232
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3696
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4280
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1560
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2188
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1548
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1440
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5028
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4572
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1128
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3580
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1880
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1620
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2152
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1572
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1696
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:776
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:1392
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:464
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:920
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4480
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:976
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2172
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3156
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3604
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4044
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3756
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1780
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4856
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4832
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4776
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5024
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4476
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4360
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4332
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3232
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3536
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3796
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2272
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4544
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:2132
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:636
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3632
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1600
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1472
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:176
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:5052
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1348
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3176
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2452
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3076
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1120
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2400
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:628
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1564
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3376
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3764
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5076
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:1104
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:768
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4284
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3008
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2428
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4076
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4508
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1640
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3468
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1464
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1400
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:468
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:5016
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5000
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2184
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1896
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4664
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4128
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4108
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1692
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3292
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1340
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4800
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4656
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4772
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4648
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3192
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1796
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3364
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3756
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:1780
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4856
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4832
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4776
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5024
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4476
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3396
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1612
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5108
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3232
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3536
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3796
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4368
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1412
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:60
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:3104
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1280
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:116
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:204
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4032
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1132
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2936
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1172
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1168
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1580
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4976
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:5084
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3576
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2056
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2604
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4168
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2904
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4284
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4072
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3892
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3836
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4392
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:2296
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1548
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1360
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2216
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4164
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:456
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1276
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:548
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2876
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2468
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:824
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1696
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3292
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3644
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1480
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1376
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4424
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3940
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3684
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3692
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1972
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:2516
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:4860
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:400
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4420
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4432
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4764
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1020
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3428
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4632
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1436
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3792
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3440
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2272
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4544
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1744
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3352
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4004
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:1448
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2608
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3340
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:620
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4992
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4824
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4900
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1712
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3244
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3712
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3480
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1616
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4168
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2904
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4132
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4072
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3892
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3836
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4392
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2296
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:1244
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2912
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:552
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1128
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1276
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2092
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3728
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3516
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1908
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:976
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:3196
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3192
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2416
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4256
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3004
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4400
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4448
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4472
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4928
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5024
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:852
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2424
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:4288
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2148
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4520
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2248
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:448
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4940
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2852
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1576
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5032
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5092
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4136
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:428
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3108
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2572
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4888
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4828
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1284
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1636
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:628
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1564
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3376
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3764
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1616
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2536
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3716
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1232
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:3740
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:792
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1640
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4344
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5056
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2296
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1360
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2912
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:552
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3500
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1648
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4108
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1848
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3292
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4260
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3372
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4652
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3472
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2916
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1972
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4468
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4860
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:400
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4420
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4404
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4376
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1020
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1700
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4100
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1436
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3792
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3440
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2272
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1412
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4936
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4148
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5052
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1348
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3176
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2608
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3076
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1120
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4992
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3388
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3768
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3628
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3360
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1824
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1104
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:3812
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3924
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3828
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3872
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2704
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4508
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1560
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2188
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1516
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2760
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:468
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4572
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:5000
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1896
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2876
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2620
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4768
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1536
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:976
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2172
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2252
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2960
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2984
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2180
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4396
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4468
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4860
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:400
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4420
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1484
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2368
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2892
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:1728
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2868
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3092
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2116
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4520
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2248
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:532
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5088
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4340
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4880
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1608
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3420
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4004
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1448
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2724
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3340
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:620
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2068
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4976
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3388
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3768
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3628
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3360
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1824
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1104
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3812
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3924
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3828
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3872
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4072
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3892
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:384
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:3468
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1356
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3000
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1244
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2912
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:552
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3500
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1648
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4108
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1848
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1376
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3268
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4424
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2848
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3636
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3756
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1152
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2516
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4836
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5116
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3832
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3656
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1192
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1612
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4356
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2832
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1936
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:2160
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4632
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4584
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4012
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4328
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4364
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:316
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:116
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5092
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4032
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1132
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2936
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1172
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1168
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1248
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:964
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4688
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4060
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4516
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4692
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:452
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:768
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:640
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3760
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3400
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:756
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2732
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:792
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1640
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5036
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1464
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1588
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2276
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4092
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5016
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:456
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1840
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1620
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2816
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:872
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3292
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4260
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3372
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4652
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3472
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2916
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1972
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4436
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4448
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5112
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4432
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:516
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2772
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2368
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2280
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4356
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2832
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1936
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2160
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4100
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1436
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3792
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3144
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3104
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1280
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4140
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3052
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1680
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3524
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3332
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1500
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2664
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3260
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4824
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5084
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:628
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2056
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2604
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:996
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1628
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3800
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4132
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3896
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2316
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2844
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3836
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1532
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:312
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5056
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2296
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1360
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2052
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5016
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:456
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:1840
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3728
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2816
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:872
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3292
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4260
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:3372
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4652
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3472
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2916
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1972
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4436
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1332
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5112
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4432
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:516
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2772
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2368
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2280
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4356
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2832
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1936
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2160
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4100
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4956
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5088
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:4936
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4148
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5052
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1348
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3176
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1448
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2724
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:3340
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3688
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4888
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4828
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4284
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2448
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2304
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1712
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2084
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3928
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3240
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3436
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3760
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:3400
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:756
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4784
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4736
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1640
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1400
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1516
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3028
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4164
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3580
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1604
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1572
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4608
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4384
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3728
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2816
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:872
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3292
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4260
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3372
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4652
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3472
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2916
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1972
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4836
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1332
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4420
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4376
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4444
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1700
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3132
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4044
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3092
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4904
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4520
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3440
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:4012
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4328
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1744
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3352
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1784
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4372
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4136
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2452
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4868
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5040
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1168
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1248
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:964
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3932
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3900
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4972
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2384
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2604
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:996
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2536
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1476
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3868
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4076
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3740
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2844
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3836
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2436
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4344
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1400
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1516
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3028
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4164
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3580
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1604
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1572
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4540
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2324
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3856
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2380
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4648
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3156
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4088
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3036
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3664
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4412
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4832
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4440
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4836
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1484
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1192
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4288
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2716
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1992
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:936
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4500
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4456
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1008
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4584
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3792
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1412
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4364
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:316
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:116
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4004
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1680
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:428
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2936
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1500
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2400
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1168
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:812
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4828
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4060
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4516
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3628
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1712
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2084
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3552
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1628
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:640
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4168
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1232
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1236
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4316
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1504
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1440
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2580
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1292
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4600
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:2184
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:2912
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1632
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3064
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3344
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1620
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:1848
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1376
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3268
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2560
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3364
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4912
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1780
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4856
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3472
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2916
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4488
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4436
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5112
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1188
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2772
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2368
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2280
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4356
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4460
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3092
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2116
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4520
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3440
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2188
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4328
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1744
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3352
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1784
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:788
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3524
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3332
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3656
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5040
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4992
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:360
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1168
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:812
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3888
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3576
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3768
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4972
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1824
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2836
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3928
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:3240
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3436
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3760
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2316
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3880
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2704
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4508
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4120
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5028
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4248
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2296
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:468
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1880
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4184
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3064
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:3344
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1620
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1848
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1376
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:3268
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2560
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3364
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4912
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1780
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4856
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:3472
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2916
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4488
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4436
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5112
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1188
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1696
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2368
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2280
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4356
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1060
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4588
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2248
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4956
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3440
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2188
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4328
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4880
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1608
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1784
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:788
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3524
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3332
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3656
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4884
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4992
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4984
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1248
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4284
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3900
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:916
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3208
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3244
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3480
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4940
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1476
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2428
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3464
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:756
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2316
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3880
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2704
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4508
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4120
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5028
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4248
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2296
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:468
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1880
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1632
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1572
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4540
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1908
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2172
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2380
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4112
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3192
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2416
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4820
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1676
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4396
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:4468
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:436
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2396
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:400
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1020
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2772
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2424
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2892
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2016
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:2728
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4500
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4456
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1008
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4524
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2272
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1472
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:176
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:204
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:116
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4032
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:416
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:788
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3524
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3332
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3348
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1416
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:772
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1168
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1932
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4284
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3900
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:916
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3208
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3244
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3480
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4940
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3896
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4072
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:792
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1560
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1532
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:312
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4344
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1400
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1516
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3028
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5000
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1896
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2092
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3968
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3064
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3344
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1620
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1848
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1376
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3692
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4256
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:3004
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:1152
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3664
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4448
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4860
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5024
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4836
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3396
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:400
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1020
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2772
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2424
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2892
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2016
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4872
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2160
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1436
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4012
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:2852
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1064
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2080
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2108
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4148
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5052
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3352
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4136
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2452
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4480
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2724
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2936
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1500
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3112
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1888
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4232
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:964
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:772
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4900
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4632
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:628
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2056
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:4972
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1616
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:768
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3924
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4340
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:640
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4168
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3892
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2316
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2900
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1692
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5056
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:312
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4344
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1400
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1516
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3028
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5000
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5016
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2940
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2460
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1572
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4384
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3728
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5104
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:1796
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3268
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2560
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3364
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4912
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3664
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4448
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4860
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5024
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4836
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3396
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:1192
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:4288
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2716
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1992
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2832
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1928
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3092
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4100
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4588
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2248
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:420
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:1412
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4936
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2816
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1744
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4372
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1176
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        Kills process with taskkill
        
        PID:4032
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2608
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4852
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2572
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3688
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:5100
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4888
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4104
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4388
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4984
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:4008
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2660
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1932
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3912
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:3764
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1140
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:996
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:2536
        
        C:\Windows\SysWOW64\taskkill.exe
        
        taskkill /f /im "rundll32.exe"
        7⤵
        
        PID:1628

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k netsvcs -p -s seclogon
1⤵
- Suspicious use of NtCreateUserProcessOtherParentProcess
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:4848

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

T1060

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

Remote System Discovery

T1018

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\ProgramData\Windows Anytime Upgrade\exit.exe

Filesize
1KB

MD5
e488decbb44ad1a3430e82b57a70615e

SHA1
df4130c66d988df8154bc1967f650896aa8cd6a1

SHA256
fd701894e7ec8d8319bc9b32bba5892b11bdf608c3d04c2f18eff83419eb6df0

SHA512
b0be330248b893a3ff87807ef802a2b27c03d8f66c357304a6ef5b6911ec5ebabdd5279af9bfb1aad1b312bba7cb4304baf5e242b8b7103af7dcef4ee83bd1a1

Download Submit
C:\ProgramData\Windows Anytime Upgrade\exit.exe

Filesize
1KB

MD5
e488decbb44ad1a3430e82b57a70615e

SHA1
df4130c66d988df8154bc1967f650896aa8cd6a1

SHA256
fd701894e7ec8d8319bc9b32bba5892b11bdf608c3d04c2f18eff83419eb6df0

SHA512
b0be330248b893a3ff87807ef802a2b27c03d8f66c357304a6ef5b6911ec5ebabdd5279af9bfb1aad1b312bba7cb4304baf5e242b8b7103af7dcef4ee83bd1a1

Download Submit
C:\ProgramData\Windows Anytime Upgrade\i.cmd

Filesize
312B

MD5
4957715bbd77615b43f5a409d4687033

SHA1
a8c9a15879c4c23b0710cb39ba902548c2fc4d10

SHA256
4a113391615785f0c4e358938eea2061040941dcd3cb09658d174a60ab683cf1

SHA512
c1b570adf7cd262755051a38437af165a3bfea6a6f50bfc4ca1ac2c72e6b4301133d244f3bc7350ac00cbb89291e4547bcb2194a28d3c25457739be2b69c98be

Download Submit
C:\ProgramData\Windows Anytime Upgrade\settings.dat

Filesize
2KB

MD5
46ff979a07cd2721dc14da7edf386ad7

SHA1
228973c6b1eca31bd453d770abec3302a3ee43fa

SHA256
210bb55664d291d82b94b9cea6fcf41029eded9eca6e7fe7b7d58715407a0703

SHA512
a901adca59f721b83cc1b3345417b6c28b01bd01e5b0c830179f281f9bcf3dcfb2ee7ae40afdcee6f903b7a8d19100af5fc72e402971e83e9d22f5bcb2f4f68f

Download Submit
C:\ProgramData\Windows Anytime Upgrade\winserv.exe

Filesize
2.7MB

MD5
cf2ab077a46219b6ce4a53517dd489ea

SHA1
651b8d1377910e4728e85dcd231e269313ab9e1d

SHA256
609b0a416f9b16a6df9b967dc32cd739402af31566e019a8fb8abdf3cb573e30

SHA512
53fb1ac822467168ea8e7abdd72c78cdd90070b10773ce8c700c6784ab4cc3a03eb53887d158ce3a27779a5fbcf3300d2ccbedab79a34bfd42ddc91f68dbdad7

Download Submit
C:\ProgramData\Windows Anytime Upgrade\winserv.exe

Filesize
2.7MB

MD5
cf2ab077a46219b6ce4a53517dd489ea

SHA1
651b8d1377910e4728e85dcd231e269313ab9e1d

SHA256
609b0a416f9b16a6df9b967dc32cd739402af31566e019a8fb8abdf3cb573e30

SHA512
53fb1ac822467168ea8e7abdd72c78cdd90070b10773ce8c700c6784ab4cc3a03eb53887d158ce3a27779a5fbcf3300d2ccbedab79a34bfd42ddc91f68dbdad7

Download Submit
C:\ProgramData\Windows Anytime Upgrade\winserv.exe

Filesize
2.7MB

MD5
cf2ab077a46219b6ce4a53517dd489ea

SHA1
651b8d1377910e4728e85dcd231e269313ab9e1d

SHA256
609b0a416f9b16a6df9b967dc32cd739402af31566e019a8fb8abdf3cb573e30

SHA512
53fb1ac822467168ea8e7abdd72c78cdd90070b10773ce8c700c6784ab4cc3a03eb53887d158ce3a27779a5fbcf3300d2ccbedab79a34bfd42ddc91f68dbdad7

Download Submit
C:\Users\Admin\AppData\Local\Temp\exit.exe

Filesize
1KB

MD5
e488decbb44ad1a3430e82b57a70615e

SHA1
df4130c66d988df8154bc1967f650896aa8cd6a1

SHA256
fd701894e7ec8d8319bc9b32bba5892b11bdf608c3d04c2f18eff83419eb6df0

SHA512
b0be330248b893a3ff87807ef802a2b27c03d8f66c357304a6ef5b6911ec5ebabdd5279af9bfb1aad1b312bba7cb4304baf5e242b8b7103af7dcef4ee83bd1a1

Download Submit
C:\Users\Admin\AppData\Local\Temp\exit.exe

Filesize
1KB

MD5
e488decbb44ad1a3430e82b57a70615e

SHA1
df4130c66d988df8154bc1967f650896aa8cd6a1

SHA256
fd701894e7ec8d8319bc9b32bba5892b11bdf608c3d04c2f18eff83419eb6df0

SHA512
b0be330248b893a3ff87807ef802a2b27c03d8f66c357304a6ef5b6911ec5ebabdd5279af9bfb1aad1b312bba7cb4304baf5e242b8b7103af7dcef4ee83bd1a1

Download Submit
C:\Users\Admin\AppData\Local\Temp\i.cmd

Filesize
235B

MD5
21a7a58e20a4e24bea27bac7444d5e6c

SHA1
7f03b816cb19ec84514986395f6062a1448fbefc

SHA256
af7e0cec39be8ef5ec6c17ccd4b01d4263eee66305dbc215cf0bdda008e3bf9f

SHA512
817c551ca54adae9609d24ec089e5e74885dde149703f6ab54018b6985ceb57a97f6c5788d8e2b109b8f478bed25d530c6c10497d40571326e95073c1da87691

Download Submit
C:\Users\Admin\AppData\Local\Temp\kernel.dll

Filesize
2.9MB

MD5
9f63ef6993f98ddd56e1e2cdf2d67b27

SHA1
2ec6e958c6e8d0ba8a1682657f57c0c66056ec7e

SHA256
5310c2397ba4c783f7ee9724711a6da9b5c603b5c9781fff3407b46725e338b3

SHA512
ba509a33694b6ef7e5837ea86735ee82c353613c1c7a134a9492fede3b81bedaaf41458c1fbbce77cb1b06b7624f890396df17ff53a57030c1de4b5a585803b4

Download Submit
C:\Users\Admin\AppData\Local\Temp\uninstall.exe

Filesize
2.9MB

MD5
9f63ef6993f98ddd56e1e2cdf2d67b27

SHA1
2ec6e958c6e8d0ba8a1682657f57c0c66056ec7e

SHA256
5310c2397ba4c783f7ee9724711a6da9b5c603b5c9781fff3407b46725e338b3

SHA512
ba509a33694b6ef7e5837ea86735ee82c353613c1c7a134a9492fede3b81bedaaf41458c1fbbce77cb1b06b7624f890396df17ff53a57030c1de4b5a585803b4

Download Submit
memory/2588-155-0x0000000000400000-0x0000000000E2B000-memory.dmp

Filesize
10.2MB

Download
memory/2860-156-0x0000000000400000-0x0000000000E2B000-memory.dmp

Filesize
10.2MB

Download
memory/2860-208-0x0000000000400000-0x0000000000E2B000-memory.dmp

Filesize
10.2MB

Download