4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d

Analysis

max time kernel
139s
max time network
125s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
23/05/2024, 19:35

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
Size

24KB
MD5

2b200ec64e40e60e9f6e54e745907285
SHA1

c8d33050958474f21748175d63fc1d4304eaea77
SHA256

4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d
SHA512

ba2bc0fa635b8cda426a9e2c7c79a9c8a1c6d3b1f3e4bb7dba46e22f5b384e489eba96bc3e29c9492622a9b68c8de0b5292b9e995f724a932295ed9190213e9c
SSDEEP

192:urlQjc8ORjQkX33ON6koWXU8i6w4Vgogb1Y2fmO1nD3eWcwQ:iOejk6kRU8i6w4V6Jf/1DuWc

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Kills process with taskkill 64 IoCs

evasion

pid	Process
1796	taskkill.exe
1664	taskkill.exe
2664	Process not Found
1372	Process not Found
2912	Process not Found
836	Process not Found
1636	taskkill.exe
820	taskkill.exe
2804	taskkill.exe
1056	Process not Found
2716	Process not Found
2460	taskkill.exe
2332	taskkill.exe
3012	Process not Found
1220	taskkill.exe
2056	Process not Found
3060	Process not Found
2692	Process not Found
1616	Process not Found
2624	Process not Found
2380	taskkill.exe
1912	taskkill.exe
2572	taskkill.exe
2148	Process not Found
2848	Process not Found
840	taskkill.exe
2444	Process not Found
1608	Process not Found
1544	Process not Found
1780	taskkill.exe
3028	taskkill.exe
2148	Process not Found
1828	Process not Found
1940	taskkill.exe
2204	taskkill.exe
1352	taskkill.exe
1316	Process not Found
2404	Process not Found
532	Process not Found
1712	taskkill.exe
2228	taskkill.exe
2796	taskkill.exe
2484	taskkill.exe
2312	Process not Found
2784	Process not Found
2836	Process not Found
2548	Process not Found
2812	Process not Found
1544	taskkill.exe
3044	Process not Found
536	Process not Found
2132	Process not Found
776	Process not Found
2148	Process not Found
2508	taskkill.exe
848	taskkill.exe
2172	Process not Found
2912	Process not Found
2032	Process not Found
2224	Process not Found
440	taskkill.exe
2728	taskkill.exe
2512	Process not Found
2200	Process not Found

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeDebugPrivilege	2836	taskkill.exe
Token: SeDebugPrivilege	2380	taskkill.exe
Token: SeDebugPrivilege	2520	taskkill.exe
Token: SeDebugPrivilege	2060	taskkill.exe
Token: SeDebugPrivilege	2516	taskkill.exe
Token: SeDebugPrivilege	1820	taskkill.exe
Token: SeDebugPrivilege	1868	taskkill.exe
Token: SeDebugPrivilege	2904	taskkill.exe
Token: SeDebugPrivilege	3032	taskkill.exe
Token: SeDebugPrivilege	1316	taskkill.exe
Token: SeDebugPrivilege	2488	taskkill.exe
Token: SeDebugPrivilege	1628	taskkill.exe
Token: SeDebugPrivilege	1320	taskkill.exe
Token: SeDebugPrivilege	2492	taskkill.exe
Token: SeDebugPrivilege	2960	taskkill.exe
Token: SeDebugPrivilege	764	taskkill.exe
Token: SeDebugPrivilege	1496	taskkill.exe
Token: SeDebugPrivilege	800	taskkill.exe
Token: SeDebugPrivilege	1752	taskkill.exe
Token: SeDebugPrivilege	2392	taskkill.exe
Token: SeDebugPrivilege	1544	taskkill.exe
Token: SeDebugPrivilege	1668	taskkill.exe
Token: SeDebugPrivilege	744	taskkill.exe
Token: SeDebugPrivilege	2928	taskkill.exe
Token: SeDebugPrivilege	1372	taskkill.exe
Token: SeDebugPrivilege	1948	taskkill.exe
Token: SeDebugPrivilege	2052	taskkill.exe
Token: SeDebugPrivilege	1276	taskkill.exe
Token: SeDebugPrivilege	2840	taskkill.exe
Token: SeDebugPrivilege	2932	taskkill.exe
Token: SeDebugPrivilege	2560	taskkill.exe
Token: SeDebugPrivilege	2524	taskkill.exe
Token: SeDebugPrivilege	1976	taskkill.exe
Token: SeDebugPrivilege	2852	taskkill.exe
Token: SeDebugPrivilege	3052	taskkill.exe
Token: SeDebugPrivilege	3056	taskkill.exe
Token: SeDebugPrivilege	1688	taskkill.exe
Token: SeDebugPrivilege	1636	taskkill.exe
Token: SeDebugPrivilege	2708	taskkill.exe
Token: SeDebugPrivilege	2112	taskkill.exe
Token: SeDebugPrivilege	1696	taskkill.exe
Token: SeDebugPrivilege	2616	taskkill.exe
Token: SeDebugPrivilege	1008	taskkill.exe
Token: SeDebugPrivilege	824	taskkill.exe
Token: SeDebugPrivilege	884	taskkill.exe
Token: SeDebugPrivilege	440	taskkill.exe
Token: SeDebugPrivilege	1556	taskkill.exe
Token: SeDebugPrivilege	1676	taskkill.exe
Token: SeDebugPrivilege	904	taskkill.exe
Token: SeDebugPrivilege	2312	taskkill.exe
Token: SeDebugPrivilege	2372	taskkill.exe
Token: SeDebugPrivilege	1500	taskkill.exe
Token: SeDebugPrivilege	2068	taskkill.exe
Token: SeDebugPrivilege	1576	taskkill.exe
Token: SeDebugPrivilege	2380	taskkill.exe
Token: SeDebugPrivilege	2608	taskkill.exe
Token: SeDebugPrivilege	2804	taskkill.exe
Token: SeDebugPrivilege	2060	taskkill.exe
Token: SeDebugPrivilege	2508	taskkill.exe
Token: SeDebugPrivilege	3012	taskkill.exe
Token: SeDebugPrivilege	1868	taskkill.exe
Token: SeDebugPrivilege	3052	taskkill.exe
Token: SeDebugPrivilege	2200	taskkill.exe
Token: SeDebugPrivilege	316	taskkill.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1452 wrote to memory of 1228	1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe	28
PID 1452 wrote to memory of 1228	1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe	28
PID 1452 wrote to memory of 1228	1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe	28
PID 1452 wrote to memory of 1228	1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe	28
PID 1228 wrote to memory of 2836	1228	cmd.exe	30
PID 1228 wrote to memory of 2836	1228	cmd.exe	30
PID 1228 wrote to memory of 2836	1228	cmd.exe	30
PID 1228 wrote to memory of 2836	1228	cmd.exe	30
PID 1452 wrote to memory of 804	1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe	31
PID 1452 wrote to memory of 804	1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe	31
PID 1452 wrote to memory of 804	1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe	31
PID 1452 wrote to memory of 804	1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe	31
PID 804 wrote to memory of 2380	804	cmd.exe	33
PID 804 wrote to memory of 2380	804	cmd.exe	33
PID 804 wrote to memory of 2380	804	cmd.exe	33
PID 804 wrote to memory of 2380	804	cmd.exe	33
PID 1452 wrote to memory of 2668	1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe	35
PID 1452 wrote to memory of 2668	1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe	35
PID 1452 wrote to memory of 2668	1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe	35
PID 1452 wrote to memory of 2668	1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe	35
PID 2668 wrote to memory of 2520	2668	cmd.exe	37
PID 2668 wrote to memory of 2520	2668	cmd.exe	37
PID 2668 wrote to memory of 2520	2668	cmd.exe	37
PID 2668 wrote to memory of 2520	2668	cmd.exe	37
PID 1452 wrote to memory of 2704	1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe	38
PID 1452 wrote to memory of 2704	1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe	38
PID 1452 wrote to memory of 2704	1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe	38
PID 1452 wrote to memory of 2704	1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe	38
PID 2704 wrote to memory of 2060	2704	cmd.exe	40
PID 2704 wrote to memory of 2060	2704	cmd.exe	40
PID 2704 wrote to memory of 2060	2704	cmd.exe	40
PID 2704 wrote to memory of 2060	2704	cmd.exe	40
PID 1452 wrote to memory of 2568	1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe	41
PID 1452 wrote to memory of 2568	1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe	41
PID 1452 wrote to memory of 2568	1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe	41
PID 1452 wrote to memory of 2568	1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe	41
PID 2568 wrote to memory of 2516	2568	cmd.exe	43
PID 2568 wrote to memory of 2516	2568	cmd.exe	43
PID 2568 wrote to memory of 2516	2568	cmd.exe	43
PID 2568 wrote to memory of 2516	2568	cmd.exe	43
PID 1452 wrote to memory of 2532	1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe	44
PID 1452 wrote to memory of 2532	1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe	44
PID 1452 wrote to memory of 2532	1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe	44
PID 1452 wrote to memory of 2532	1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe	44
PID 2532 wrote to memory of 1820	2532	cmd.exe	46
PID 2532 wrote to memory of 1820	2532	cmd.exe	46
PID 2532 wrote to memory of 1820	2532	cmd.exe	46
PID 2532 wrote to memory of 1820	2532	cmd.exe	46
PID 1452 wrote to memory of 2132	1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe	47
PID 1452 wrote to memory of 2132	1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe	47
PID 1452 wrote to memory of 2132	1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe	47
PID 1452 wrote to memory of 2132	1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe	47
PID 2132 wrote to memory of 1868	2132	cmd.exe	49
PID 2132 wrote to memory of 1868	2132	cmd.exe	49
PID 2132 wrote to memory of 1868	2132	cmd.exe	49
PID 2132 wrote to memory of 1868	2132	cmd.exe	49
PID 1452 wrote to memory of 2884	1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe	50
PID 1452 wrote to memory of 2884	1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe	50
PID 1452 wrote to memory of 2884	1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe	50
PID 1452 wrote to memory of 2884	1452	4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe	50
PID 2884 wrote to memory of 2904	2884	cmd.exe	52
PID 2884 wrote to memory of 2904	2884	cmd.exe	52
PID 2884 wrote to memory of 2904	2884	cmd.exe	52
PID 2884 wrote to memory of 2904	2884	cmd.exe	52

C:\Users\Admin\AppData\Local\Temp\4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe
"C:\Users\Admin\AppData\Local\Temp\4f9db0a6ce52f837cd0171054abade751db845445b1cb047e945e01f7e7c197d.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1452
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1228
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:2836
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:804
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:2380
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2668
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:2520
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2704
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:2060
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2568
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:2516
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2532
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:1820
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2132
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:1868
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2884
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:2904
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2908
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:3032
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2716
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:1316
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:756
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:2488
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1980
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:1628
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:328
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:1320
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2256
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:2492
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1972
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:2960
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2268
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:764
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:696
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:1496
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1652
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:800
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1136
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:1752
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2460
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:2392
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1656
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Kills process with taskkill
    - Suspicious use of AdjustPrivilegeToken
    PID:1544
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:932
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:1668
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1724
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:744
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2204
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:2928
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:820
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:1372
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:888
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:1948
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2940
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:2052
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2436
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:1276
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2140
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:2840
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1760
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:2932
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2520
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:2560
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2692
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:2524
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2516
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:1976
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2576
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:2852
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:3016
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:3052
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2892
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:3056
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:3028
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:1688
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2716
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Kills process with taskkill
    - Suspicious use of AdjustPrivilegeToken
    PID:1636
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1448
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:2708
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1860
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:2112
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2084
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:1696
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2072
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:2616
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1272
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:1008
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:532
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:824
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1096
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:884
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1652
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Kills process with taskkill
    - Suspicious use of AdjustPrivilegeToken
    PID:440
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1136
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:1556
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2460
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:1676
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1848
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:904
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1668
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:2312
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:744
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:2372
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2204
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:1500
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1372
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:2068
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1508
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:1576
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1600
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Kills process with taskkill
    - Suspicious use of AdjustPrivilegeToken
    PID:2380
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2640
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:2608
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2140
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:2804
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2788
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:2060
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2936
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:2508
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2692
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:3012
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1976
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:1868
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1684
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:3052
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2988
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:2200
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2584
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:316
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1708
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:336
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2604
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2744
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2244
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2124
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1968
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1912
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2796
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2276
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2256
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1028
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1152
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2012
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:580
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2268
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1220
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1496
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:404
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:836
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2392
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1540
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1748
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Kills process with taskkill
    PID:2460
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2024
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1848
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1660
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1668
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:944
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:744
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:820
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2972
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2236
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2428
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1248
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1508
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1736
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1600
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:804
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2640
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1928
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2688
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2800
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2788
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2528
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2332
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2780
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2692
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2904
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1976
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1916
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1684
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2576
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2988
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1132
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2584
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:900
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2920
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2076
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2604
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1980
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2244
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2376
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1968
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2108
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2960
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2008
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:304
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1480
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2984
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:628
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:580
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1360
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Kills process with taskkill
    PID:1220
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2464
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:404
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1940
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2392
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:904
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1748
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1804
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2024
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2372
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1660
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1952
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1648
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2204
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Kills process with taskkill
    PID:820
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1716
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2236
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2624
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:880
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2608
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1276
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2916
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2600
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2652
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2932
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2540
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2800
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2912
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2520
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2592
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2780
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:844
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2852
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2892
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1916
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2288
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Kills process with taskkill
    PID:2728
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1240
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1132
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1320
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:900
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2112
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2076
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2084
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1980
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1484
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1280
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2072
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2088
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1996
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2008
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:800
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1480
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1780
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:628
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2396
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1360
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1988
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2464
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:852
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Kills process with taskkill
    PID:1940
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:948
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:904
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2272
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1804
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1664
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2372
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1956
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1952
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2228
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2204
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1576
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2408
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2156
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2624
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1756
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2832
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2704
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1760
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1820
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2652
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2512
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2720
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:3004
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2684
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1976
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2592
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2556
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:844
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:236
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:760
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:756
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1040
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2736
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1636
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2056
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1320
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2844
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1448
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2964
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2244
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2796
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:776
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:480
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Kills process with taskkill
    PID:1912
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:340
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1420
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:764
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2168
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:696
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1096
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1812
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1288
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1676
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1264
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2304
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:540
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2496
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1144
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1728
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Kills process with taskkill
    PID:1712
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2972
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2372
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1664
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2068
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2660
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2204
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:3060
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1948
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1048
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2624
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2836
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2784
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1436
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1760
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:700
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2652
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2580
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2540
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2996
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2684
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2896
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2860
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2780
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1944
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2576
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2892
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:236
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1040
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2492
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1636
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1132
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2920
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2120
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1448
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2844
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2244
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1272
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:588
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1280
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2108
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1516
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2012
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:532
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2168
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:836
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Kills process with taskkill
    PID:1780
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:628
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2396
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1796
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1656
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1652
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:540
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:944
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2032
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:904
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2272
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2420
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2372
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2972
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2068
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2040
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1148
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2232
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2828
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2536
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2696
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1248
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1756
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2680
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2600
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2824
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2652
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:3064
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1228
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2560
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2636
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1572
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2484
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2200
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:844
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1708
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1916
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2576
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2728
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2404
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2736
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1636
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2056
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1324
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2944
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1448
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1980
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1964
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2072
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:588
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2088
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1816
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1028
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2012
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1984
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1476
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1096
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:848
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1288
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2572
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1752
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1348
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2004
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2256
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2296
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:948
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1804
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1960
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2128
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1720
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:556
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2408
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1600
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1148
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:832
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1736
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2536
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2380
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1248
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2936
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2704
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2720
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2824
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2532
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:3064
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2692
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2560
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:3068
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:112
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1572
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2200
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2892
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1708
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1860
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:3056
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2124
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2864
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1524
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1636
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2964
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Kills process with taskkill
    PID:2508
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1580
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2544
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1152
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1964
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1792
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1644
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:532
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1420
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1516
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2116
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1556
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1552
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:404
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Kills process with taskkill
    PID:848
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2312
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1748
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:912
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1796
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2028
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2224
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2256
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:932
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1952
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2236
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1648
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1504
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1380
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Kills process with taskkill
    PID:2228
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2232
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Kills process with taskkill
    PID:2204
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2640
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2156
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1736
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1248
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2332
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2672
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2840
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2932
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2636
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2060
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2900
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:3012
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:3048
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1684
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2592
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2556
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2132
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1708
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:316
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:3056
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2064
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2404
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1908
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1808
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2844
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1324
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2964
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2000
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2108
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:304
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2796
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2008
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1704
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1816
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2468
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2012
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2396
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1476
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1096
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1812
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1940
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1748
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1752
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1796
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1712
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1500
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:744
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:932
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2928
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1960
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2372
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2184
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:832
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1048
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1072
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1788
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2140
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2284
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2832
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1248
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2600
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2704
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2800
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2932
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1680
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:3064
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2628
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2560
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:756
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:112
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2904
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2200
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2176
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2872
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2288
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:3036
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2812
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:876
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:536
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1808
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2376
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2508
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2844
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2544
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:776
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:824
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1792
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2008
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1996
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:644
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1704
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2012
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1556
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1552
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2144
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1988
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2220
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2464
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1940
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Kills process with taskkill
    PID:1796
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1000
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2032
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1500
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2256
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:556
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2868
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2804
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:820
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1716
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2228
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1276
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1788
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:404
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2380
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2548
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2916
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2680
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Kills process with taskkill
    PID:2332
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2528
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2996
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1868
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2484
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2692
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1316
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2656
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1944
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1976
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2556
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2892
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2584
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:336
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:3056
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2056
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2404
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2812
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2120
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2604
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1968
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2104
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2000
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:764
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1912
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:824
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Kills process with taskkill
    PID:2796
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1984
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:628
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1220
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1028
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:852
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1084
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2552
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1812
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2304
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Kills process with taskkill
    PID:2572
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2220
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1924
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1712
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1660
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:888
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1372
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2340
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2352
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2868
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:3060
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2040
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1048
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2668
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2408
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1756
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2760
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2676
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1248
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2664
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:3004
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2020
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2712
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2524
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2060
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1868
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:3012
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2696
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:756
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1044
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2200
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2132
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2988
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2584
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:236
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2492
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1240
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1524
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1808
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:980
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2076
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1272
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2544
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1856
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1360
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:328
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1836
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1008
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1816
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2168
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1516
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:540
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2460
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2396
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1988
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2004
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1676
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2572
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1940
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2272
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2296
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2496
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:904
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1952
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2420
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2428
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1928
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2372
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2052
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2040
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1276
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2924
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2784
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1736
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2916
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2832
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2800
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2664
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2600
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2932
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2520
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2060
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:3024
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2628
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1684
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:844
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:3052
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2100
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1320
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1708
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Kills process with taskkill
    PID:3028
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2288
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2064
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2492
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2788
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1132
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1968
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2508
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1700
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2844
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1912
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1856
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:800
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:264
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:884
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:340
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1996
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2884
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2392
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1096
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:836
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:848
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1748
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1544
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1924
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:912
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1660
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:744
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1000
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2940
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2972
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2184
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1504
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2804
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Kills process with taskkill
    PID:840
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2372
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2408
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2232
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2760
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2836
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1248
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2652
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1760
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2824
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2888
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2996
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2540
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:3012
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2900
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2532
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:756
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:3048
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2200
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2696
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2708
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2176
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2872
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:236
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1240
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2288
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:900
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2488
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2376
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2072
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2084
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2096
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:776
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1780
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:264
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2012
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2116
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1476
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:852
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2144
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1496
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1752
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:848
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1652
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2220
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1848
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:912
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:948
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:932
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1952
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Kills process with taskkill
    PID:1664
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1928
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2868
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1604
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Kills process with taskkill
    PID:2804
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2204
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1948
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2536
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2232
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1608
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2548
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2332
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2464
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2148
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:700
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2484
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2996
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1628
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2880
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2580
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:864
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:3052
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:3040
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:336
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2740
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:3036
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2252
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2404
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:876
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2788
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1808
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2944
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2488
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2104
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:3064
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1704
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2096
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:580
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1480
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2268
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:340
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1332
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2884
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2304
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:836
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2572
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1656
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1616
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1136
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2256
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1964
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:608
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1372
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2428
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:820
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2052
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1928
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1072
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2828
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:832
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2204
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2676
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2760
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2720
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1608
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2664
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2688
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2672
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2148
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2560
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1228
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:3044
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1628
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:844
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2860
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:316
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:3052
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2892
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2248
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2100
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:3036
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2812
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:3056
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1132
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2788
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1868
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1280
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1352
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2072
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1516
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:760
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2468
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1780
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1996
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:540
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2716
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1556
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1812
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1676
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1724
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1296
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1136
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2908
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:932
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2256
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:948
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2128
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:696
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1952
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2184
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1048
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1716
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1072
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2372
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2380
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2564
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2924
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2140
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:440
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2020
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2332
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2540
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2524
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1680
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Kills process with taskkill
    PID:2484
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:3012
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2628
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1916
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:864
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:3028
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2588
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2920
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2740
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2176
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:536
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2736
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2812
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2124
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:1272
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:2108
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    PID:2112
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c taskkill /f /im cg_210.exe
  2⤵
  PID:1772
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im cg_210.exe
    3⤵
    - Kills process with taskkill
    PID:1352

C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-158213213279945372-12552248691045269900-1740802778748821950-15058000991305447100"
1⤵
PID:2660

C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-940011838-774684241593830363-2093287919-1412670537130450036815845138431506934932"
1⤵
PID:836

C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-14991014381311801893-1176149512-2135483345-1859386685-1084140036354036831672754226"
1⤵
PID:944

C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "53731514810609375942046729784-9697732041880955185-17936749009530327332123390565"
1⤵
PID:2040

C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "744961842-49176796595061160-17968402131597184898-826794550468057977657986979"
1⤵
PID:2600

C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-197670813901798311476226449-24034266815213789726562035-19383601041329913756"
1⤵
PID:2012

C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-615924616-15527583471750125806-1467539468-18912505471848272692698960823-447223705"
1⤵
PID:2936

C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-21343404811844260358-467244887-2072187491-165611770-1809685747-1912613503-1741603638"
1⤵
PID:2532

C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-158937944518697141841664081681463258753-1626519181191743084726110911979401406"
1⤵
PID:3068

C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "1866721224-1578306351826456631-790428125-202028222111643813391865096661-1061477026"
1⤵
PID:1804

C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "1371778488-873846047-3219435881169151031-13706762716514387561002508447-1440122032"
1⤵
PID:2128

C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-1702269622-1655374396-599440864-91083807210429222012046218007489140541-1081659430"
1⤵
PID:2536

C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "1432490566-15824136531633767728-1562343161-1540574712-738778653-1760312849-785125493"
1⤵
PID:2028

C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-20893382631355390830-209386139222755939-1755718054-6003995991042578281426554050"
1⤵
PID:1648

C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "1713473053-1722057496-23469827291469795-758035636-1115772062-245454531944568319"
1⤵
PID:2064

C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "10472033291679557536-1889804425-1471711376-46052143810672218911057025743269404728"
1⤵
PID:776

C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-71667676713984414743677095941408451754-582574336-199798256612369235311219336500"
1⤵
PID:832

C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-7405118672301609001985225180-1305955775-576951294-258686110-48375957-927356573"
1⤵
PID:2560

C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-168049176413693642221857700925-7060860131007795063-571919187751280370-1455012058"
1⤵
PID:2340

C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "159320802-887373527141292940-748755211-67747828877099502-3951497741801825944"
1⤵
PID:2464

C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "996325780703737183-494398414-99729931718883315591783411223-1485496174-767963710"
1⤵
PID:3056

C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-2101634729-1051812336705898062-1272981041039405537-1818919861658110980-2058373126"
1⤵
PID:980

C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "211136895955123571-945089545503490984-272916202-1229009861-468458655-1681996622"
1⤵
PID:2100

C:\Windows\system32\wbem\WMIADAP.EXE
wmiadap.exe /F /T /R
1⤵
PID:2508

C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-2038619515-20512742841678075349103928579512989510691668103171-47875897-755566550"
1⤵
PID:1924

C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-1928236260-1357065052-207696105989098631503779415282502468-18908305691553114392"
1⤵
PID:2296

C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-19359654521805341725642159025-1067945484320300899-897530696-1145269470-70130047"
1⤵
PID:1000

C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "375747956-1919853175-107298930215004521642051739643124710332-10382337901726704586"
1⤵
PID:1504

C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "982411014562464309-890191299455285167-411571295581020509-139001840-1564642872"
1⤵
PID:2408

C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "55470780020618218431278786983-1071723897-1112618965-1185692240800945707-400958532"
1⤵
PID:2888

C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "7660914101327631812003563093169267430418631370891041356405-498026817-1355068828"
1⤵
PID:2900

C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-627996559912093248-801815153475044932-1846726150755057764-91639757-408450068"
1⤵
PID:2200

C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "7571839151164559096-1383474747-172754714019760593845765622491440338399-1737880550"
1⤵
PID:2872

C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-2096849351-697760340-819240682-330629989-1565013499-109570660213880727571480403314"
1⤵
PID:900

C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "581431008-309465709-174603310121184467532127372927-11134899017524420161879041929"
1⤵
PID:264

C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-6464231239265724-165124759015418702491210586525-1506392560-151170267-194107997"
1⤵
PID:852

C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "485444081413135949-1203828000-1263859914148682658213007378631517986287930876057"
1⤵
PID:848

C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-31322218611550569211981509772-1800537619-1560427996-1311792179205781706437300756"
1⤵
PID:912

C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "1946259701623664669252719720451654089-1977826778-1440813650-664305710792122306"
1⤵
PID:1664

C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-1706662454-11315862681852304664-1889988285973940406-15693590517571086081837964083"
1⤵
PID:2804

C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "6923061561084300554133026375-1338930011-143700361678883263889836009611783332"
1⤵
PID:2232

C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "11443431141402355470-1975566270-14969226311389636415140814631-1116601995-1038264701"
1⤵
PID:2464

C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "26208042418812533417085241492042128261922709908-138583275646796410682072869"
1⤵
PID:2996

C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "11810529891658321206-1452915291-279388718-573293100-293521269561309761949724787"
1⤵
PID:2628

C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-6652769091059873904-1753386602692399-14035948409842708-2106255822-788887321"
1⤵
PID:876

C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "1023992554102174320334410817992458025862435259412738611-1385965754729660063"
1⤵
PID:2488

C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "12877495821061081021352095688-2138500498-2629231571966792244834286909-1813428742"
1⤵
PID:2096

C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-358696433-2098092522-256139100-1009173194-1105502333108849618994214503-596281268"
1⤵
PID:2392

C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "1951133571-1939634140932916960-552340760-743496343-815180660697440209-597358402"
1⤵
PID:2868

C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-1615694531154517681554322584818684084371448285807-20219564931101576007-1292385226"
1⤵
PID:1760

C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-92069683517274183121692087589-17648334782044674188-740005132-1269650500-505146462"
1⤵
PID:2532

C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "14971128-299616419-68461408-198217421-734664611154048585318553720671802014368"
1⤵
PID:236

C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-1300946932-1494244450-1169645051-1481039910-16583246641107737853-5109334551356239505"
1⤵
PID:2252

C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "1929547542-7371211311644964273-447639776590063642-1391376460-1790455653-673740022"
1⤵
PID:1808

C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-1959046337196776327575138463710676946491603335322-18778679671937873684-1577124131"
1⤵
PID:2084

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1720-2-0x00000000774D0000-0x00000000775EF000-memory.dmp

Filesize
1.1MB

Download
memory/1720-3-0x00000000775F0000-0x00000000776EA000-memory.dmp

Filesize
1000KB

Download
memory/1720-5-0x00000000775F0000-0x00000000776EA000-memory.dmp

Filesize
1000KB

Download
memory/1720-4-0x00000000774D0000-0x00000000775EF000-memory.dmp

Filesize
1.1MB

Download