9a2a6e29f171357e85f8e28ce5324c2dd2603265bfb5e91faa3164028d1b6846

Analysis

max time kernel
8s
max time network
25s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
11/06/2024, 08:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

Reason

Machine shutdown

General

Target
jre-8u411-windows-any-cpu.exe
Size 348KB
Sample240611-j1jfbazdpd
SHA256 9a2a6e29f171357e85f8e28ce5324c2dd2603265bfb5e91faa3164028d1b6846
MD5 41a0869c7f66610995d939d4173c2ee4
SHA1 1977fb6d25be844b25cee5b79a6283c129119519
SHA512 78aa392e8eb5217db0d2201074ab4f876267551c8538bd495e8d471a0e18e3f58e59d4c56e2d740cd6ab41b063168f33fa1e6b87fbe23fefcc8a1bfabc875c43
SSDEEP 6144:ykiaui+L99PmvirP2wqdccEeEfT6f39n30NznWQXgIv:yrlrPmKGLn3ezz3v
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

persistence

Malware Config

Signatures

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-3558294865-3673844354-2255444939-1000\Control Panel\International\Geo\Nation	jre-8u411-windows-any-cpu.exe

Executes dropped EXE 1 IoCs

pid	Process
1136	jusched.exe

Adds Run key to start application 2 TTPs 2 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-3558294865-3673844354-2255444939-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Java Update Scheduler = "\"C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jusched.exe\" .."	jusched.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\Java Update Scheduler = "\"C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jusched.exe\" .."	jusched.exe

Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs

Web Service

T1102

flow	ioc
3	0.tcp.eu.ngrok.io
6	0.tcp.eu.ngrok.io

Drops file in Program Files directory 1 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe	jre-8u411-windows-any-cpu.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Program crash 1 IoCs

pid	pid_target	Process	procid_target
7628	1136	WerFault.exe	87

Creates scheduled task(s) 1 TTPs 64 IoCs

Schtasks is often used by malware for persistence or to perform post-infection execution.

persistence

Scheduled Task/Job

T1053

pid	Process
4244	schtasks.exe
4160	schtasks.exe
7332	schtasks.exe
3932	schtasks.exe
10332	schtasks.exe
9712	schtasks.exe
13640	schtasks.exe
4480	schtasks.exe
4808	schtasks.exe
10268	schtasks.exe
14540	schtasks.exe
14052	schtasks.exe
1932	schtasks.exe
2364	schtasks.exe
10432	schtasks.exe
4456	schtasks.exe
9860	schtasks.exe
14432	schtasks.exe
3288	schtasks.exe
4452	schtasks.exe
9788	schtasks.exe
5340	schtasks.exe
692	schtasks.exe
11544	schtasks.exe
13736	schtasks.exe
14192	schtasks.exe
4584	schtasks.exe
1396	schtasks.exe
4284	schtasks.exe
5220	schtasks.exe
9732	schtasks.exe
7244	schtasks.exe
820	schtasks.exe
5020	schtasks.exe
1776	schtasks.exe
5156	schtasks.exe
4072	schtasks.exe
4592	schtasks.exe
14176	schtasks.exe
14492	schtasks.exe
14032	schtasks.exe
2312	schtasks.exe
8332	schtasks.exe
4424	schtasks.exe
4284	schtasks.exe
9436	schtasks.exe
15384	schtasks.exe
14556	schtasks.exe
5032	schtasks.exe
9944	schtasks.exe
9820	schtasks.exe
9360	schtasks.exe
1960	schtasks.exe
10484	schtasks.exe
14272	schtasks.exe
14380	schtasks.exe
2248	schtasks.exe
8292	schtasks.exe
1520	schtasks.exe
15140	schtasks.exe
2332	schtasks.exe
3092	schtasks.exe
9936	schtasks.exe
5472	schtasks.exe

Kills process with taskkill 1 IoCs

evasion

pid	Process
1476	taskkill.exe

Suspicious behavior: EnumeratesProcesses 50 IoCs

pid	Process
1136	jusched.exe
1136	jusched.exe
1136	jusched.exe
1136	jusched.exe
1136	jusched.exe
1136	jusched.exe
1136	jusched.exe
1136	jusched.exe
1136	jusched.exe
1136	jusched.exe
1136	jusched.exe
1136	jusched.exe
1136	jusched.exe
1136	jusched.exe
1136	jusched.exe
1136	jusched.exe
1136	jusched.exe
1136	jusched.exe
1136	jusched.exe
1136	jusched.exe
1136	jusched.exe
1136	jusched.exe
1136	jusched.exe
1136	jusched.exe
1136	jusched.exe
1136	jusched.exe
1136	jusched.exe
1136	jusched.exe
1136	jusched.exe
1136	jusched.exe
1136	jusched.exe
1136	jusched.exe
1136	jusched.exe
1136	jusched.exe
1136	jusched.exe
1136	jusched.exe
1136	jusched.exe
1136	jusched.exe
1136	jusched.exe
1136	jusched.exe
1136	jusched.exe
1136	jusched.exe
1136	jusched.exe
1136	jusched.exe
1136	jusched.exe
1136	jusched.exe
1136	jusched.exe
1136	jusched.exe
1136	jusched.exe
1136	jusched.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeDebugPrivilege	1136	jusched.exe
Token: SeDebugPrivilege	1476	taskkill.exe
Token: 33	1136	jusched.exe
Token: SeIncBasePriorityPrivilege	1136	jusched.exe
Token: 33	1136	jusched.exe
Token: SeIncBasePriorityPrivilege	1136	jusched.exe
Token: 33	1136	jusched.exe
Token: SeIncBasePriorityPrivilege	1136	jusched.exe
Token: 33	1136	jusched.exe
Token: SeIncBasePriorityPrivilege	1136	jusched.exe
Token: 33	1136	jusched.exe
Token: SeIncBasePriorityPrivilege	1136	jusched.exe
Token: 33	1136	jusched.exe
Token: SeIncBasePriorityPrivilege	1136	jusched.exe
Token: 33	1136	jusched.exe
Token: SeIncBasePriorityPrivilege	1136	jusched.exe
Token: 33	1136	jusched.exe
Token: SeIncBasePriorityPrivilege	1136	jusched.exe
Token: 33	1136	jusched.exe
Token: SeIncBasePriorityPrivilege	1136	jusched.exe
Token: 33	1136	jusched.exe
Token: SeIncBasePriorityPrivilege	1136	jusched.exe
Token: 33	1136	jusched.exe
Token: SeIncBasePriorityPrivilege	1136	jusched.exe
Token: 33	1136	jusched.exe
Token: SeIncBasePriorityPrivilege	1136	jusched.exe
Token: 33	1136	jusched.exe
Token: SeIncBasePriorityPrivilege	1136	jusched.exe
Token: 33	1136	jusched.exe
Token: SeIncBasePriorityPrivilege	1136	jusched.exe
Token: 33	1136	jusched.exe
Token: SeIncBasePriorityPrivilege	1136	jusched.exe
Token: 33	1136	jusched.exe
Token: SeIncBasePriorityPrivilege	1136	jusched.exe
Token: 33	1136	jusched.exe
Token: SeIncBasePriorityPrivilege	1136	jusched.exe
Token: 33	1136	jusched.exe
Token: SeIncBasePriorityPrivilege	1136	jusched.exe
Token: 33	1136	jusched.exe
Token: SeIncBasePriorityPrivilege	1136	jusched.exe
Token: 33	1136	jusched.exe
Token: SeIncBasePriorityPrivilege	1136	jusched.exe
Token: 33	1136	jusched.exe
Token: SeIncBasePriorityPrivilege	1136	jusched.exe
Token: 33	1136	jusched.exe
Token: SeIncBasePriorityPrivilege	1136	jusched.exe
Token: 33	1136	jusched.exe
Token: SeIncBasePriorityPrivilege	1136	jusched.exe
Token: 33	1136	jusched.exe
Token: SeIncBasePriorityPrivilege	1136	jusched.exe
Token: 33	1136	jusched.exe
Token: SeIncBasePriorityPrivilege	1136	jusched.exe
Token: 33	1136	jusched.exe
Token: SeIncBasePriorityPrivilege	1136	jusched.exe
Token: 33	1136	jusched.exe
Token: SeIncBasePriorityPrivilege	1136	jusched.exe
Token: 33	1136	jusched.exe
Token: SeIncBasePriorityPrivilege	1136	jusched.exe
Token: 33	1136	jusched.exe
Token: SeIncBasePriorityPrivilege	1136	jusched.exe
Token: 33	1136	jusched.exe
Token: SeIncBasePriorityPrivilege	1136	jusched.exe
Token: 33	1136	jusched.exe
Token: SeIncBasePriorityPrivilege	1136	jusched.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4988 wrote to memory of 1136	4988	jre-8u411-windows-any-cpu.exe	87
PID 4988 wrote to memory of 1136	4988	jre-8u411-windows-any-cpu.exe	87
PID 4988 wrote to memory of 1136	4988	jre-8u411-windows-any-cpu.exe	87
PID 1136 wrote to memory of 2248	1136	jusched.exe	949
PID 1136 wrote to memory of 2248	1136	jusched.exe	949
PID 1136 wrote to memory of 2248	1136	jusched.exe	949
PID 1136 wrote to memory of 1672	1136	jusched.exe	1052
PID 1136 wrote to memory of 1672	1136	jusched.exe	1052
PID 1136 wrote to memory of 1672	1136	jusched.exe	1052
PID 2248 wrote to memory of 1476	2248	cmd.exe	91
PID 2248 wrote to memory of 1476	2248	cmd.exe	91
PID 2248 wrote to memory of 1476	2248	cmd.exe	91
PID 1136 wrote to memory of 2652	1136	jusched.exe	93
PID 1136 wrote to memory of 2652	1136	jusched.exe	93
PID 1136 wrote to memory of 2652	1136	jusched.exe	93
PID 1136 wrote to memory of 1932	1136	jusched.exe	94
PID 1136 wrote to memory of 1932	1136	jusched.exe	94
PID 1136 wrote to memory of 1932	1136	jusched.exe	94
PID 1136 wrote to memory of 1164	1136	jusched.exe	95
PID 1136 wrote to memory of 1164	1136	jusched.exe	95
PID 1136 wrote to memory of 1164	1136	jusched.exe	95
PID 1136 wrote to memory of 4512	1136	jusched.exe	96
PID 1136 wrote to memory of 4512	1136	jusched.exe	96
PID 1136 wrote to memory of 4512	1136	jusched.exe	96
PID 1136 wrote to memory of 2312	1136	jusched.exe	98
PID 1136 wrote to memory of 2312	1136	jusched.exe	98
PID 1136 wrote to memory of 2312	1136	jusched.exe	98
PID 1136 wrote to memory of 4872	1136	jusched.exe	99
PID 1136 wrote to memory of 4872	1136	jusched.exe	99
PID 1136 wrote to memory of 4872	1136	jusched.exe	99
PID 1136 wrote to memory of 4564	1136	jusched.exe	100
PID 1136 wrote to memory of 4564	1136	jusched.exe	100
PID 1136 wrote to memory of 4564	1136	jusched.exe	100
PID 1136 wrote to memory of 3092	1136	jusched.exe	102
PID 1136 wrote to memory of 3092	1136	jusched.exe	102
PID 1136 wrote to memory of 3092	1136	jusched.exe	102
PID 1136 wrote to memory of 3932	1136	jusched.exe	104
PID 1136 wrote to memory of 3932	1136	jusched.exe	104
PID 1136 wrote to memory of 3932	1136	jusched.exe	104
PID 1136 wrote to memory of 4552	1136	jusched.exe	105
PID 1136 wrote to memory of 4552	1136	jusched.exe	105
PID 1136 wrote to memory of 4552	1136	jusched.exe	105
PID 1136 wrote to memory of 4840	1136	jusched.exe	106
PID 1136 wrote to memory of 4840	1136	jusched.exe	106
PID 1136 wrote to memory of 4840	1136	jusched.exe	106
PID 1136 wrote to memory of 4500	1136	jusched.exe	108
PID 1136 wrote to memory of 4500	1136	jusched.exe	108
PID 1136 wrote to memory of 4500	1136	jusched.exe	108
PID 1136 wrote to memory of 1140	1136	jusched.exe	109
PID 1136 wrote to memory of 1140	1136	jusched.exe	109
PID 1136 wrote to memory of 1140	1136	jusched.exe	109
PID 1136 wrote to memory of 5044	1136	jusched.exe	1036
PID 1136 wrote to memory of 5044	1136	jusched.exe	1036
PID 1136 wrote to memory of 5044	1136	jusched.exe	1036
PID 1136 wrote to memory of 2664	1136	jusched.exe	111
PID 1136 wrote to memory of 2664	1136	jusched.exe	111
PID 1136 wrote to memory of 2664	1136	jusched.exe	111
PID 1136 wrote to memory of 2376	1136	jusched.exe	112
PID 1136 wrote to memory of 2376	1136	jusched.exe	112
PID 1136 wrote to memory of 2376	1136	jusched.exe	112
PID 1136 wrote to memory of 1776	1136	jusched.exe	113
PID 1136 wrote to memory of 1776	1136	jusched.exe	113
PID 1136 wrote to memory of 1776	1136	jusched.exe	113
PID 1136 wrote to memory of 2996	1136	jusched.exe	114

C:\Users\Admin\AppData\Local\Temp\jre-8u411-windows-any-cpu.exe
"C:\Users\Admin\AppData\Local\Temp\jre-8u411-windows-any-cpu.exe"
1⤵
- Checks computer location settings
- Drops file in Program Files directory
- Suspicious use of WriteProcessMemory
PID:4988
- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
  "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
  2⤵
  - Executes dropped EXE
  - Adds Run key to start application
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of WriteProcessMemory
  PID:1136
- - C:\Windows\SysWOW64\cmd.exe
    cmd.exe /c taskkill /f /im Taskmgr.exe
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:2248
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im Taskmgr.exe
      4⤵
      Kills process with taskkill
      Suspicious use of AdjustPrivilegeToken
      PID:1476
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:1672
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:2652
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:1932
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:1164
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:4512
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:2312
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:4872
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:4564
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:3092
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:3932
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:4552
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:4840
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:4500
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:1140
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:5044
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:2664
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:2376
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:1776
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:2996
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:400
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:5052
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:4464
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:2300
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:4592
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:1960
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:3180
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:4048
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:5104
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:4808
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:2136
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:4168
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:4940
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:4264
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:876
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:3156
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:4300
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:228
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:4556
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:2964
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:536
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:4740
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:4244
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:4364
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:5004
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:320
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:5032
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:1180
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:4800
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:3348
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:1584
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:3288
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:3608
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:4072
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:2040
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:3992
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:4284
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:736
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:2500
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:1664
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:2880
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:4424
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:4916
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:1688
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:692
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:1952
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:3572
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:3828
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:5020
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:64
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:4600
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:1368
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:3976
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:4160
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:1964
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:1436
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:4456
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:5116
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:4052
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:5080
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:1520
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:720
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:1396
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:4452
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:1780
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:2364
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:4480
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:4628
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:4656
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:1696
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:3372
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:5084
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:820
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:3240
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:652
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:2468
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:4984
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:628
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:3944
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:4904
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:5024
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:5340
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:5636
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:5648
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:5708
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:5748
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:5780
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:5796
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:5808
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:5832
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:1232
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:3160
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:1512
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:544
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:5412
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:4960
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:1184
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:6356
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:6364
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:6372
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:6384
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:6396
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:6412
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:6420
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:6436
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:6444
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:6452
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:6464
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:6472
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:6484
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:6492
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:6500
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:6512
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:6676
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:6700
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:6712
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:6720
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:6740
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:6748
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:6756
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:6764
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:6780
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:6788
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:6808
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:7128
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:5188
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:6104
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:4308
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:5540
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:5556
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:4864
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:5128
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:1892
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:5568
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:956
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:5828
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:6288
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:7172
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:7188
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:7204
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:7212
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:7228
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:7236
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:7244
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:7260
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:7268
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:7276
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:7284
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:7292
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:7300
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:7308
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:7316
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:7324
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:7332
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:7340
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:7348
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:7980
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:8236
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:8244
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:8252
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:8260
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:8268
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:8276
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:8284
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:8292
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:8300
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:8316
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:8324
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:8332
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:8340
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:8348
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:8356
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:8364
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:8372
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:8380
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:8388
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:8776
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:8784
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:9172
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:9276
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:9636
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:9644
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:9656
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:9664
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:9684
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:9696
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:9704
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:9712
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:9720
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:9732
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:9740
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:9748
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:9756
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:9772
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:9780
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:9788
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:9796
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:9804
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:9812
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:9820
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:9828
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:9840
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:9860
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:9868
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:9876
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:9888
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:9896
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:9904
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:9916
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:9924
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:9936
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:9944
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:9956
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:9964
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:9972
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:9980
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:8932
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:8940
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:8568
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:8640
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:9260
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:8844
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:9436
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:10260
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:10268
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:10276
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:10284
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:10292
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:10300
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:10312
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:10324
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:10332
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:10344
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:10352
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:10364
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:10380
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:10392
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:10400
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:10412
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:10424
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:10432
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:10444
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:10452
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:10460
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:10468
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:10476
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:10484
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:10492
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:10500
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:10508
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:10516
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:10524
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:10532
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:10540
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:10548
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:10564
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:10580
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:10996
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:11204
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:11212
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:11220
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:11228
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:11236
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:11244
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:11252
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:8948
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:11516
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:11524
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:11532
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:11544
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:11552
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:11564
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:11576
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:11584
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:11892
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:11904
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:11912
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:11176
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:12536
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:12856
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:12988
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:12920
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:13464
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:13540
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:13556
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:13724
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:13736
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:13744
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:13752
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:13760
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:13768
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:13780
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:13788
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:13800
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:13808
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:13816
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:13828
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:13836
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:13844
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:13852
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:13860
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:13868
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:13948
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:13956
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:13964
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:13980
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:13996
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:14024
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:14032
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:14052
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:14060
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:14076
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:14088
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:14096
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:14112
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:14128
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:14136
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:14144
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:14160
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:14168
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:14176
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:14184
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:14192
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:14216
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:14224
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:14232
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:14244
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:14252
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:14260
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:14272
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:14280
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:14296
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:14304
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:14316
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:14324
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:14332
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:4832
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:3856
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:2892
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:3424
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:4884
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:5384
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:2332
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:2808
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:4072
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:9360
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:8656
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:2984
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:13620
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:14340
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:14348
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:14364
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:14372
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:14380
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:14388
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:14404
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:14412
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:14420
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:14436
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:14444
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:14460
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:14472
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:14484
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:14492
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:14500
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:14508
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:14516
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:14532
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:14540
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:14556
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:14564
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:14580
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:14588
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:14604
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:14612
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:14628
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:14812
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:15140
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:400
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:6016
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:6012
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:5472
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:14044
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:14688
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:15384
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:16164
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:15348
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:4368
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:14432
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:4548
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:10908
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:14156
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:15604
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:10116
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:14528
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:5592
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:3556
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:16392
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:16760
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:16800
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:16900
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:17020
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:17088
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:17124
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:17200
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:17268
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:13120
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:4240
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:5884
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:6140
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:4284
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:2248
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:4896
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:3456
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:5992
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:5968
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:14004
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:13592
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:13708
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:4812
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:13932
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:13640
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:13576
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:5052
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:2272
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:12560
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:4160
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:12440
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:13652
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:5764
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:5208
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:6136
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:5880
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:5936
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:5464
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:5220
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:3180
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:3564
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:2480
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:4820
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:6020
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:6268
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:4584
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:5432
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:3400
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:5812
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:1816
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:6316
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:16836
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:6828
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:13648
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:4380
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:5044
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 1136 -s 1748
    3⤵
    - Program crash
    PID:7628
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    - Creates scheduled task(s)
    PID:5156
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:5452
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:6540
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:5048
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:1436
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /SC ONLOGON /TN "Java Update Scheduler" /TR "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" /F
    3⤵
    PID:6964

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 1136 -ip 1136
1⤵
PID:3852

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 648 -p 10912 -ip 10912
1⤵
PID:1696

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 528 -p 7292 -ip 7292
1⤵
PID:5672

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 8176 -s 484
1⤵
PID:1672

C:\Windows\system32\dwm.exe
"dwm.exe"
1⤵
PID:5760

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

T1053

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Scheduled Task/Job

T1053

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Scheduled Task/Job

T1053

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

jusched.exe

Path C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
Size 159KB
SHA256 ae0f10749b4bf089f9a437b06b1ef7a4174269a6cd17aba9257822f24a726d27
MD5 7f6968c67914ea2746ede5699f64ef85
SHA1 1d6d26c3bc9399238186141f016bf7658c6c10a5
SHA512 944adbe07ab7b4c1f602640a04da18c95bfd857e1d3c87b3bdb42c9e28d2f2784e49d72946482814bb408cf8db881dee3224047bc62768a85670733e23eaa7ab
SSDEEP 3072:PAFpU1N4i5s4GUzA0UKXfXngejxjB5aN/hiuySzMavXu68jSP7M9:IzU1JIF0UKPNVQaupzlvXu68jSY
MD5 SHA1 SHA512 SSDEEP

Submit Download

memory/1136-22-0x00000000752C0000-0x0000000075A70000-memory.dmp

Download

memory/1136-21-0x00000000752C0000-0x0000000075A70000-memory.dmp

Download

memory/1136-20-0x0000000000400000-0x000000000042E000-memory.dmp

Download

memory/3572-24-0x000000006FE10000-0x000000006FE8D000-memory.dmp

Download

memory/4988-4-0x0000000004A70000-0x0000000004B02000-memory.dmp

Download

memory/4988-6-0x0000000005280000-0x00000000052D6000-memory.dmp

Download

memory/4988-7-0x00000000752C0000-0x0000000075A70000-memory.dmp

Download

memory/4988-8-0x00000000061C0000-0x000000000620E000-memory.dmp

Download

memory/4988-5-0x0000000004B90000-0x0000000004B9A000-memory.dmp

Download

memory/4988-0-0x00000000752CE000-0x00000000752CF000-memory.dmp

Download

memory/4988-3-0x0000000004BE0000-0x0000000005184000-memory.dmp

Download

memory/4988-2-0x0000000004990000-0x0000000004A2C000-memory.dmp

Download

memory/4988-1-0x0000000000400000-0x000000000045E000-memory.dmp

Download

memory/5748-25-0x000000006FE10000-0x000000006FE8D000-memory.dmp

Download

memory/6500-27-0x00000000000D0000-0x0000000000102000-memory.dmp

Download

Analysis

Sharing

Errors

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads