4e58629158a6c46ad420f729330030f5e0b0ef374e9bb24cd203c89ec3262669

Resubmissions

10/10/2025, 03:46

251010-ebn72ser2z10

06/07/2024, 07:41

240706-jjfcbstcph10

Analysis

max time kernel
106s
max time network
50s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
06/07/2024, 07:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
4e58629158a6c46ad420f729330030f5e0b0ef374e9bb24cd203c89ec3262669.exe
Size 1.4MB
Sample240706-jjfcbstcph
SHA256 4e58629158a6c46ad420f729330030f5e0b0ef374e9bb24cd203c89ec3262669
MD5 d919e343301c46db373a0694d25a0feb
SHA1 ae92b5a4e618747b2d84cf39e826efb9fbaffefc
SHA512 fdd273b3bbfcc7bad1b9ff3dc3b04e8fc7f45d502143bde795fce4c20d0fc78feac364c852d2e5a795e7f25320a19abc2f4575624e20c124e367c1cadde8a6a8
SSDEEP 24576:8lwasdNc5lRNAY6gaAkWCnjrWBGfAklJkR3KvRQT90z:5UAY6gaAkWCnjr4GfAklJk7T90
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Kills process with taskkill 64 IoCs

evasion

pid	Process
540	taskkill.exe
1368	Process not Found
2448	taskkill.exe
2748	taskkill.exe
4340	taskkill.exe
928	Process not Found
2864	taskkill.exe
4656	taskkill.exe
3308	Process not Found
1060	Process not Found
3012	taskkill.exe
1936	Process not Found
4344	Process not Found
3032	Process not Found
908	Process not Found
4560	taskkill.exe
4640	taskkill.exe
5024	taskkill.exe
2660	Process not Found
808	Process not Found
2728	Process not Found
2080	Process not Found
940	taskkill.exe
2860	taskkill.exe
4616	taskkill.exe
3208	Process not Found
4248	Process not Found
3532	Process not Found
4004	taskkill.exe
4108	taskkill.exe
3536	Process not Found
5048	taskkill.exe
4088	Process not Found
1068	taskkill.exe
2516	taskkill.exe
2308	Process not Found
3688	Process not Found
1840	Process not Found
5048	Process not Found
1088	Process not Found
644	taskkill.exe
3380	Process not Found
2864	Process not Found
4296	Process not Found
3932	taskkill.exe
5024	Process not Found
1468	Process not Found
1912	taskkill.exe
1164	taskkill.exe
4032	taskkill.exe
1524	taskkill.exe
4080	Process not Found
2080	Process not Found
4364	taskkill.exe
5092	taskkill.exe
4428	Process not Found
908	Process not Found
624	taskkill.exe
4928	taskkill.exe
2692	taskkill.exe
4048	Process not Found
4972	Process not Found
3928	Process not Found
4444	Process not Found

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeDebugPrivilege	2556	taskkill.exe
Token: SeDebugPrivilege	2164	taskkill.exe
Token: SeDebugPrivilege	4936	taskkill.exe
Token: SeDebugPrivilege	3012	taskkill.exe
Token: SeDebugPrivilege	1468	taskkill.exe
Token: SeDebugPrivilege	3080	taskkill.exe
Token: SeDebugPrivilege	3092	taskkill.exe
Token: SeDebugPrivilege	1208	taskkill.exe
Token: SeDebugPrivilege	4024	taskkill.exe
Token: SeDebugPrivilege	4860	taskkill.exe
Token: SeDebugPrivilege	1592	taskkill.exe
Token: SeDebugPrivilege	32	taskkill.exe
Token: SeDebugPrivilege	3772	taskkill.exe
Token: SeDebugPrivilege	4872	taskkill.exe
Token: SeDebugPrivilege	2104	taskkill.exe
Token: SeDebugPrivilege	3024	taskkill.exe
Token: SeDebugPrivilege	812	taskkill.exe
Token: SeDebugPrivilege	4020	taskkill.exe
Token: SeDebugPrivilege	876	taskkill.exe
Token: SeDebugPrivilege	4584	taskkill.exe
Token: SeDebugPrivilege	2056	taskkill.exe
Token: SeDebugPrivilege	3144	taskkill.exe
Token: SeDebugPrivilege	2500	taskkill.exe
Token: SeDebugPrivilege	3748	taskkill.exe
Token: SeDebugPrivilege	3548	taskkill.exe
Token: SeDebugPrivilege	1912	taskkill.exe
Token: SeDebugPrivilege	624	taskkill.exe
Token: SeDebugPrivilege	1068	taskkill.exe
Token: SeDebugPrivilege	4328	taskkill.exe
Token: SeDebugPrivilege	2556	taskkill.exe
Token: SeDebugPrivilege	4572	taskkill.exe
Token: SeDebugPrivilege	4204	taskkill.exe
Token: SeDebugPrivilege	1396	taskkill.exe
Token: SeDebugPrivilege	2316	taskkill.exe
Token: SeDebugPrivilege	4652	taskkill.exe
Token: SeDebugPrivilege	4988	taskkill.exe
Token: SeDebugPrivilege	4340	taskkill.exe
Token: SeDebugPrivilege	4420	taskkill.exe
Token: SeDebugPrivilege	4040	taskkill.exe
Token: SeDebugPrivilege	4860	taskkill.exe
Token: SeDebugPrivilege	4944	taskkill.exe
Token: SeDebugPrivilege	612	taskkill.exe
Token: SeDebugPrivilege	5016	taskkill.exe
Token: SeDebugPrivilege	2468	taskkill.exe
Token: SeDebugPrivilege	1928	taskkill.exe
Token: SeDebugPrivilege	1640	taskkill.exe
Token: SeDebugPrivilege	3484	taskkill.exe
Token: SeDebugPrivilege	4672	taskkill.exe
Token: SeDebugPrivilege	3004	taskkill.exe
Token: SeDebugPrivilege	2180	taskkill.exe
Token: SeDebugPrivilege	5100	taskkill.exe
Token: SeDebugPrivilege	5044	taskkill.exe
Token: SeDebugPrivilege	3208	taskkill.exe
Token: SeDebugPrivilege	1080	taskkill.exe
Token: SeDebugPrivilege	4996	taskkill.exe
Token: SeDebugPrivilege	2456	taskkill.exe
Token: SeDebugPrivilege	3360	taskkill.exe
Token: SeDebugPrivilege	1816	taskkill.exe
Token: SeDebugPrivilege	2804	taskkill.exe
Token: SeDebugPrivilege	4428	taskkill.exe
Token: SeDebugPrivilege	2068	taskkill.exe
Token: SeDebugPrivilege	468	taskkill.exe
Token: SeDebugPrivilege	4296	taskkill.exe
Token: SeDebugPrivilege	3996	taskkill.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2324 wrote to memory of 4820	2324	4e58629158a6c46ad420f729330030f5e0b0ef374e9bb24cd203c89ec3262669.exe	82
PID 2324 wrote to memory of 4820	2324	4e58629158a6c46ad420f729330030f5e0b0ef374e9bb24cd203c89ec3262669.exe	82
PID 4820 wrote to memory of 1352	4820	cmd.exe	83
PID 4820 wrote to memory of 1352	4820	cmd.exe	83
PID 1352 wrote to memory of 2556	1352	cmd.exe	84
PID 1352 wrote to memory of 2556	1352	cmd.exe	84
PID 2324 wrote to memory of 3372	2324	4e58629158a6c46ad420f729330030f5e0b0ef374e9bb24cd203c89ec3262669.exe	86
PID 2324 wrote to memory of 3372	2324	4e58629158a6c46ad420f729330030f5e0b0ef374e9bb24cd203c89ec3262669.exe	86
PID 3372 wrote to memory of 4448	3372	cmd.exe	87
PID 3372 wrote to memory of 4448	3372	cmd.exe	87
PID 4448 wrote to memory of 2164	4448	cmd.exe	88
PID 4448 wrote to memory of 2164	4448	cmd.exe	88
PID 2324 wrote to memory of 1692	2324	4e58629158a6c46ad420f729330030f5e0b0ef374e9bb24cd203c89ec3262669.exe	89
PID 2324 wrote to memory of 1692	2324	4e58629158a6c46ad420f729330030f5e0b0ef374e9bb24cd203c89ec3262669.exe	89
PID 1692 wrote to memory of 2996	1692	cmd.exe	90
PID 1692 wrote to memory of 2996	1692	cmd.exe	90
PID 2996 wrote to memory of 4936	2996	cmd.exe	91
PID 2996 wrote to memory of 4936	2996	cmd.exe	91
PID 2324 wrote to memory of 60	2324	4e58629158a6c46ad420f729330030f5e0b0ef374e9bb24cd203c89ec3262669.exe	92
PID 2324 wrote to memory of 60	2324	4e58629158a6c46ad420f729330030f5e0b0ef374e9bb24cd203c89ec3262669.exe	92
PID 60 wrote to memory of 4468	60	cmd.exe	93
PID 60 wrote to memory of 4468	60	cmd.exe	93
PID 4468 wrote to memory of 3012	4468	cmd.exe	94
PID 4468 wrote to memory of 3012	4468	cmd.exe	94
PID 2324 wrote to memory of 3796	2324	4e58629158a6c46ad420f729330030f5e0b0ef374e9bb24cd203c89ec3262669.exe	95
PID 2324 wrote to memory of 3796	2324	4e58629158a6c46ad420f729330030f5e0b0ef374e9bb24cd203c89ec3262669.exe	95
PID 3796 wrote to memory of 4652	3796	cmd.exe	96
PID 3796 wrote to memory of 4652	3796	cmd.exe	96
PID 4652 wrote to memory of 1468	4652	cmd.exe	97
PID 4652 wrote to memory of 1468	4652	cmd.exe	97
PID 2324 wrote to memory of 2844	2324	4e58629158a6c46ad420f729330030f5e0b0ef374e9bb24cd203c89ec3262669.exe	98
PID 2324 wrote to memory of 2844	2324	4e58629158a6c46ad420f729330030f5e0b0ef374e9bb24cd203c89ec3262669.exe	98
PID 2844 wrote to memory of 2156	2844	cmd.exe	99
PID 2844 wrote to memory of 2156	2844	cmd.exe	99
PID 2156 wrote to memory of 3080	2156	cmd.exe	100
PID 2156 wrote to memory of 3080	2156	cmd.exe	100
PID 2324 wrote to memory of 952	2324	4e58629158a6c46ad420f729330030f5e0b0ef374e9bb24cd203c89ec3262669.exe	101
PID 2324 wrote to memory of 952	2324	4e58629158a6c46ad420f729330030f5e0b0ef374e9bb24cd203c89ec3262669.exe	101
PID 952 wrote to memory of 3288	952	cmd.exe	102
PID 952 wrote to memory of 3288	952	cmd.exe	102
PID 3288 wrote to memory of 3092	3288	cmd.exe	103
PID 3288 wrote to memory of 3092	3288	cmd.exe	103
PID 2324 wrote to memory of 3472	2324	4e58629158a6c46ad420f729330030f5e0b0ef374e9bb24cd203c89ec3262669.exe	104
PID 2324 wrote to memory of 3472	2324	4e58629158a6c46ad420f729330030f5e0b0ef374e9bb24cd203c89ec3262669.exe	104
PID 3472 wrote to memory of 1788	3472	cmd.exe	105
PID 3472 wrote to memory of 1788	3472	cmd.exe	105
PID 1788 wrote to memory of 1208	1788	cmd.exe	106
PID 1788 wrote to memory of 1208	1788	cmd.exe	106
PID 2324 wrote to memory of 3552	2324	4e58629158a6c46ad420f729330030f5e0b0ef374e9bb24cd203c89ec3262669.exe	107
PID 2324 wrote to memory of 3552	2324	4e58629158a6c46ad420f729330030f5e0b0ef374e9bb24cd203c89ec3262669.exe	107
PID 3552 wrote to memory of 4028	3552	cmd.exe	108
PID 3552 wrote to memory of 4028	3552	cmd.exe	108
PID 4028 wrote to memory of 4024	4028	cmd.exe	109
PID 4028 wrote to memory of 4024	4028	cmd.exe	109
PID 2324 wrote to memory of 5080	2324	4e58629158a6c46ad420f729330030f5e0b0ef374e9bb24cd203c89ec3262669.exe	110
PID 2324 wrote to memory of 5080	2324	4e58629158a6c46ad420f729330030f5e0b0ef374e9bb24cd203c89ec3262669.exe	110
PID 5080 wrote to memory of 4032	5080	cmd.exe	111
PID 5080 wrote to memory of 4032	5080	cmd.exe	111
PID 4032 wrote to memory of 4860	4032	cmd.exe	112
PID 4032 wrote to memory of 4860	4032	cmd.exe	112
PID 2324 wrote to memory of 640	2324	4e58629158a6c46ad420f729330030f5e0b0ef374e9bb24cd203c89ec3262669.exe	113
PID 2324 wrote to memory of 640	2324	4e58629158a6c46ad420f729330030f5e0b0ef374e9bb24cd203c89ec3262669.exe	113
PID 640 wrote to memory of 3016	640	cmd.exe	114
PID 640 wrote to memory of 3016	640	cmd.exe	114

C:\Users\Admin\AppData\Local\Temp\4e58629158a6c46ad420f729330030f5e0b0ef374e9bb24cd203c89ec3262669.exe
"C:\Users\Admin\AppData\Local\Temp\4e58629158a6c46ad420f729330030f5e0b0ef374e9bb24cd203c89ec3262669.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2324
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im ccflic0.exe /f
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:4820
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im ccflic0.exe /f
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:1352
  - - C:\Windows\system32\taskkill.exe
      taskkill /im ccflic0.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:2556
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im ccflic4.exe /f
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:3372
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im ccflic4.exe /f
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:4448
  - - C:\Windows\system32\taskkill.exe
      taskkill /im ccflic4.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:2164
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im healthservice.exe /f
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1692
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im healthservice.exe /f
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:2996
  - - C:\Windows\system32\taskkill.exe
      taskkill /im healthservice.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:4936
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im ilicensesvc.exe /f
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:60
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im ilicensesvc.exe /f
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:4468
  - - C:\Windows\system32\taskkill.exe
      taskkill /im ilicensesvc.exe /f
      4⤵
      Kills process with taskkill
      Suspicious use of AdjustPrivilegeToken
      PID:3012
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im nimbus.exe /f
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:3796
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im nimbus.exe /f
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:4652
  - - C:\Windows\system32\taskkill.exe
      taskkill /im nimbus.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:1468
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im prlicensemgr.exe /f
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2844
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im prlicensemgr.exe /f
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:2156
  - - C:\Windows\system32\taskkill.exe
      taskkill /im prlicensemgr.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:3080
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im certificateprovider.exe /f
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:952
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im certificateprovider.exe /f
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:3288
  - - C:\Windows\system32\taskkill.exe
      taskkill /im certificateprovider.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:3092
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im proficypublisherservice.exe /f
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:3472
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im proficypublisherservice.exe /f
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:1788
  - - C:\Windows\system32\taskkill.exe
      taskkill /im proficypublisherservice.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:1208
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im proficysts.exe /f
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:3552
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im proficysts.exe /f
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:4028
  - - C:\Windows\system32\taskkill.exe
      taskkill /im proficysts.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:4024
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im erlsrv.exe /f
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:5080
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im erlsrv.exe /f
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:4032
  - - C:\Windows\system32\taskkill.exe
      taskkill /im erlsrv.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:4860
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im vmtoolsd.exe /f
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:640
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im vmtoolsd.exe /f
    3⤵
    PID:3016
  - - C:\Windows\system32\taskkill.exe
      taskkill /im vmtoolsd.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:1592
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im managementagenthost.exe /f
  2⤵
  PID:5068
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im managementagenthost.exe /f
    3⤵
    PID:2064
  - - C:\Windows\system32\taskkill.exe
      taskkill /im managementagenthost.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:32
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im vgauthservice.exe /f
  2⤵
  PID:3828
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im vgauthservice.exe /f
    3⤵
    PID:3420
  - - C:\Windows\system32\taskkill.exe
      taskkill /im vgauthservice.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:3772
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im epmd.exe /f
  2⤵
  PID:3876
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im epmd.exe /f
    3⤵
    PID:2468
  - - C:\Windows\system32\taskkill.exe
      taskkill /im epmd.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:4872
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im hasplmv.exe /f
  2⤵
  PID:2192
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im hasplmv.exe /f
    3⤵
    PID:1928
  - - C:\Windows\system32\taskkill.exe
      taskkill /im hasplmv.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:2104
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im spooler.exe /f
  2⤵
  PID:1392
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im spooler.exe /f
    3⤵
    PID:1640
  - - C:\Windows\system32\taskkill.exe
      taskkill /im spooler.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:3024
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im hdb.exe /f
  2⤵
  PID:2624
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im hdb.exe /f
    3⤵
    PID:4520
  - - C:\Windows\system32\taskkill.exe
      taskkill /im hdb.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:812
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im ntservices.exe /f
  2⤵
  PID:3464
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im ntservices.exe /f
    3⤵
    PID:4512
  - - C:\Windows\system32\taskkill.exe
      taskkill /im ntservices.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:4020
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im nexe /f
  2⤵
  PID:1608
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im nexe /f
    3⤵
    PID:4288
  - - C:\Windows\system32\taskkill.exe
      taskkill /im nexe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:876
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im monitoringhost.exe /f
  2⤵
  PID:3744
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im monitoringhost.exe /f
    3⤵
    PID:972
  - - C:\Windows\system32\taskkill.exe
      taskkill /im monitoringhost.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:4584
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im win32sysinfo.exe /f
  2⤵
  PID:2360
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im win32sysinfo.exe /f
    3⤵
    PID:5088
  - - C:\Windows\system32\taskkill.exe
      taskkill /im win32sysinfo.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:2056
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im inet_gethost.exe /f
  2⤵
  PID:956
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im inet_gethost.exe /f
    3⤵
    PID:4376
  - - C:\Windows\system32\taskkill.exe
      taskkill /im inet_gethost.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:3144
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im taskhostw.exe /f
  2⤵
  PID:768
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im taskhostw.exe /f
    3⤵
    PID:1080
  - - C:\Windows\system32\taskkill.exe
      taskkill /im taskhostw.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:2500
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im proficy administrator.exe /f
  2⤵
  PID:908
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im proficy administrator.exe /f
    3⤵
    PID:2684
  - - C:\Windows\system32\taskkill.exe
      taskkill /im proficy administrator.exe /f
      4⤵
      PID:1784
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im ntevl.exe /f
  2⤵
  PID:2376
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im ntevl.exe /f
    3⤵
    PID:3968
  - - C:\Windows\system32\taskkill.exe
      taskkill /im ntevl.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:3748
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im prproficymgr.exe /f
  2⤵
  PID:2664
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im prproficymgr.exe /f
    3⤵
    PID:3360
  - - C:\Windows\system32\taskkill.exe
      taskkill /im prproficymgr.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:3548
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im prrds.exe /f
  2⤵
  PID:4400
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im prrds.exe /f
    3⤵
    PID:4004
  - - C:\Windows\system32\taskkill.exe
      taskkill /im prrds.exe /f
      4⤵
      Kills process with taskkill
      Suspicious use of AdjustPrivilegeToken
      PID:1912
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im prrouter.exe /f
  2⤵
  PID:2832
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im prrouter.exe /f
    3⤵
    PID:3260
  - - C:\Windows\system32\taskkill.exe
      taskkill /im prrouter.exe /f
      4⤵
      Kills process with taskkill
      Suspicious use of AdjustPrivilegeToken
      PID:624
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im prconfigmgr.exe /f
  2⤵
  PID:4428
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im prconfigmgr.exe /f
    3⤵
    PID:4848
  - - C:\Windows\system32\taskkill.exe
      taskkill /im prconfigmgr.exe /f
      4⤵
      Kills process with taskkill
      Suspicious use of AdjustPrivilegeToken
      PID:1068
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im prgateway.exe /f
  2⤵
  PID:2364
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im prgateway.exe /f
    3⤵
    PID:816
  - - C:\Windows\system32\taskkill.exe
      taskkill /im prgateway.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:4328
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im premailengine.exe /f
  2⤵
  PID:1164
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im premailengine.exe /f
    3⤵
    PID:4452
  - - C:\Windows\system32\taskkill.exe
      taskkill /im premailengine.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:2556
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im pralarmmgr.exe /f
  2⤵
  PID:4864
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im pralarmmgr.exe /f
    3⤵
    PID:3148
  - - C:\Windows\system32\taskkill.exe
      taskkill /im pralarmmgr.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:4572
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im prftpengine.exe /f
  2⤵
  PID:928
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im prftpengine.exe /f
    3⤵
    PID:3372
  - - C:\Windows\system32\taskkill.exe
      taskkill /im prftpengine.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:4204
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im prcalculationmgr.exe /f
  2⤵
  PID:4832
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im prcalculationmgr.exe /f
    3⤵
    PID:5060
  - - C:\Windows\system32\taskkill.exe
      taskkill /im prcalculationmgr.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:1396
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im prprintserver.exe /f
  2⤵
  PID:1536
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im prprintserver.exe /f
    3⤵
    PID:2960
  - - C:\Windows\system32\taskkill.exe
      taskkill /im prprintserver.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:2316
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im prdatabasemgr.exe /f
  2⤵
  PID:1736
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im prdatabasemgr.exe /f
    3⤵
    PID:1468
  - - C:\Windows\system32\taskkill.exe
      taskkill /im prdatabasemgr.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:4652
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im preventmgr.exe /f
  2⤵
  PID:756
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im preventmgr.exe /f
    3⤵
    PID:840
  - - C:\Windows\system32\taskkill.exe
      taskkill /im preventmgr.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:4988
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im prreader.exe /f
  2⤵
  PID:4244
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im prreader.exe /f
    3⤵
    PID:3724
  - - C:\Windows\system32\taskkill.exe
      taskkill /im prreader.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:4340
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im prwriter.exe /f
  2⤵
  PID:4152
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im prwriter.exe /f
    3⤵
    PID:2208
  - - C:\Windows\system32\taskkill.exe
      taskkill /im prwriter.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:4420
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im prsummarymgr.exe /f
  2⤵
  PID:3472
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im prsummarymgr.exe /f
    3⤵
    PID:3740
  - - C:\Windows\system32\taskkill.exe
      taskkill /im prsummarymgr.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:4040
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im prstubber.exe /f
  2⤵
  PID:4352
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im prstubber.exe /f
    3⤵
    PID:4100
  - - C:\Windows\system32\taskkill.exe
      taskkill /im prstubber.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:4860
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im prschedulemgr.exe /f
  2⤵
  PID:1564
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im prschedulemgr.exe /f
    3⤵
    PID:4184
  - - C:\Windows\system32\taskkill.exe
      taskkill /im prschedulemgr.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:4944
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im cdm.exe /f
  2⤵
  PID:228
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im cdm.exe /f
    3⤵
    PID:1280
  - - C:\Windows\system32\taskkill.exe
      taskkill /im cdm.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:612
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im musnotificationux.exe /f
  2⤵
  PID:4160
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im musnotificationux.exe /f
    3⤵
    PID:4852
  - - C:\Windows\system32\taskkill.exe
      taskkill /im musnotificationux.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:5016
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im npmdagent.exe /f
  2⤵
  PID:1832
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im npmdagent.exe /f
    3⤵
    PID:2128
  - - C:\Windows\system32\taskkill.exe
      taskkill /im npmdagent.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:2468
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im client64.exe /f
  2⤵
  PID:4856
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im client64.exe /f
    3⤵
    PID:2104
  - - C:\Windows\system32\taskkill.exe
      taskkill /im client64.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:1928
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im keysvc.exe /f
  2⤵
  PID:3928
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im keysvc.exe /f
    3⤵
    PID:3128
  - - C:\Windows\system32\taskkill.exe
      taskkill /im keysvc.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:1640
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im server_eventlog.exe /f
  2⤵
  PID:2464
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im server_eventlog.exe /f
    3⤵
    PID:428
  - - C:\Windows\system32\taskkill.exe
      taskkill /im server_eventlog.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:3484
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im proficyserver.exe /f
  2⤵
  PID:1620
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im proficyserver.exe /f
    3⤵
    PID:4904
  - - C:\Windows\system32\taskkill.exe
      taskkill /im proficyserver.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:4672
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im server_runtime.exe /f
  2⤵
  PID:2072
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im server_runtime.exe /f
    3⤵
    PID:2008
  - - C:\Windows\system32\taskkill.exe
      taskkill /im server_runtime.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:3004
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im config_api_service.exe /f
  2⤵
  PID:2172
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im config_api_service.exe /f
    3⤵
    PID:3248
  - - C:\Windows\system32\taskkill.exe
      taskkill /im config_api_service.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:2180
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im fnplicensingservice.exe /f
  2⤵
  PID:2604
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im fnplicensingservice.exe /f
    3⤵
    PID:4884
  - - C:\Windows\system32\taskkill.exe
      taskkill /im fnplicensingservice.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:5100
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im workflowresttest.exe /f
  2⤵
  PID:540
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im workflowresttest.exe /f
    3⤵
    PID:3356
  - - C:\Windows\system32\taskkill.exe
      taskkill /im workflowresttest.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:5044
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im proficyclient.exe4 /f
  2⤵
  PID:2828
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im proficyclient.exe4 /f
    3⤵
    PID:2816
  - - C:\Windows\system32\taskkill.exe
      taskkill /im proficyclient.exe4 /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:3208
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im vmacthlp.exe /f
  2⤵
  PID:4256
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im vmacthlp.exe /f
    3⤵
    PID:2500
  - - C:\Windows\system32\taskkill.exe
      taskkill /im vmacthlp.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:1080
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im msdtssrvr.exe /f
  2⤵
  PID:3988
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im msdtssrvr.exe /f
    3⤵
    PID:3904
  - - C:\Windows\system32\taskkill.exe
      taskkill /im msdtssrvr.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:4996
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im sqlservr.exe /f
  2⤵
  PID:1576
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im sqlservr.exe /f
    3⤵
    PID:2296
  - - C:\Windows\system32\taskkill.exe
      taskkill /im sqlservr.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:2456
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im msmdsrv.exe /f
  2⤵
  PID:2228
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im msmdsrv.exe /f
    3⤵
    PID:3548
  - - C:\Windows\system32\taskkill.exe
      taskkill /im msmdsrv.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:3360
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im reportingservicesservice.exe /f
  2⤵
  PID:5036
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im reportingservicesservice.exe /f
    3⤵
    PID:5020
  - - C:\Windows\system32\taskkill.exe
      taskkill /im reportingservicesservice.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:1816
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im dsmcsvc.exe /f
  2⤵
  PID:820
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im dsmcsvc.exe /f
    3⤵
    PID:404
  - - C:\Windows\system32\taskkill.exe
      taskkill /im dsmcsvc.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:2804
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im winvnc4.exe /f
  2⤵
  PID:1580
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im winvnc4.exe /f
    3⤵
    PID:4524
  - - C:\Windows\system32\taskkill.exe
      taskkill /im winvnc4.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:4428
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im client.exe /f
  2⤵
  PID:816
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im client.exe /f
    3⤵
    PID:2364
  - - C:\Windows\system32\taskkill.exe
      taskkill /im client.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:2068
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im collwrap.exe /f
  2⤵
  PID:4452
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im collwrap.exe /f
    3⤵
    PID:1164
  - - C:\Windows\system32\taskkill.exe
      taskkill /im collwrap.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:468
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im bluestripecollector.exe /f
  2⤵
  PID:3148
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im bluestripecollector.exe /f
    3⤵
    PID:4864
  - - C:\Windows\system32\taskkill.exe
      taskkill /im bluestripecollector.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:4296
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im sqlbrowser.exe /f
  2⤵
  PID:3372
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im sqlbrowser.exe /f
    3⤵
    PID:928
  - - C:\Windows\system32\taskkill.exe
      taskkill /im sqlbrowser.exe /f
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:3996
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im dsmcad.exe /f
  2⤵
  PID:5060
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im dsmcad.exe /f
    3⤵
    PID:4832
  - - C:\Windows\system32\taskkill.exe
      taskkill /im dsmcad.exe /f
      4⤵
      PID:4116
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im nimcluster.exe /f
  2⤵
  PID:2960
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im nimcluster.exe /f
    3⤵
    PID:1536
  - - C:\Windows\system32\taskkill.exe
      taskkill /im nimcluster.exe /f
      4⤵
      PID:3352
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im googleupdate.exe /f
  2⤵
  PID:1468
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im googleupdate.exe /f
    3⤵
    PID:2844
  - - C:\Windows\system32\taskkill.exe
      taskkill /im googleupdate.exe /f
      4⤵
      PID:1408
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im smc.exe /f
  2⤵
  PID:696
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im smc.exe /f
    3⤵
    PID:1952
  - - C:\Windows\system32\taskkill.exe
      taskkill /im smc.exe /f
      4⤵
      PID:4340
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im bcrservice.exe /f
  2⤵
  PID:4244
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im bcrservice.exe /f
    3⤵
    PID:1788
  - - C:\Windows\system32\taskkill.exe
      taskkill /im bcrservice.exe /f
      4⤵
      PID:4420
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im dbsrv9.exe /f
  2⤵
  PID:3552
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im dbsrv9.exe /f
    3⤵
    PID:4828
  - - C:\Windows\system32\taskkill.exe
      taskkill /im dbsrv9.exe /f
      4⤵
      PID:4992
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im rtvscan.exe /f
  2⤵
  PID:4364
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im rtvscan.exe /f
    3⤵
    PID:2524
  - - C:\Windows\system32\taskkill.exe
      taskkill /im rtvscan.exe /f
      4⤵
      PID:4740
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im bcreporter.exe /f
  2⤵
  PID:3016
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im bcreporter.exe /f
    3⤵
    PID:4944
  - - C:\Windows\system32\taskkill.exe
      taskkill /im bcreporter.exe /f
      4⤵
      PID:4972
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im csadmin.exe /f
  2⤵
  PID:5068
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im csadmin.exe /f
    3⤵
    PID:1496
  - - C:\Windows\system32\taskkill.exe
      taskkill /im csadmin.exe /f
      4⤵
      PID:1532
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im csdbsync.exe /f
  2⤵
  PID:2420
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im csdbsync.exe /f
    3⤵
    PID:3772
  - - C:\Windows\system32\taskkill.exe
      taskkill /im csdbsync.exe /f
      4⤵
      PID:2200
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im csmon.exe /f
  2⤵
  PID:3308
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im csmon.exe /f
    3⤵
    PID:4872
  - - C:\Windows\system32\taskkill.exe
      taskkill /im csmon.exe /f
      4⤵
      PID:3100
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im csauth.exe /f
  2⤵
  PID:1392
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im csauth.exe /f
    3⤵
    PID:2944
  - - C:\Windows\system32\taskkill.exe
      taskkill /im csauth.exe /f
      4⤵
      PID:1380
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im cslog.exe /f
  2⤵
  PID:1568
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im cslog.exe /f
    3⤵
    PID:2624
  - - C:\Windows\system32\taskkill.exe
      taskkill /im cslog.exe /f
      4⤵
      PID:1044
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im csradius.exe /f
  2⤵
  PID:2740
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im csradius.exe /f
    3⤵
    PID:4644
  - - C:\Windows\system32\taskkill.exe
      taskkill /im csradius.exe /f
      4⤵
      PID:4672
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im cstacacs.exe /f
  2⤵
  PID:1620
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im cstacacs.exe /f
    3⤵
    PID:1608
  - - C:\Windows\system32\taskkill.exe
      taskkill /im cstacacs.exe /f
      4⤵
      PID:1668
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im url_response.exe /f
  2⤵
  PID:3488
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im url_response.exe /f
    3⤵
    PID:1876
  - - C:\Windows\system32\taskkill.exe
      taskkill /im url_response.exe /f
      4⤵
      PID:4584
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im vmware-converter-a.exe /f
  2⤵
  PID:64
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im vmware-converter-a.exe /f
    3⤵
    PID:2360
  - - C:\Windows\system32\taskkill.exe
      taskkill /im vmware-converter-a.exe /f
      4⤵
      PID:2952
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im vmware-converter.exe /f
  2⤵
  PID:4248
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im vmware-converter.exe /f
    3⤵
    PID:4292
  - - C:\Windows\system32\taskkill.exe
      taskkill /im vmware-converter.exe /f
      4⤵
      PID:3144
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avagent.exe /f
  2⤵
  PID:3236
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avagent.exe /f
    3⤵
    PID:3208
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avagent.exe /f
      4⤵
      PID:2816
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im paxton.net2.clientservice.exe /f
  2⤵
  PID:2144
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im paxton.net2.clientservice.exe /f
    3⤵
    PID:1080
  - - C:\Windows\system32\taskkill.exe
      taskkill /im paxton.net2.clientservice.exe /f
      4⤵
      PID:2500
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im paxton.net2.commsserverservice.exe /f
  2⤵
  PID:740
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im paxton.net2.commsserverservice.exe /f
    3⤵
    PID:908
  - - C:\Windows\system32\taskkill.exe
      taskkill /im paxton.net2.commsserverservice.exe /f
      4⤵
      PID:4276
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avscc.exe /f
  2⤵
  PID:3332
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avscc.exe /f
    3⤵
    PID:2376
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avscc.exe /f
      4⤵
      PID:3616
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im prunsrv.exe /f
  2⤵
  PID:4304
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im prunsrv.exe /f
    3⤵
    PID:3668
  - - C:\Windows\system32\taskkill.exe
      taskkill /im prunsrv.exe /f
      4⤵
      PID:4588
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im googlecrashhandler.exe /f
  2⤵
  PID:2228
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im googlecrashhandler.exe /f
    3⤵
    PID:4648
  - - C:\Windows\system32\taskkill.exe
      taskkill /im googlecrashhandler.exe /f
      4⤵
      Kills process with taskkill
      PID:4004
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im googlecrashhandler64.exe /f
  2⤵
  PID:5036
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im googlecrashhandler64.exe /f
    3⤵
    PID:3916
  - - C:\Windows\system32\taskkill.exe
      taskkill /im googlecrashhandler64.exe /f
      4⤵
      PID:3260
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im vmwaretray.exe /f
  2⤵
  PID:820
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im vmwaretray.exe /f
    3⤵
    PID:3400
  - - C:\Windows\system32\taskkill.exe
      taskkill /im vmwaretray.exe /f
      4⤵
      PID:2864
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im nd2svc.exe /f
  2⤵
  PID:2556
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im nd2svc.exe /f
    3⤵
    PID:2724
  - - C:\Windows\system32\taskkill.exe
      taskkill /im nd2svc.exe /f
      4⤵
      PID:1352
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im tnslsnr.exe /f
  2⤵
  PID:4572
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im tnslsnr.exe /f
    3⤵
    PID:3096
  - - C:\Windows\system32\taskkill.exe
      taskkill /im tnslsnr.exe /f
      4⤵
      PID:392
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im omtsreco.exe /f
  2⤵
  PID:4204
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im omtsreco.exe /f
    3⤵
    PID:4948
  - - C:\Windows\system32\taskkill.exe
      taskkill /im omtsreco.exe /f
      4⤵
      PID:2656
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im oracle.exe /f
  2⤵
  PID:1396
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im oracle.exe /f
    3⤵
    PID:2092
  - - C:\Windows\system32\taskkill.exe
      taskkill /im oracle.exe /f
      4⤵
      PID:4488
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im patrolagent.exe /f
  2⤵
  PID:1316
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im patrolagent.exe /f
    3⤵
    PID:2424
  - - C:\Windows\system32\taskkill.exe
      taskkill /im patrolagent.exe /f
      4⤵
      Kills process with taskkill
      PID:5048
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im scfagent_64.exe /f
  2⤵
  PID:3512
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im scfagent_64.exe /f
    3⤵
    PID:1908
  - - C:\Windows\system32\taskkill.exe
      taskkill /im scfagent_64.exe /f
      4⤵
      PID:4232
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im patrolperf.exe /f
  2⤵
  PID:4336
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im patrolperf.exe /f
    3⤵
    PID:3652
  - - C:\Windows\system32\taskkill.exe
      taskkill /im patrolperf.exe /f
      4⤵
      PID:2156
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im rscdsvc.exe /f
  2⤵
  PID:1468
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im rscdsvc.exe /f
    3⤵
    PID:2288
  - - C:\Windows\system32\taskkill.exe
      taskkill /im rscdsvc.exe /f
      4⤵
      PID:4340
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im rscd.exe /f
  2⤵
  PID:756
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im rscd.exe /f
    3⤵
    PID:2220
  - - C:\Windows\system32\taskkill.exe
      taskkill /im rscd.exe /f
      4⤵
      PID:1208
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im pmgreader.exe /f
  2⤵
  PID:4244
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im pmgreader.exe /f
    3⤵
    PID:3740
  - - C:\Windows\system32\taskkill.exe
      taskkill /im pmgreader.exe /f
      4⤵
      PID:5072
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im firefox.exe /f
  2⤵
  PID:3552
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im firefox.exe /f
    3⤵
    PID:3672
  - - C:\Windows\system32\taskkill.exe
      taskkill /im firefox.exe /f
      4⤵
      PID:5008
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im chrome.exe /f
  2⤵
  PID:4364
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im chrome.exe /f
    3⤵
    PID:4184
  - - C:\Windows\system32\taskkill.exe
      taskkill /im chrome.exe /f
      4⤵
      PID:3900
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im netsession_win.exe /f
  2⤵
  PID:4476
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im netsession_win.exe /f
    3⤵
    PID:1708
  - - C:\Windows\system32\taskkill.exe
      taskkill /im netsession_win.exe /f
      4⤵
      PID:5012
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im pcsws.exe /f
  2⤵
  PID:2284
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im pcsws.exe /f
    3⤵
    PID:1572
  - - C:\Windows\system32\taskkill.exe
      taskkill /im pcsws.exe /f
      4⤵
      PID:3956
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im pcscm.exe /f
  2⤵
  PID:2420
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im pcscm.exe /f
    3⤵
    PID:1248
  - - C:\Windows\system32\taskkill.exe
      taskkill /im pcscm.exe /f
      4⤵
      PID:3100
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im cwbunnav.exe /f
  2⤵
  PID:2468
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im cwbunnav.exe /f
    3⤵
    PID:3716
  - - C:\Windows\system32\taskkill.exe
      taskkill /im cwbunnav.exe /f
      4⤵
      PID:1380
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im rdrcef.exe /f
  2⤵
  PID:1392
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im rdrcef.exe /f
    3⤵
    PID:2216
  - - C:\Windows\system32\taskkill.exe
      taskkill /im rdrcef.exe /f
      4⤵
      PID:1044
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im ndrvx.exe /f
  2⤵
  PID:1404
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im ndrvx.exe /f
    3⤵
    PID:4904
  - - C:\Windows\system32\taskkill.exe
      taskkill /im ndrvx.exe /f
      4⤵
      PID:4020
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im ndrvs.exe /f
  2⤵
  PID:432
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im ndrvs.exe /f
    3⤵
    PID:2008
  - - C:\Windows\system32\taskkill.exe
      taskkill /im ndrvs.exe /f
      4⤵
      PID:1668
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im dr_serviceengine.exe /f
  2⤵
  PID:1620
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im dr_serviceengine.exe /f
    3⤵
    PID:3924
  - - C:\Windows\system32\taskkill.exe
      taskkill /im dr_serviceengine.exe /f
      4⤵
      PID:4956
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im teamviewer_service.exe /f
  2⤵
  PID:3488
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im teamviewer_service.exe /f
    3⤵
    PID:2056
  - - C:\Windows\system32\taskkill.exe
      taskkill /im teamviewer_service.exe /f
      4⤵
      PID:2896
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im sqlagent.exe /f
  2⤵
  PID:64
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im sqlagent.exe /f
    3⤵
    PID:2668
  - - C:\Windows\system32\taskkill.exe
      taskkill /im sqlagent.exe /f
      4⤵
      PID:3144
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im dwrcst.exe /f
  2⤵
  PID:956
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im dwrcst.exe /f
    3⤵
    PID:2992
  - - C:\Windows\system32\taskkill.exe
      taskkill /im dwrcst.exe /f
      4⤵
      PID:2816
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im ccm messaging.exe /f
  2⤵
  PID:3236
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im ccm messaging.exe /f
    3⤵
    PID:2508
  - - C:\Windows\system32\taskkill.exe
      taskkill /im ccm messaging.exe /f
      4⤵
      PID:4176
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im zoolz.exe /f
  2⤵
  PID:5104
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im zoolz.exe /f
    3⤵
    PID:1784
  - - C:\Windows\system32\taskkill.exe
      taskkill /im zoolz.exe /f
      4⤵
      PID:3904
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im agntsvc.exe /f
  2⤵
  PID:908
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im agntsvc.exe /f
    3⤵
    PID:2072
  - - C:\Windows\system32\taskkill.exe
      taskkill /im agntsvc.exe /f
      4⤵
      PID:2296
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im dbeng50.exe /f
  2⤵
  PID:2376
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im dbeng50.exe /f
    3⤵
    PID:4180
  - - C:\Windows\system32\taskkill.exe
      taskkill /im dbeng50.exe /f
      4⤵
      PID:2872
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im dbsnmp.exe /f
  2⤵
  PID:4156
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im dbsnmp.exe /f
    3⤵
    PID:1912
  - - C:\Windows\system32\taskkill.exe
      taskkill /im dbsnmp.exe /f
      4⤵
      PID:1588
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im excel.exe /f
  2⤵
  PID:4648
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im excel.exe /f
    3⤵
    PID:2228
  - - C:\Windows\system32\taskkill.exe
      taskkill /im excel.exe /f
      4⤵
      PID:404
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im firefoxconfig.exe /f
  2⤵
  PID:2832
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im firefoxconfig.exe /f
    3⤵
    PID:4616
  - - C:\Windows\system32\taskkill.exe
      taskkill /im firefoxconfig.exe /f
      4⤵
      PID:4524
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im infopath.exe /f
  2⤵
  PID:1252
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im infopath.exe /f
    3⤵
    PID:4328
  - - C:\Windows\system32\taskkill.exe
      taskkill /im infopath.exe /f
      4⤵
      PID:3116
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im isqlplussvc.exe /f
  2⤵
  PID:2068
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im isqlplussvc.exe /f
    3⤵
    PID:3664
  - - C:\Windows\system32\taskkill.exe
      taskkill /im isqlplussvc.exe /f
      4⤵
      PID:4656
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im msaccess.exe /f
  2⤵
  PID:468
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im msaccess.exe /f
    3⤵
    PID:4448
  - - C:\Windows\system32\taskkill.exe
      taskkill /im msaccess.exe /f
      4⤵
      PID:2968
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im msftesql.exe /f
  2⤵
  PID:4296
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im msftesql.exe /f
    3⤵
    PID:5076
  - - C:\Windows\system32\taskkill.exe
      taskkill /im msftesql.exe /f
      4⤵
      PID:1944
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im mspub.exe /f
  2⤵
  PID:1692
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im mspub.exe /f
    3⤵
    PID:3480
  - - C:\Windows\system32\taskkill.exe
      taskkill /im mspub.exe /f
      4⤵
      PID:2308
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im mydesktopqos.exe /f
  2⤵
  PID:60
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im mydesktopqos.exe /f
    3⤵
    PID:2700
  - - C:\Windows\system32\taskkill.exe
      taskkill /im mydesktopqos.exe /f
      4⤵
      PID:2932
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im mydesktopservice.exe /f
  2⤵
  PID:2152
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im mydesktopservice.exe /f
    3⤵
    PID:532
  - - C:\Windows\system32\taskkill.exe
      taskkill /im mydesktopservice.exe /f
      4⤵
      PID:2436
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im mysqld.exe /f
  2⤵
  PID:4988
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im mysqld.exe /f
    3⤵
    PID:840
  - - C:\Windows\system32\taskkill.exe
      taskkill /im mysqld.exe /f
      4⤵
      PID:3640
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im mysqld-nt.exe /f
  2⤵
  PID:3708
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im mysqld-nt.exe /f
    3⤵
    PID:3092
  - - C:\Windows\system32\taskkill.exe
      taskkill /im mysqld-nt.exe /f
      4⤵
      PID:1788
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im mysqld-opt.exe /f
  2⤵
  PID:4152
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im mysqld-opt.exe /f
    3⤵
    PID:2208
  - - C:\Windows\system32\taskkill.exe
      taskkill /im mysqld-opt.exe /f
      4⤵
      PID:2040
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im ocautoupds.exe /f
  2⤵
  PID:4676
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im ocautoupds.exe /f
    3⤵
    PID:4032
  - - C:\Windows\system32\taskkill.exe
      taskkill /im ocautoupds.exe /f
      4⤵
      PID:2524
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im ocomm.exe /f
  2⤵
  PID:4100
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im ocomm.exe /f
    3⤵
    PID:4352
  - - C:\Windows\system32\taskkill.exe
      taskkill /im ocomm.exe /f
      4⤵
      PID:2204
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im ocssd.exe /f
  2⤵
  PID:1112
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im ocssd.exe /f
    3⤵
    PID:2728
  - - C:\Windows\system32\taskkill.exe
      taskkill /im ocssd.exe /f
      4⤵
      PID:612
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im onenote.exe /f
  2⤵
  PID:1548
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im onenote.exe /f
    3⤵
    PID:3420
  - - C:\Windows\system32\taskkill.exe
      taskkill /im onenote.exe /f
      4⤵
      PID:4852
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im outlook.exe /f
  2⤵
  PID:1572
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im outlook.exe /f
    3⤵
    PID:2284
  - - C:\Windows\system32\taskkill.exe
      taskkill /im outlook.exe /f
      4⤵
      PID:2856
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im powerpnt.exe /f
  2⤵
  PID:1248
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im powerpnt.exe /f
    3⤵
    PID:2420
  - - C:\Windows\system32\taskkill.exe
      taskkill /im powerpnt.exe /f
      4⤵
      PID:1640
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im sqbcoreservice.exe /f
  2⤵
  PID:4168
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im sqbcoreservice.exe /f
    3⤵
    PID:3308
  - - C:\Windows\system32\taskkill.exe
      taskkill /im sqbcoreservice.exe /f
      4⤵
      PID:964
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im sqlwriter.exe /f
  2⤵
  PID:812
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im sqlwriter.exe /f
    3⤵
    PID:2004
  - - C:\Windows\system32\taskkill.exe
      taskkill /im sqlwriter.exe /f
      4⤵
      Kills process with taskkill
      PID:644
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im steam.exe /f
  2⤵
  PID:4904
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im steam.exe /f
    3⤵
    PID:1568
  - - C:\Windows\system32\taskkill.exe
      taskkill /im steam.exe /f
      4⤵
      PID:1804
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im synctime.exe /f
  2⤵
  PID:1012
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im synctime.exe /f
    3⤵
    PID:2740
  - - C:\Windows\system32\taskkill.exe
      taskkill /im synctime.exe /f
      4⤵
      PID:2132
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im tbirdconfig.exe /f
  2⤵
  PID:3924
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im tbirdconfig.exe /f
    3⤵
    PID:1620
  - - C:\Windows\system32\taskkill.exe
      taskkill /im tbirdconfig.exe /f
      4⤵
      PID:5100
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im thebat.exe /f
  2⤵
  PID:1412
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im thebat.exe /f
    3⤵
    PID:4292
  - - C:\Windows\system32\taskkill.exe
      taskkill /im thebat.exe /f
      4⤵
      PID:4908
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im thebat64.exe /f
  2⤵
  PID:3112
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im thebat64.exe /f
    3⤵
    PID:3204
  - - C:\Windows\system32\taskkill.exe
      taskkill /im thebat64.exe /f
      4⤵
      PID:3084
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im thunderbird.exe /f
  2⤵
  PID:2992
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im thunderbird.exe /f
    3⤵
    PID:956
  - - C:\Windows\system32\taskkill.exe
      taskkill /im thunderbird.exe /f
      4⤵
      PID:4176
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im visio.exe /f
  2⤵
  PID:2736
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im visio.exe /f
    3⤵
    PID:4276
  - - C:\Windows\system32\taskkill.exe
      taskkill /im visio.exe /f
      4⤵
      Kills process with taskkill
      PID:2516
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im winword.exe /f
  2⤵
  PID:3560
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im winword.exe /f
    3⤵
    PID:2472
  - - C:\Windows\system32\taskkill.exe
      taskkill /im winword.exe /f
      4⤵
      PID:3748
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im wordpad.exe /f
  2⤵
  PID:5096
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im wordpad.exe /f
    3⤵
    PID:4348
  - - C:\Windows\system32\taskkill.exe
      taskkill /im wordpad.exe /f
      4⤵
      PID:3124
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im xfssvccon.exe /f
  2⤵
  PID:2980
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im xfssvccon.exe /f
    3⤵
    PID:2936
  - - C:\Windows\system32\taskkill.exe
      taskkill /im xfssvccon.exe /f
      4⤵
      PID:2044
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im tmlisten.exe /f
  2⤵
  PID:1912
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im tmlisten.exe /f
    3⤵
    PID:4156
  - - C:\Windows\system32\taskkill.exe
      taskkill /im tmlisten.exe /f
      4⤵
      PID:2804
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im pccntmon.exe /f
  2⤵
  PID:2228
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im pccntmon.exe /f
    3⤵
    PID:4648
  - - C:\Windows\system32\taskkill.exe
      taskkill /im pccntmon.exe /f
      4⤵
      PID:4428
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im cntaosmgr.exe /f
  2⤵
  PID:4616
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im cntaosmgr.exe /f
    3⤵
    PID:2832
  - - C:\Windows\system32\taskkill.exe
      taskkill /im cntaosmgr.exe /f
      4⤵
      Kills process with taskkill
      PID:940
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im ntrtscan.exe /f
  2⤵
  PID:820
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im ntrtscan.exe /f
    3⤵
    PID:3400
  - - C:\Windows\system32\taskkill.exe
      taskkill /im ntrtscan.exe /f
      4⤵
      Kills process with taskkill
      PID:1164
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im mbamtray.exe /f
  2⤵
  PID:3664
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im mbamtray.exe /f
    3⤵
    PID:2068
  - - C:\Windows\system32\taskkill.exe
      taskkill /im mbamtray.exe /f
      4⤵
      PID:320
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im qhactivedefense.exe /f
  2⤵
  PID:400
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im qhactivedefense.exe /f
    3⤵
    PID:3096
  - - C:\Windows\system32\taskkill.exe
      taskkill /im qhactivedefense.exe /f
      4⤵
      PID:4036
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im qhwatchdog.exe /f
  2⤵
  PID:4196
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im qhwatchdog.exe /f
    3⤵
    PID:5076
  - - C:\Windows\system32\taskkill.exe
      taskkill /im qhwatchdog.exe /f
      4⤵
      PID:3540
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im qhsafetray.exe /f
  2⤵
  PID:4936
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im qhsafetray.exe /f
    3⤵
    PID:4540
  - - C:\Windows\system32\taskkill.exe
      taskkill /im qhsafetray.exe /f
      4⤵
      PID:3104
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avgsvc.exe /f
  2⤵
  PID:2932
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avgsvc.exe /f
    3⤵
    PID:2316
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avgsvc.exe /f
      4⤵
      PID:4116
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avgui.exe /f
  2⤵
  PID:2844
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avgui.exe /f
    3⤵
    PID:1736
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avgui.exe /f
      4⤵
      Kills process with taskkill
      PID:3932
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im v3lite.exe /f
  2⤵
  PID:3288
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im v3lite.exe /f
    3⤵
    PID:1952
  - - C:\Windows\system32\taskkill.exe
      taskkill /im v3lite.exe /f
      4⤵
      PID:3048
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im v3main.exe /f
  2⤵
  PID:1860
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im v3main.exe /f
    3⤵
    PID:1812
  - - C:\Windows\system32\taskkill.exe
      taskkill /im v3main.exe /f
      4⤵
      PID:3920
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im v3sp.exe /f
  2⤵
  PID:4992
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im v3sp.exe /f
    3⤵
    PID:4828
  - - C:\Windows\system32\taskkill.exe
      taskkill /im v3sp.exe /f
      4⤵
      PID:4396
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avastui.exe /f
  2⤵
  PID:4860
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avastui.exe /f
    3⤵
    PID:3556
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avastui.exe /f
      4⤵
      PID:412
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avastsvc.exe /f
  2⤵
  PID:3016
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avastsvc.exe /f
    3⤵
    PID:2204
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avastsvc.exe /f
      4⤵
      PID:4580
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avguard.exe /f
  2⤵
  PID:1532
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avguard.exe /f
    3⤵
    PID:3500
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avguard.exe /f
      4⤵
      Kills process with taskkill
      PID:4364
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avshadow.exe /f
  2⤵
  PID:3956
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avshadow.exe /f
    3⤵
    PID:2200
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avshadow.exe /f
      4⤵
      PID:3772
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avgnt.exe /f
  2⤵
  PID:1548
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avgnt.exe /f
    3⤵
    PID:1160
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avgnt.exe /f
      4⤵
      PID:2860
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avira.servicehost.exe /f
  2⤵
  PID:1572
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avira.servicehost.exe /f
    3⤵
    PID:864
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avira.servicehost.exe /f
      4⤵
      PID:4928
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avira.systray.exe /f
  2⤵
  PID:1248
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avira.systray.exe /f
    3⤵
    PID:3984
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avira.systray.exe /f
      4⤵
      PID:1044
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im bdagent.exe /f
  2⤵
  PID:2624
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im bdagent.exe /f
    3⤵
    PID:3128
  - - C:\Windows\system32\taskkill.exe
      taskkill /im bdagent.exe /f
      4⤵
      PID:4024
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im bdredline.exe /f
  2⤵
  PID:4020
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im bdredline.exe /f
    3⤵
    PID:408
  - - C:\Windows\system32\taskkill.exe
      taskkill /im bdredline.exe /f
      4⤵
      PID:2464
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im bdss.exe /f
  2⤵
  PID:1804
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im bdss.exe /f
    3⤵
    PID:1568
  - - C:\Windows\system32\taskkill.exe
      taskkill /im bdss.exe /f
      4⤵
      PID:4584
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im bullguardbhvscanner.exe /f
  2⤵
  PID:1876
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im bullguardbhvscanner.exe /f
    3⤵
    PID:1508
  - - C:\Windows\system32\taskkill.exe
      taskkill /im bullguardbhvscanner.exe /f
      4⤵
      PID:1624
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im bullguardscanner.exe /f
  2⤵
  PID:4044
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im bullguardscanner.exe /f
    3⤵
    PID:1656
  - - C:\Windows\system32\taskkill.exe
      taskkill /im bullguardscanner.exe /f
      4⤵
      PID:540
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im bullguardtray.exe /f
  2⤵
  PID:1852
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im bullguardtray.exe /f
    3⤵
    PID:3488
  - - C:\Windows\system32\taskkill.exe
      taskkill /im bullguardtray.exe /f
      4⤵
      PID:1412
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im bullguardupdate.exe /f
  2⤵
  PID:3084
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im bullguardupdate.exe /f
    3⤵
    PID:3204
  - - C:\Windows\system32\taskkill.exe
      taskkill /im bullguardupdate.exe /f
      4⤵
      PID:2508
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im bullguard.exe /f
  2⤵
  PID:3268
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im bullguard.exe /f
    3⤵
    PID:956
  - - C:\Windows\system32\taskkill.exe
      taskkill /im bullguard.exe /f
      4⤵
      PID:2368
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im cmdagent.exe /f
  2⤵
  PID:1784
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im cmdagent.exe /f
    3⤵
    PID:4436
  - - C:\Windows\system32\taskkill.exe
      taskkill /im cmdagent.exe /f
      4⤵
      PID:3236
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im cistray.exe /f
  2⤵
  PID:3380
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im cistray.exe /f
    3⤵
    PID:1576
  - - C:\Windows\system32\taskkill.exe
      taskkill /im cistray.exe /f
      4⤵
      PID:5104
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im cis.exe /f
  2⤵
  PID:3992
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im cis.exe /f
    3⤵
    PID:4588
  - - C:\Windows\system32\taskkill.exe
      taskkill /im cis.exe /f
      4⤵
      PID:4812
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im spideragent.exe /f
  2⤵
  PID:5020
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im spideragent.exe /f
    3⤵
    PID:2024
  - - C:\Windows\system32\taskkill.exe
      taskkill /im spideragent.exe /f
      4⤵
      PID:2376
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im dwengine.exe /f
  2⤵
  PID:4808
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im dwengine.exe /f
    3⤵
    PID:4792
  - - C:\Windows\system32\taskkill.exe
      taskkill /im dwengine.exe /f
      4⤵
      PID:4368
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im dwarkdaemon.exe /f
  2⤵
  PID:5036
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im dwarkdaemon.exe /f
    3⤵
    PID:1580
  - - C:\Windows\system32\taskkill.exe
      taskkill /im dwarkdaemon.exe /f
      4⤵
      Kills process with taskkill
      PID:2864
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im dwnetfilter.exe /f
  2⤵
  PID:816
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im dwnetfilter.exe /f
    3⤵
    PID:1836
  - - C:\Windows\system32\taskkill.exe
      taskkill /im dwnetfilter.exe /f
      4⤵
      PID:4912
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im a2service.exe /f
  2⤵
  PID:1368
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im a2service.exe /f
    3⤵
    PID:2164
  - - C:\Windows\system32\taskkill.exe
      taskkill /im a2service.exe /f
      4⤵
      PID:1252
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im a2guard.exe.a2start.exe /f
  2⤵
  PID:4572
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im a2guard.exe.a2start.exe /f
    3⤵
    PID:2968
  - - C:\Windows\system32\taskkill.exe
      taskkill /im a2guard.exe.a2start.exe /f
      4⤵
      PID:4072
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im egui.exe /f
  2⤵
  PID:4488
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im egui.exe /f
    3⤵
    PID:3760
  - - C:\Windows\system32\taskkill.exe
      taskkill /im egui.exe /f
      4⤵
      PID:468
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im ekrn.exe /f
  2⤵
  PID:5048
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im ekrn.exe /f
    3⤵
    PID:2308
  - - C:\Windows\system32\taskkill.exe
      taskkill /im ekrn.exe /f
      4⤵
      PID:4948
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im fshoster32.exe /f
  2⤵
  PID:2960
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im fshoster32.exe /f
    3⤵
    PID:1536
  - - C:\Windows\system32\taskkill.exe
      taskkill /im fshoster32.exe /f
      4⤵
      PID:3996
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im fshoster64.exe /f
  2⤵
  PID:624
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im fshoster64.exe /f
    3⤵
    PID:1408
  - - C:\Windows\system32\taskkill.exe
      taskkill /im fshoster64.exe /f
      4⤵
      PID:2424
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im fortisslvpndaemon.exe /f
  2⤵
  PID:3648
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im fortisslvpndaemon.exe /f
    3⤵
    PID:2152
  - - C:\Windows\system32\taskkill.exe
      taskkill /im fortisslvpndaemon.exe /f
      4⤵
      PID:3512
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im fortiesnac.exe /f
  2⤵
  PID:3080
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im fortiesnac.exe /f
    3⤵
    PID:5056
  - - C:\Windows\system32\taskkill.exe
      taskkill /im fortiesnac.exe /f
      4⤵
      PID:4336
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im fortiwf.exe /f
  2⤵
  PID:2372
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im fortiwf.exe /f
    3⤵
    PID:3708
  - - C:\Windows\system32\taskkill.exe
      taskkill /im fortiwf.exe /f
      4⤵
      PID:1468
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im fortitray.exe /f
  2⤵
  PID:2556
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im fortitray.exe /f
    3⤵
    PID:2208
  - - C:\Windows\system32\taskkill.exe
      taskkill /im fortitray.exe /f
      4⤵
      PID:4396
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im fchelper64.exe /f
  2⤵
  PID:3304
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im fchelper64.exe /f
    3⤵
    PID:4676
  - - C:\Windows\system32\taskkill.exe
      taskkill /im fchelper64.exe /f
      4⤵
      PID:3472
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im fortiproxy.exe /f
  2⤵
  PID:5008
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im fortiproxy.exe /f
    3⤵
    PID:3672
  - - C:\Windows\system32\taskkill.exe
      taskkill /im fortiproxy.exe /f
      4⤵
      PID:4932
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im fcappdb.exe /f
  2⤵
  PID:5032
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im fcappdb.exe /f
    3⤵
    PID:2356
  - - C:\Windows\system32\taskkill.exe
      taskkill /im fcappdb.exe /f
      4⤵
      Kills process with taskkill
      PID:2448
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im fcdblog.exe /f
  2⤵
  PID:32
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im fcdblog.exe /f
    3⤵
    PID:1708
  - - C:\Windows\system32\taskkill.exe
      taskkill /im fcdblog.exe /f
      4⤵
      PID:4476
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avp.exe /f
  2⤵
  PID:3876
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avp.exe /f
    3⤵
    PID:2284
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avp.exe /f
      4⤵
      Kills process with taskkill
      PID:2860
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avpui.exe /f
  2⤵
  PID:1548
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avpui.exe /f
    3⤵
    PID:2944
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avpui.exe /f
      4⤵
      Kills process with taskkill
      PID:4928
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im mbamservice.exe /f
  2⤵
  PID:3928
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im mbamservice.exe /f
    3⤵
    PID:428
  - - C:\Windows\system32\taskkill.exe
      taskkill /im mbamservice.exe /f
      4⤵
      PID:1044
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im mcsacore.exe /f
  2⤵
  PID:3700
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im mcsacore.exe /f
    3⤵
    PID:4644
  - - C:\Windows\system32\taskkill.exe
      taskkill /im mcsacore.exe /f
      4⤵
      PID:224
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im mcapexe.exe /f
  2⤵
  PID:2468
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im mcapexe.exe /f
    3⤵
    PID:1668
  - - C:\Windows\system32\taskkill.exe
      taskkill /im mcapexe.exe /f
      4⤵
      PID:2464
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im mcshield.exe /f
  2⤵
  PID:4020
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im mcshield.exe /f
    3⤵
    PID:2172
  - - C:\Windows\system32\taskkill.exe
      taskkill /im mcshield.exe /f
      4⤵
      PID:4584
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im mcsvhost.exe /f
  2⤵
  PID:4288
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im mcsvhost.exe /f
    3⤵
    PID:2896
  - - C:\Windows\system32\taskkill.exe
      taskkill /im mcsvhost.exe /f
      4⤵
      PID:1624
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im nortonsecurity.exe /f
  2⤵
  PID:1272
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im nortonsecurity.exe /f
    3⤵
    PID:2668
  - - C:\Windows\system32\taskkill.exe
      taskkill /im nortonsecurity.exe /f
      4⤵
      PID:540
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im psuaservice.exe /f
  2⤵
  PID:4044
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im psuaservice.exe /f
    3⤵
    PID:768
  - - C:\Windows\system32\taskkill.exe
      taskkill /im psuaservice.exe /f
      4⤵
      PID:2604
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im psuamain.exe /f
  2⤵
  PID:2500
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im psuamain.exe /f
    3⤵
    PID:3684
  - - C:\Windows\system32\taskkill.exe
      taskkill /im psuamain.exe /f
      4⤵
      PID:3112
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im psanhost.exe /f
  2⤵
  PID:3084
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im psanhost.exe /f
    3⤵
    PID:2992
  - - C:\Windows\system32\taskkill.exe
      taskkill /im psanhost.exe /f
      4⤵
      PID:2828
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im sdrservice.exe /f
  2⤵
  PID:2296
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im sdrservice.exe /f
    3⤵
    PID:2072
  - - C:\Windows\system32\taskkill.exe
      taskkill /im sdrservice.exe /f
      4⤵
      PID:4996
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im swc_service.exe /f
  2⤵
  PID:2180
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im swc_service.exe /f
    3⤵
    PID:3560
  - - C:\Windows\system32\taskkill.exe
      taskkill /im swc_service.exe /f
      4⤵
      PID:2472
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im swi_service.exe /f
  2⤵
  PID:2536
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im swi_service.exe /f
    3⤵
    PID:1524
  - - C:\Windows\system32\taskkill.exe
      taskkill /im swi_service.exe /f
      4⤵
      PID:3360
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im ssp.exe /f
  2⤵
  PID:4560
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im ssp.exe /f
    3⤵
    PID:3768
  - - C:\Windows\system32\taskkill.exe
      taskkill /im ssp.exe /f
      4⤵
      PID:2496
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im ccsvchst.exe /f
  2⤵
  PID:2256
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im ccsvchst.exe /f
    3⤵
    PID:5092
  - - C:\Windows\system32\taskkill.exe
      taskkill /im ccsvchst.exe /f
      4⤵
      PID:4792
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im smcgui.exe /f
  2⤵
  PID:2292
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im smcgui.exe /f
    3⤵
    PID:2864
  - - C:\Windows\system32\taskkill.exe
      taskkill /im smcgui.exe /f
      4⤵
      PID:1580
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im coreserviceshell.exe /f
  2⤵
  PID:3916
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im coreserviceshell.exe /f
    3⤵
    PID:4912
  - - C:\Windows\system32\taskkill.exe
      taskkill /im coreserviceshell.exe /f
      4⤵
      PID:1836
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im coreframeworkhost.exe /f
  2⤵
  PID:4076
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im coreframeworkhost.exe /f
    3⤵
    PID:2964
  - - C:\Windows\system32\taskkill.exe
      taskkill /im coreframeworkhost.exe /f
      4⤵
      PID:1164
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im uiwatchdog.exe /f
  2⤵
  PID:4660
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im uiwatchdog.exe /f
    3⤵
    PID:3664
  - - C:\Windows\system32\taskkill.exe
      taskkill /im uiwatchdog.exe /f
      4⤵
      PID:2812
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im uiseagnt.exe /f
  2⤵
  PID:4448
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im uiseagnt.exe /f
    3⤵
    PID:400
  - - C:\Windows\system32\taskkill.exe
      taskkill /im uiseagnt.exe /f
      4⤵
      PID:4236
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im paamsrv.exe /f
  2⤵
  PID:4444
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im paamsrv.exe /f
    3⤵
    PID:1944
  - - C:\Windows\system32\taskkill.exe
      taskkill /im paamsrv.exe /f
      4⤵
      PID:4296
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im psh_svc.exe /f
  2⤵
  PID:4048
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im psh_svc.exe /f
    3⤵
    PID:4936
  - - C:\Windows\system32\taskkill.exe
      taskkill /im psh_svc.exe /f
      4⤵
      PID:3104
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im aupdrun.exe /f
  2⤵
  PID:2316
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im aupdrun.exe /f
    3⤵
    PID:2932
  - - C:\Windows\system32\taskkill.exe
      taskkill /im aupdrun.exe /f
      4⤵
      PID:60
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im acaas.exe /f
  2⤵
  PID:2156
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im acaas.exe /f
    3⤵
    PID:1736
  - - C:\Windows\system32\taskkill.exe
      taskkill /im acaas.exe /f
      4⤵
      PID:532
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im acaegmgr.exe /f
  2⤵
  PID:4340
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im acaegmgr.exe /f
    3⤵
    PID:3288
  - - C:\Windows\system32\taskkill.exe
      taskkill /im acaegmgr.exe /f
      4⤵
      PID:840
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im acaif.exe /f
  2⤵
  PID:2780
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im acaif.exe /f
    3⤵
    PID:1812
  - - C:\Windows\system32\taskkill.exe
      taskkill /im acaif.exe /f
      4⤵
      PID:3724
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im acais.exe /f
  2⤵
  PID:2372
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im acais.exe /f
    3⤵
    PID:2040
  - - C:\Windows\system32\taskkill.exe
      taskkill /im acais.exe /f
      4⤵
      PID:756
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im ahnsd.exe /f
  2⤵
  PID:4152
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im ahnsd.exe /f
    3⤵
    PID:2524
  - - C:\Windows\system32\taskkill.exe
      taskkill /im ahnsd.exe /f
      4⤵
      PID:3556
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im ahnsdsv.exe /f
  2⤵
  PID:4992
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im ahnsdsv.exe /f
    3⤵
    PID:4960
  - - C:\Windows\system32\taskkill.exe
      taskkill /im ahnsdsv.exe /f
      4⤵
      PID:4932
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im autoup.exe /f
  2⤵
  PID:1988
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im autoup.exe /f
    3⤵
    PID:612
  - - C:\Windows\system32\taskkill.exe
      taskkill /im autoup.exe /f
      4⤵
      PID:3500
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im v3clnsrv.exe /f
  2⤵
  PID:1564
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im v3clnsrv.exe /f
    3⤵
    PID:3772
  - - C:\Windows\system32\taskkill.exe
      taskkill /im v3clnsrv.exe /f
      4⤵
      PID:4476
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im v3medic.exe /f
  2⤵
  PID:1496
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im v3medic.exe /f
    3⤵
    PID:2112
  - - C:\Windows\system32\taskkill.exe
      taskkill /im v3medic.exe /f
      4⤵
      PID:2860
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im v3svc.exe /f
  2⤵
  PID:3956
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im v3svc.exe /f
    3⤵
    PID:3024
  - - C:\Windows\system32\taskkill.exe
      taskkill /im v3svc.exe /f
      4⤵
      PID:2192
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im aflogvw.exe /f
  2⤵
  PID:2160
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im aflogvw.exe /f
    3⤵
    PID:1764
  - - C:\Windows\system32\taskkill.exe
      taskkill /im aflogvw.exe /f
      4⤵
      PID:3128
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im ahnrpt.exe /f
  2⤵
  PID:4732
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im ahnrpt.exe /f
    3⤵
    PID:644
  - - C:\Windows\system32\taskkill.exe
      taskkill /im ahnrpt.exe /f
      4⤵
      PID:2004
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im atwsctsk.exe /f
  2⤵
  PID:2624
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im atwsctsk.exe /f
    3⤵
    PID:1384
  - - C:\Windows\system32\taskkill.exe
      taskkill /im atwsctsk.exe /f
      4⤵
      PID:1168
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im v3exec.exe /f
  2⤵
  PID:3248
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im v3exec.exe /f
    3⤵
    PID:1012
  - - C:\Windows\system32\taskkill.exe
      taskkill /im v3exec.exe /f
      4⤵
      PID:1624
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im v3imscn.exe /f
  2⤵
  PID:1804
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im v3imscn.exe /f
    3⤵
    PID:2196
  - - C:\Windows\system32\taskkill.exe
      taskkill /im v3imscn.exe /f
      4⤵
      Kills process with taskkill
      PID:540
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im monsvcnt.exe /f
  2⤵
  PID:1272
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im monsvcnt.exe /f
    3⤵
    PID:3488
  - - C:\Windows\system32\taskkill.exe
      taskkill /im monsvcnt.exe /f
      4⤵
      PID:2604
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im monsysnt.exe /f
  2⤵
  PID:2988
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im monsysnt.exe /f
    3⤵
    PID:2764
  - - C:\Windows\system32\taskkill.exe
      taskkill /im monsysnt.exe /f
      4⤵
      PID:3112
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im aexnsrcvsvc.exe /f
  2⤵
  PID:2500
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im aexnsrcvsvc.exe /f
    3⤵
    PID:4248
  - - C:\Windows\system32\taskkill.exe
      taskkill /im aexnsrcvsvc.exe /f
      4⤵
      PID:2368
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im aexsvc.exe /f
  2⤵
  PID:3532
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im aexsvc.exe /f
    3⤵
    PID:1784
  - - C:\Windows\system32\taskkill.exe
      taskkill /im aexsvc.exe /f
      4⤵
      PID:3236
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im atrshost.exe /f
  2⤵
  PID:4004
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im atrshost.exe /f
    3⤵
    PID:1576
  - - C:\Windows\system32\taskkill.exe
      taskkill /im atrshost.exe /f
      4⤵
      PID:3560
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im ctdataload.exe /f
  2⤵
  PID:3668
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im ctdataload.exe /f
    3⤵
    PID:3360
  - - C:\Windows\system32\taskkill.exe
      taskkill /im ctdataload.exe /f
      4⤵
      PID:1524
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im aexagentuihost.exe /f
  2⤵
  PID:2044
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im aexagentuihost.exe /f
    3⤵
    PID:2024
  - - C:\Windows\system32\taskkill.exe
      taskkill /im aexagentuihost.exe /f
      4⤵
      PID:3768
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im aexnsagent.exe /f
  2⤵
  PID:3260
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im aexnsagent.exe /f
    3⤵
    PID:4792
  - - C:\Windows\system32\taskkill.exe
      taskkill /im aexnsagent.exe /f
      4⤵
      PID:5092
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im aclntusr.exe /f
  2⤵
  PID:4524
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im aclntusr.exe /f
    3⤵
    PID:1580
  - - C:\Windows\system32\taskkill.exe
      taskkill /im aclntusr.exe /f
      4⤵
      PID:4636
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im aexswdusr.exe /f
  2⤵
  PID:3276
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im aexswdusr.exe /f
    3⤵
    PID:4328
  - - C:\Windows\system32\taskkill.exe
      taskkill /im aexswdusr.exe /f
      4⤵
      PID:940
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im pxemtftp.exe /f
  2⤵
  PID:3916
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im pxemtftp.exe /f
    3⤵
    PID:4316
  - - C:\Windows\system32\taskkill.exe
      taskkill /im pxemtftp.exe /f
      4⤵
      PID:392
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im aclient.exe /f
  2⤵
  PID:4820
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im aclient.exe /f
    3⤵
    PID:4572
  - - C:\Windows\system32\taskkill.exe
      taskkill /im aclient.exe /f
      4⤵
      PID:4072
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im securitycenter.exe /f
  2⤵
  PID:4640
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im securitycenter.exe /f
    3⤵
    PID:4468
  - - C:\Windows\system32\taskkill.exe
      taskkill /im securitycenter.exe /f
      4⤵
      PID:1756
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im starta.exe /f
  2⤵
  PID:5060
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im starta.exe /f
    3⤵
    PID:4308
  - - C:\Windows\system32\taskkill.exe
      taskkill /im starta.exe /f
      4⤵
      PID:4204
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im stopa.exe /f
  2⤵
  PID:3796
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im stopa.exe /f
    3⤵
    PID:3536
  - - C:\Windows\system32\taskkill.exe
      taskkill /im stopa.exe /f
      4⤵
      PID:3996
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im anvir.exe /f
  2⤵
  PID:4548
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im anvir.exe /f
    3⤵
    PID:1408
  - - C:\Windows\system32\taskkill.exe
      taskkill /im anvir.exe /f
      4⤵
      PID:1316
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im csrss_tc.exe /f
  2⤵
  PID:3648
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im csrss_tc.exe /f
    3⤵
    PID:1092
  - - C:\Windows\system32\taskkill.exe
      taskkill /im csrss_tc.exe /f
      4⤵
      PID:2844
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im ashavast.exe /f
  2⤵
  PID:3080
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im ashavast.exe /f
    3⤵
    PID:3652
  - - C:\Windows\system32\taskkill.exe
      taskkill /im ashavast.exe /f
      4⤵
      PID:4336
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im ashbug.exe /f
  2⤵
  PID:4040
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im ashbug.exe /f
    3⤵
    PID:4844
  - - C:\Windows\system32\taskkill.exe
      taskkill /im ashbug.exe /f
      4⤵
      PID:1788
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im ashchest.exe /f
  2⤵
  PID:3972
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im ashchest.exe /f
    3⤵
    PID:4840
  - - C:\Windows\system32\taskkill.exe
      taskkill /im ashchest.exe /f
      4⤵
      PID:696
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im ashcmd.exe /f
  2⤵
  PID:4972
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im ashcmd.exe /f
    3⤵
    PID:3740
  - - C:\Windows\system32\taskkill.exe
      taskkill /im ashcmd.exe /f
      4⤵
      PID:2524
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im ashdisp.exe /f
  2⤵
  PID:5012
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im ashdisp.exe /f
    3⤵
    PID:4932
  - - C:\Windows\system32\taskkill.exe
      taskkill /im ashdisp.exe /f
      4⤵
      PID:4960
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im ashenhcd.exe /f
  2⤵
  PID:4184
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im ashenhcd.exe /f
    3⤵
    PID:2448
  - - C:\Windows\system32\taskkill.exe
      taskkill /im ashenhcd.exe /f
      4⤵
      PID:1280
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im ashlogv.exe /f
  2⤵
  PID:3964
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im ashlogv.exe /f
    3⤵
    PID:4852
  - - C:\Windows\system32\taskkill.exe
      taskkill /im ashlogv.exe /f
      4⤵
      PID:3772
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im ashmaisv.exe /f
  2⤵
  PID:3520
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im ashmaisv.exe /f
    3⤵
    PID:4160
  - - C:\Windows\system32\taskkill.exe
      taskkill /im ashmaisv.exe /f
      4⤵
      PID:2856
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im ashpopwz.exe /f
  2⤵
  PID:3192
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im ashpopwz.exe /f
    3⤵
    PID:4576
  - - C:\Windows\system32\taskkill.exe
      taskkill /im ashpopwz.exe /f
      4⤵
      Kills process with taskkill
      PID:4108
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im ashquick.exe /f
  2⤵
  PID:4928
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im ashquick.exe /f
    3⤵
    PID:3876
  - - C:\Windows\system32\taskkill.exe
      taskkill /im ashquick.exe /f
      4⤵
      PID:224
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im ashserv.exe /f
  2⤵
  PID:2868
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im ashserv.exe /f
    3⤵
    PID:428
  - - C:\Windows\system32\taskkill.exe
      taskkill /im ashserv.exe /f
      4⤵
      Kills process with taskkill
      PID:2748
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im ashsimp2.exe /f
  2⤵
  PID:2464
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im ashsimp2.exe /f
    3⤵
    PID:3464
  - - C:\Windows\system32\taskkill.exe
      taskkill /im ashsimp2.exe /f
      4⤵
      PID:408
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im ashsimpl.exe /f
  2⤵
  PID:4584
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im ashsimpl.exe /f
    3⤵
    PID:1404
  - - C:\Windows\system32\taskkill.exe
      taskkill /im ashsimpl.exe /f
      4⤵
      PID:1384
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im ashskpcc.exe /f
  2⤵
  PID:5100
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im ashskpcc.exe /f
    3⤵
    PID:1624
  - - C:\Windows\system32\taskkill.exe
      taskkill /im ashskpcc.exe /f
      4⤵
      PID:2952
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im ashskpck.exe /f
  2⤵
  PID:3356
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im ashskpck.exe /f
    3⤵
    PID:3144
  - - C:\Windows\system32\taskkill.exe
      taskkill /im ashskpck.exe /f
      4⤵
      PID:1620
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im ashupd.exe /f
  2⤵
  PID:5016
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im ashupd.exe /f
    3⤵
    PID:1412
  - - C:\Windows\system32\taskkill.exe
      taskkill /im ashupd.exe /f
      4⤵
      PID:1760
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im ashwebsv.exe /f
  2⤵
  PID:4080
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im ashwebsv.exe /f
    3⤵
    PID:4176
  - - C:\Windows\system32\taskkill.exe
      taskkill /im ashwebsv.exe /f
      4⤵
      Kills process with taskkill
      PID:2692
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im aswdisp.exe /f
  2⤵
  PID:1608
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im aswdisp.exe /f
    3⤵
    PID:3748
  - - C:\Windows\system32\taskkill.exe
      taskkill /im aswdisp.exe /f
      4⤵
      PID:2296
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im aswregsvr.exe /f
  2⤵
  PID:4276
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im aswregsvr.exe /f
    3⤵
    PID:3532
  - - C:\Windows\system32\taskkill.exe
      taskkill /im aswregsvr.exe /f
      4⤵
      PID:3384
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im aswserv.exe /f
  2⤵
  PID:1576
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im aswserv.exe /f
    3⤵
    PID:2456
  - - C:\Windows\system32\taskkill.exe
      taskkill /im aswserv.exe /f
      4⤵
      PID:908
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im aswupdsv.exe /f
  2⤵
  PID:2260
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im aswupdsv.exe /f
    3⤵
    PID:3992
  - - C:\Windows\system32\taskkill.exe
      taskkill /im aswupdsv.exe /f
      4⤵
      PID:3116
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im aswwebsv.exe /f
  2⤵
  PID:1816
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im aswwebsv.exe /f
    3⤵
    PID:3688
  - - C:\Windows\system32\taskkill.exe
      taskkill /im aswwebsv.exe /f
      4⤵
      PID:4304
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avengine.exe /f
  2⤵
  PID:4792
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avengine.exe /f
    3⤵
    PID:3260
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avengine.exe /f
      4⤵
      PID:2292
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im afwserv.exe /f
  2⤵
  PID:4344
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im afwserv.exe /f
    3⤵
    PID:4552
  - - C:\Windows\system32\taskkill.exe
      taskkill /im afwserv.exe /f
      4⤵
      Kills process with taskkill
      PID:4616
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avastemupdate.exe /f
  2⤵
  PID:4076
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avastemupdate.exe /f
    3⤵
    PID:2964
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avastemupdate.exe /f
      4⤵
      PID:4484
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im unsecapp.exe /f
  2⤵
  PID:3052
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im unsecapp.exe /f
    3⤵
    PID:2884
  - - C:\Windows\system32\taskkill.exe
      taskkill /im unsecapp.exe /f
      4⤵
      PID:4036
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avgamsvr.exe /f
  2⤵
  PID:4204
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avgamsvr.exe /f
    3⤵
    PID:4308
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avgamsvr.exe /f
      4⤵
      PID:2092
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avgas.exe /f
  2⤵
  PID:3536
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avgas.exe /f
    3⤵
    PID:3796
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avgas.exe /f
      4⤵
      PID:2932
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avgcc32.exe /f
  2⤵
  PID:684
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avgcc32.exe /f
    3⤵
    PID:448
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avgcc32.exe /f
      4⤵
      PID:2156
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avgcc.exe /f
  2⤵
  PID:3352
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avgcc.exe /f
    3⤵
    PID:3076
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avgcc.exe /f
      4⤵
      Kills process with taskkill
      PID:4340
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avgctrl.exe /f
  2⤵
  PID:4420
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avgctrl.exe /f
    3⤵
    PID:2208
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avgctrl.exe /f
      4⤵
      PID:1812
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avgdiag.exe /f
  2⤵
  PID:3708
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avgdiag.exe /f
    3⤵
    PID:2372
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avgdiag.exe /f
      4⤵
      Kills process with taskkill
      PID:4032
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avgemc.exe /f
  2⤵
  PID:4396
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avgemc.exe /f
    3⤵
    PID:4100
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avgemc.exe /f
      4⤵
      PID:4244
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avgfws8.exe /f
  2⤵
  PID:4676
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avgfws8.exe /f
    3⤵
    PID:1244
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avgfws8.exe /f
      4⤵
      PID:2204
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avgfwsrv.exe /f
  2⤵
  PID:4860
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avgfwsrv.exe /f
    3⤵
    PID:4260
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avgfwsrv.exe /f
      4⤵
      PID:952
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avginet.exe /f
  2⤵
  PID:1112
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avginet.exe /f
    3⤵
    PID:3016
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avginet.exe /f
      4⤵
      PID:3772
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avgmsvr.exe /f
  2⤵
  PID:32
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avgmsvr.exe /f
    3⤵
    PID:1496
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avgmsvr.exe /f
      4⤵
      PID:2128
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avgrssvc.exe /f
  2⤵
  PID:2192
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avgrssvc.exe /f
    3⤵
    PID:2080
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avgrssvc.exe /f
      4⤵
      PID:4172
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avgscanx.exe /f
  2⤵
  PID:3716
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avgscanx.exe /f
    3⤵
    PID:3128
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avgscanx.exe /f
      4⤵
      PID:3956
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avgserv9.exe /f
  2⤵
  PID:1088
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avgserv9.exe /f
    3⤵
    PID:996
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avgserv9.exe /f
      4⤵
      PID:3484
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avgserv.exe /f
  2⤵
  PID:2132
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avgserv.exe /f
    3⤵
    PID:1248
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avgserv.exe /f
      4⤵
      PID:1056
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avgupd.exe /f
  2⤵
  PID:1140
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avgupd.exe /f
    3⤵
    PID:2896
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avgupd.exe /f
      4⤵
      PID:1404
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avgupdln.exe /f
  2⤵
  PID:1508
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avgupdln.exe /f
    3⤵
    PID:4908
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avgupdln.exe /f
      4⤵
      PID:2740
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avgupsvc.exe /f
  2⤵
  PID:1804
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avgupsvc.exe /f
    3⤵
    PID:2196
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avgupsvc.exe /f
      4⤵
      PID:3144
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avgvv.exe /f
  2⤵
  PID:1220
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avgvv.exe /f
    3⤵
    PID:2604
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avgvv.exe /f
      4⤵
      PID:1412
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avgwb.dat /f
  2⤵
  PID:2988
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avgwb.dat /f
    3⤵
    PID:3112
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avgwb.dat /f
      4⤵
      PID:1840
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avgw.exe /f
  2⤵
  PID:1784
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avgw.exe /f
    3⤵
    PID:4012
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avgw.exe /f
      4⤵
      PID:2500
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avgwizfw.exe /f
  2⤵
  PID:2872
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avgwizfw.exe /f
    3⤵
    PID:1588
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avgwizfw.exe /f
      4⤵
      PID:908
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im guard.exe /f
  2⤵
  PID:1576
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im guard.exe /f
    3⤵
    PID:3332
  - - C:\Windows\system32\taskkill.exe
      taskkill /im guard.exe /f
      4⤵
      Kills process with taskkill
      PID:4560
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avgcsrvx.exe /f
  2⤵
  PID:5092
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avgcsrvx.exe /f
    3⤵
    PID:1912
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avgcsrvx.exe /f
      4⤵
      Kills process with taskkill
      PID:4656
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avgidsagent.exe /f
  2⤵
  PID:1816
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avgidsagent.exe /f
    3⤵
    PID:4636
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avgidsagent.exe /f
      4⤵
      PID:2292
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avgidsmonitor.exe /f
  2⤵
  PID:4612
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avgidsmonitor.exe /f
    3⤵
    PID:1352
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avgidsmonitor.exe /f
      4⤵
      PID:2552
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avgidsui.exe /f
  2⤵
  PID:4344
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avgidsui.exe /f
    3⤵
    PID:1368
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avgidsui.exe /f
      4⤵
      PID:4756
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avgidswatcher.exe /f
  2⤵
  PID:2876
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avgidswatcher.exe /f
    3⤵
    PID:3868
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avgidswatcher.exe /f
      4⤵
      Kills process with taskkill
      PID:4640
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avgam.exe /f
  2⤵
  PID:1756
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avgam.exe /f
    3⤵
    PID:400
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avgam.exe /f
      4⤵
      PID:1536
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avgnsx.exe /f
  2⤵
  PID:2308
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avgnsx.exe /f
    3⤵
    PID:4296
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avgnsx.exe /f
      4⤵
      PID:1408
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avgfws9.exe /f
  2⤵
  PID:1724
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avgfws9.exe /f
    3⤵
    PID:2960
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avgfws9.exe /f
      4⤵
      PID:4652
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avgrsx.exe /f
  2⤵
  PID:1736
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avgrsx.exe /f
    3⤵
    PID:4548
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avgrsx.exe /f
      4⤵
      PID:840
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avgtray.exe /f
  2⤵
  PID:4940
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avgtray.exe /f
    3⤵
    PID:3076
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avgtray.exe /f
      4⤵
      PID:3352
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avgwdsvc.exe /f
  2⤵
  PID:1812
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avgwdsvc.exe /f
    3⤵
    PID:1208
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avgwdsvc.exe /f
      4⤵
      PID:3048
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im sidebar.exe /f
  2⤵
  PID:4028
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im sidebar.exe /f
    3⤵
    PID:4944
  - - C:\Windows\system32\taskkill.exe
      taskkill /im sidebar.exe /f
      4⤵
      PID:3708
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avgchsvx.exe /f
  2⤵
  PID:4580
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avgchsvx.exe /f
    3⤵
    PID:2204
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avgchsvx.exe /f
      4⤵
      PID:1244
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avgcmgr.exe /f
  2⤵
  PID:4364
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avgcmgr.exe /f
    3⤵
    PID:952
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avgcmgr.exe /f
      4⤵
      PID:5008
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avgemcx.exe /f
  2⤵
  PID:4852
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avgemcx.exe /f
    3⤵
    PID:4476
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avgemcx.exe /f
      4⤵
      PID:2200
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avgfws.exe /f
  2⤵
  PID:3520
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avgfws.exe /f
    3⤵
    PID:4160
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avgfws.exe /f
      4⤵
      PID:2856
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avgmfapx.exe /f
  2⤵
  PID:3192
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avgmfapx.exe /f
    3⤵
    PID:4576
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avgmfapx.exe /f
      4⤵
      PID:1044
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avgcefrend.exe /f
  2⤵
  PID:800
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avgcefrend.exe /f
    3⤵
    PID:3876
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avgcefrend.exe /f
      4⤵
      PID:3308
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avgcsrva.exe /f
  2⤵
  PID:972
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avgcsrva.exe /f
    3⤵
    PID:1764
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avgcsrva.exe /f
      4⤵
      PID:2748
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avgemca.exe /f
  2⤵
  PID:2132
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avgemca.exe /f
    3⤵
    PID:1168
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avgemca.exe /f
      4⤵
      PID:4904
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avgnsa.exe /f
  2⤵
  PID:4884
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avgnsa.exe /f
    3⤵
    PID:2740
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avgnsa.exe /f
      4⤵
      PID:4908
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avgrsa.exe /f
  2⤵
  PID:5044
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avgrsa.exe /f
    3⤵
    PID:1620
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avgrsa.exe /f
      4⤵
      PID:5088
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im loggingserver.exe /f
  2⤵
  PID:768
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im loggingserver.exe /f
    3⤵
    PID:2604
  - - C:\Windows\system32\taskkill.exe
      taskkill /im loggingserver.exe /f
      4⤵
      PID:1220
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im toolbarupdater.exe /f
  2⤵
  PID:4256
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im toolbarupdater.exe /f
    3⤵
    PID:3208
  - - C:\Windows\system32\taskkill.exe
      taskkill /im toolbarupdater.exe /f
      4⤵
      PID:4436
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im wtusystemsuport.exe /f
  2⤵
  PID:2500
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im wtusystemsuport.exe /f
    3⤵
    PID:804
  - - C:\Windows\system32\taskkill.exe
      taskkill /im wtusystemsuport.exe /f
      4⤵
      PID:2684
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avgregcl.exe /f
  2⤵
  PID:2664
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avgregcl.exe /f
    3⤵
    PID:2956
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avgregcl.exe /f
      4⤵
      Kills process with taskkill
      PID:1524
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avgsystx.exe /f
  2⤵
  PID:4588
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avgsystx.exe /f
    3⤵
    PID:2980
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avgsystx.exe /f
      4⤵
      PID:2936
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im vprot.exe /f
  2⤵
  PID:2044
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im vprot.exe /f
    3⤵
    PID:5036
  - - C:\Windows\system32\taskkill.exe
      taskkill /im vprot.exe /f
      4⤵
      Kills process with taskkill
      PID:5092
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avcenter.exe /f
  2⤵
  PID:2292
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avcenter.exe /f
    3⤵
    PID:4636
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avcenter.exe /f
      4⤵
      PID:1816
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avconfig.exe /f
  2⤵
  PID:2552
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avconfig.exe /f
    3⤵
    PID:1352
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avconfig.exe /f
      4⤵
      PID:4792
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avesvc.exe /f
  2⤵
  PID:2164
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avesvc.exe /f
    3⤵
    PID:1368
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avesvc.exe /f
      4⤵
      PID:4488
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avmailc.exe /f
  2⤵
  PID:5076
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avmailc.exe /f
    3⤵
    PID:2488
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avmailc.exe /f
      4⤵
      PID:3480
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avmcdlg.exe /f
  2⤵
  PID:1692
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avmcdlg.exe /f
    3⤵
    PID:468
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avmcdlg.exe /f
      4⤵
      PID:1316
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avnotify.exe /f
  2⤵
  PID:4116
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avnotify.exe /f
    3⤵
    PID:4832
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avnotify.exe /f
      4⤵
      Kills process with taskkill
      PID:5024
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avscan.exe /f
  2⤵
  PID:4652
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avscan.exe /f
    3⤵
    PID:2960
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avscan.exe /f
      4⤵
      PID:1724
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im guardgui.exe /f
  2⤵
  PID:1936
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im guardgui.exe /f
    3⤵
    PID:3476
  - - C:\Windows\system32\taskkill.exe
      taskkill /im guardgui.exe /f
      4⤵
      PID:2900
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avadmin.exe /f
  2⤵
  PID:3092
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avadmin.exe /f
    3⤵
    PID:3648
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avadmin.exe /f
      4⤵
      PID:4940
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cmd /c taskkill /im avfwsvc.exe /f
  2⤵
  PID:3048
- - C:\Windows\system32\cmd.exe
    cmd /c taskkill /im avfwsvc.exe /f
    3⤵
    PID:1208
  - - C:\Windows\system32\taskkill.exe
      taskkill /im avfwsvc.exe /f
      4⤵
      PID:2524

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

aic_file_icons.png.NBA

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\aic_file_icons.png.NBA
Size 50KB
SHA256 26f648556ab2532dedcce2ce1b0f93ed1b6b9b3b50e57d7f24951c1487a27cd1
MD5 6056c2a67cc546dc449765dced8e761c
SHA1 ba0c623f13b41a25236405e3bb3ccccd8baad66b
SHA512 2fac1ee94d2467d108ec0e1ce87d91be38cc970ae63cffb787632907311b57bb9ff5005f03bac3caee8b9120acb3995f2000983272c40d8f179cd9f5cbb9d243
SSDEEP 1536:X4yoIJZRcW2Qbcx4Qi1Qd5/idfVJVkMvmIR0:fVJwLX//EfvV1uO0
MD5 SHA1 SHA512 SSDEEP

Submit Download

selection-actions.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions.png
Size 1KB
SHA256 98e3b7bb823818b03dee270d1a1875945492eaffccd7106c7f3f42b94d7bff89
MD5 174b2e22ddd1986fd85f2db269c37bb2
SHA1 458b599ee9468f59918141d44c019bb66ad28204
SHA512 7edb8ed13313b1139f239462a9439173d558f02c6e4508530d67783f596d78b71fba051cf7f9c14bd2bd1dff70b70e1516a3226a7e24a43d2414059350679ee2
MD5 SHA1 SHA512

Submit Download

selection-actions2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions2x.png
Size 3KB
SHA256 ed0803261777a7beb6f43b3fcf345ff48c172df3bd258d3902b093b47b7761c8
MD5 b54fa2c5a44b012a33f25b8daa059a25
SHA1 2b656355ded60f81d4b41239b1f1db194e9cb580
SHA512 d578d6ce64edf20c9418745d690f5e27e6969e6504e7e4c3faac7d0bdb7c4b8876262e63834615934781ba15b9eb915106bcfeaacf0866161b4495921ccfb851
MD5 SHA1 SHA512

Submit Download

s_folder-default_32.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_folder-default_32.svg
Size 640B
SHA256 15226ff772b9584ecce11603e3de53efa49242541b968cf3c54db21d0879f55b
MD5 8eb863249b0ee5f447505ac8e5937c45
SHA1 18a7a25b6a1f4d5f7dbd2acaffea4c73c30e54e4
SHA512 51b237d2473385deb88453f88a855e83add8d64890c1cef62b6333c685f1cc888935217275e32cda34e9ec5774f6f678696cc0705819ed1579340af844323169
MD5 SHA1 SHA512

Submit Download

s_reject_18.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_reject_18.svg
Size 799B
SHA256 72bf598ea489fe0270e4b2bf5c8f6aa064397f06bb90e207486a0c98a906f64a
MD5 af5a9f661bbd64399729c379ad4203b2
SHA1 47cecb4b8304990127c306dc2349b14547dc8264
SHA512 86054d7d77d8d7e8298bd06afd2c09d12c9d324fbde773387cff73e92ec0bc45a1a1be91098fe6f4bdf1045564f0cb1584bbf18cd0e0c993b69ad83c157e14b9
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\root\ui-strings.js
Size 3KB
SHA256 97a0a780717b0079e966a861c3bfbe20959107140cff0631116e57334d5e9aa4
MD5 36295664e56435ab1a0a0017715f7eb2
SHA1 2c854c844478355b8a9cd101dcb4a7af534c31cf
SHA512 77c1975fafeb24ff10a701db4358b9316c9dc90990bd5a15988d915aa5fd8ba1d9696c8b3360e810ebec84fb494bb48f1379b06cdbcf8ac5d2a080bf34b3dc5d
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\en-il\ui-strings.js
Size 28KB
SHA256 f037114536a3d36b224aedd36af2b6312e33bb47a02c304654431bf72235b4dc
MD5 0861c0025665df846c1ba076f177a24e
SHA1 9c30e704cf4fcbf684ff486b877f6466cf4b172b
SHA512 38ed0b29fb35f725b99c593fac16e73f88ed1ac587cdc849ce016811ccf02a7a520b2cf2c136fb5737cf58383d3db64a26b8f60270f164dd999405ad010531fe
SSDEEP 768:g2Mv6LO2wPiFG7wB9R6MZiO6qWRJwObBYXFE89Bwb/t:g2Mv6LOXsTBjZW7VbBYX+89BUt
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\en-ae\ui-strings.js
Size 7KB
SHA256 896a822c405c40fc39e4c937db525af4fec321414d7dfac5be27300b4d61f3d1
MD5 a814220d98d047bcb35654e85093e916
SHA1 7d0824a3d4cbb6b5261036e3b1d0628753200fcd
SHA512 1ed16d864e462ca8642fd331100c6ece390bcce95b6baee8ad49d2862bcaa42ff73e08021a37c6c7e2090ed2ac4e0932879d5f5b4efd20a84c5de43e75d1f9e7
SSDEEP 192:Qh9q0TiLQ4arlhcGsVCJJ77sLDAZXvSOTTsIFFqybxG:gMPLQ4arliGsVCJ5qDAZzTRFFRxG
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\root\ui-strings.js
Size 4KB
SHA256 58c75afaecb42eeb4dae6303d31cf2d02c6c58525a1a6c40da5bc5ea6aeaf495
MD5 eebfc0954d1d8c3a65049e95c74589ef
SHA1 f1d94f56540acf7bb731c8824255765a43f1bfdf
SHA512 289b61b142ccda7ce3226a99537d6acf606872e33891d9ea17b7794b2eabf76b245c99a8db445bb45a4c4c5c666881f8d0c27e12c37780fbade712b50a8d3bf6
SSDEEP 96:QSTGc1eyduf5ISX+BOJ7jVvyakBKDedDi4I1ZjbQeTaV4tP6BG:QSTaYuRFOBYtNkdOX19QnV4tCBG
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\sl-sl\ui-strings.js
Size 974B
SHA256 7a9a61e7fe0075c210b5b50e54009cd06421afa7a2bc5c1b67b53f225ea24c8d
MD5 d64ee797605e35499e878938adb83a0c
SHA1 2b98db879ba70e2047ca6ffbfc024a9012b0aa81
SHA512 4a4c8d0fe082a274af17b9dcb6d63f43584276cd6966377f505294b74f7de1cea04954ce5d5e3bc1fe4d1f682ff087a95c64615cc869e2e551950614f47f4ea2
MD5 SHA1 SHA512

Submit Download

exportpdf-tool-view.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\js\plugins\exportpdf-tool-view.js
Size 393KB
SHA256 bc7c6cd8bed32f39eb9de4064c9f159d2c4ba07da823102e8c92b6fdf4405ea4
MD5 8955ceed7291eff6d35ab3b4e84a50b5
SHA1 f1e1b3239beb99b1b5ae06471680bca71bd1fb3b
SHA512 77cb7d413fb8dde5d5e9a38873c65b8f730df5f71685ae9481c543ded9526484e08cce4faff67188f036cd761dd8a45a339c2e9ae337eb4b712aebf1bbdab32f
SSDEEP 6144:v37pbVrnQAd6adkJ2/tiqeUgM5LyZVL5q6VrHt9vCoUX6A26Iev7Hu2nmsZLu:vvrQ/GQqem5q5q6VrHt9vOphSpsZi
MD5 SHA1 SHA512 SSDEEP

Submit Download

convertpdf-rna-selector.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\js\plugins\rhp\convertpdf-rna-selector.js
Size 175KB
SHA256 ee5f94febcd9a039974080d0262f5427c13a9922424dbdb581bb6a44380d624a
MD5 5424723bd40b6ca47fde75ffb956dff7
SHA1 eef73c46e64c6c72ee7bdfa00984537555f8d152
SHA512 d77e7dbf743801ba7dbe3e4ecf455ce48c00a3ae527a4d149dfa4b22ea4e1d6644850bf38500ca0a169cf5d33cd270b11b382d99ffa87d8a0c5b047c7ba35a8b
SSDEEP 3072:eAJ5NvYA2UT4Ad0mD0/yOjlbrDTmzqOeP0AvSRV7H7qmq5K5aUDCO8diVHZG3Zzh:nr2wlz0/3lbG00AK7HmpI5DDCOwiV5IN
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\app-center\js\nls\en-il\ui-strings.js
Size 2KB
SHA256 5b9d5bee4bc5fe534bcce73b08704d986903c3ac3239940f035a0e8e2d251ba6
MD5 8e1628155d6e1b63da148f61cc8cc335
SHA1 c73e5272cf9bfcf87fb5c6bcd75a9819c72e3e34
SHA512 db01e74f0f3236cb941bab871b5f4f286537a979243ccbad6b777921996584fe573b3b9560d658040f28a9ad2084ea5dbeb6496924bfa6870f56e9c1813f4f02
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\js\nls\root\ui-strings.js
Size 1KB
SHA256 d0096ceb4d12f2fbd3ca659621881c3b4e56f970e9b0b7465fe08831febd5bd3
MD5 a8636480b30074d46da392b9cce8c456
SHA1 17dd2289e5f52b7e7db0127daecbb887e6dac7ad
SHA512 c334ea3dc0fe16f805fc0396024b7991d4b51b36a9b52b2b2256d68d9cb96f82f87fe9d7d8528bae1aa985eb44c9f4f8d4bb2f486fe128f4435da9e733a570ae
MD5 SHA1 SHA512

Submit Download

example_icons2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons2x.png
Size 1KB
SHA256 88f30166b0014dd606bbab7b7e66cf55dcc1e35fe82ae0fe6bf8769cefd7ad83
MD5 e9fb96018c66fcc7198f67fbd88e3ac7
SHA1 a4d79a6607998a7844f0b5831d6ea6c76bbe5475
SHA512 b4d3d0de8c50b82ed45ee5e5a8e02dd6fa9f9e0258856c8a6a763cf4924b3e1cda31fd5301ee80cd86427887206fc6de0e73a105500df33b4a24fbbf5e7fbe40
MD5 SHA1 SHA512

Submit Download

rhp_world_icon.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon.png
Size 533B
SHA256 7b340fe5b99f19203a1c53eb6c774accf58cf90fb307f0604319a2478ca41de8
MD5 8371f4b5c0b2f3f3ea1af6cb613eecc4
SHA1 20ab64bb0edddfb350604e71e4b1c041c318a27f
SHA512 ae1d8c5e1ad17f7f01d5f78201a3325132497b552b64c05663d63b78640304aecf7d76ec5e0b6e09e157618cde53cb0787ac51eed9f6bd0e2b18fa178aae02b0
MD5 SHA1 SHA512

Submit Download

rhp_world_icon_2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_2x.png
Size 699B
SHA256 9809a183197fac1b6c4b2f526b344a2424096695a3473c95fdde338e99278603
MD5 d5962a92919a5481368bc0a3bc0c9c90
SHA1 57a2cee80518b9bcabd0b0889242133a02b3a9a4
SHA512 15a531167752771f0835620e9ba951825ca20741f919ea589d4329362ad1256ca664d63ffcae78b4f8df7927cd38ad6694c6d0f2829643c1031bddcde80f69ff
MD5 SHA1 SHA512

Submit Download

rhp_world_icon_hover.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover.png
Size 476B
SHA256 3f89fe98881c9bc21dc81d8ea9a44ab6593a8305179595903113f75f953c4529
MD5 4b2a626ff6e9e5b90c4ecd0287fe7aae
SHA1 0b5afbb3b8aad05f5172ca5250f9329db53b8615
SHA512 c4aac532b2469b8d9b5d8e29fb4f7c07d46c9e93f95495f0e7bb78322bb580ff8b424d6df7e16e624f44a818e4a12fb12e99c274c5d5ddc1eac2a06439dc4518
MD5 SHA1 SHA512

Submit Download

rhp_world_icon_hover_2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover_2x.png
Size 640B
SHA256 6aa23e058c6829b7a299944fecc672121d1a6be6cfaa2b217c07d82eea14e8e7
MD5 a6b77835b0ee2af2137a7e5b94540d5f
SHA1 bf2b893edac7151809620d601d2a1322c540e55e
SHA512 838846080fa35d6b9f951751a0581be7877378e3e489efea820e35a412c9184783958d7b8abe0df167de1233fd0828f66300c20d2dfceab1211273fa0b68e4a8
MD5 SHA1 SHA512

Submit Download

example_icons.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\example_icons.png
Size 771B
SHA256 04be5a0daaec29074a795c0b6dfefcf56de295f2fab3ec55da64de7d1cdea078
MD5 cc9dd6aa3ec0655ddc4557b6adb17f8e
SHA1 b38a24eab74cb45b8dfeff9b855e549340afee89
SHA512 b6b9519c7ae1655b5b16f41d356760a3a0ada8ee216af93eb3ff8b454435413177d8134d428bc712d945035bedec1c0beaef5ac748a7c467b1f33ac06029ca46
MD5 SHA1 SHA512

Submit Download

rhp_world_icon.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon.png
Size 476B
SHA256 0d42c10826287a3aaee7c17e2f3d377ade1e41d91354892f47e41673d235c821
MD5 3b1ed34a97a161fd00baff05029ebb5d
SHA1 61dc811190177ff028335cf17657704a6c410e1b
SHA512 98759f3a3e8aa63ef4f5e3ff9147f6a0515eae24a3d24d208762dc57a689e0a14bc3aa7cd87acf270d878ca479c054db0dbfe52da91bad8da3ae691fa6387bd7
MD5 SHA1 SHA512

Submit Download

rhp_world_icon_2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png
Size 640B
SHA256 b3acdd5623f355cd05f4db39421f6459566c8be3fdf7f0107a5fa7dd7aee1767
MD5 0dffb41fe5c3dda4874fe049b743a44e
SHA1 1cdbf9f79499223283e2bfdad2e830195a222f13
SHA512 665e350298f7a5c02b0c19384d27a920ff6705cce122257b017169c23b95fc4cd943a6ff1724977342c8580570a759d46f0f44dffde6e6b6a0182e7853673021
MD5 SHA1 SHA512

Submit Download

rhp_world_icon_hover.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png
Size 476B
SHA256 dfa3188ec734ab0e61f18800f990333106aa4b9e2962318c7549991c1c945b09
MD5 d8c68e619240302028ad740dddd9d52d
SHA1 4180a6ada3c247a96cfe8665e09d21944d98e03b
SHA512 cba34155891c09d1f6d80bb6d09effdb25f2cd884b3bdaa4620ca28ce980c5acb6928880dacea3eb03041b341f961e00326d4463170291518c2ae04b5a457205
MD5 SHA1 SHA512

Submit Download

rhp_world_icon_hover_2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png
Size 640B
SHA256 eb23d315200c80a850b6505434c4d178825730e001881ec4deffe00f05fdb876
MD5 6ce92625c6a406792bfe884739f7890b
SHA1 fb6c71b23d94801d62276526bcd97bfb245b2203
SHA512 b7e8740b1908f6688e20de04a83d4c0c5f649f0473a3fbded56a75c8676ccb90de1cafd4362e9f95d1c980d9e48712c1fd3d5ed8f55c1467be7703c28d86f13f
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\js\nls\fr-ma\ui-strings.js
Size 1KB
SHA256 5204caf724df99a9f95454c10e530f08375ab4af95c55fda945dd1670eeabf71
MD5 bcbbca3bec1599320765e849b8964bf9
SHA1 d88173bb2462603ca20c3f85d15976fc24fe65a5
SHA512 aff70fe280d16c816967dc495934bde65155fd07e4bbc459bce2fbe9da8be8b15884bbdf49bc2c5269bea16d11eb8eda79005c6f1625207971ebd9adc657510f
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\desktop-connector-files\js\nls\root\ui-strings.js
Size 1KB
SHA256 d65b5e88fb4ee4143ee3f3d8de554a35fcec381361754a9123a79c6c56fec30e
MD5 e3c1e117ef8c8ad293c323b05dfb862d
SHA1 b8569cf6a7b8ab8d34697fd127d06f47992d220e
SHA512 bcafac43238e0ce5b05fd542e4ff0f84f83c62627212989982866d20c37e1a284d919b3d025ab721dd6e60df270597596f77f3c95b0a6bf95a2213cbb651a0ca
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\en-ae\ui-strings.js
Size 8KB
SHA256 6be44e6bade82175691028136c0738689e79a52ead56bfb24fb5195a1b3cb77f
MD5 15df3a083f229681249f7cfed1233e72
SHA1 5579b0770566702deb02e9b9d121a0894bb91d97
SHA512 5e86a5a76f787ffbed146f6160627915574389af2b83f485fbccf1835e4ddb3e32cdcd067837843fbc03802a0e4e5d8bb4b4dc604e02f7282acec2ce881a044a
SSDEEP 192:JYAWqfEP20XduPYd5KB8/ntP113Q3X4HLyhBYIbtOmtV0uszae8r1euwG:q9a0XdugdUBSpQ3X4HLyjbxV0uJVUHG
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\js\nls\en-il\ui-strings.js
Size 1KB
SHA256 89c6e74533e0cad379679a9dad7166785b6ec1aec178023d31044c2ea284f461
MD5 ed461c28b29c88ed169be48363cd6209
SHA1 5457859eb2a211043f5caca14b580fcc270df81d
SHA512 b5ba54af5c582a2d4ca01336031452975daf23ee4ab9073525def51b0ab4891ce19d72b6b8c0eab466fafaa296ab9b85d5823c9aff94cc05beb135a4b28cfa53
MD5 SHA1 SHA512

Submit Download

example_icons.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\example_icons.png
Size 771B
SHA256 923ffdec7cf88aa90ff3bdfa0e57ee67dff87b457c3cae8cd9509b73f356e339
MD5 3d56d2fdcb88f3735dd5a0c7a0d433f4
SHA1 f1bde2c5dc52fcf29952fed91d9d1c13606edbda
SHA512 21ee6a0b4de5c69eefbfd4ef6771b7d9846101de83dc53aa6f8570ad4eb2d556ef5453c448118f41d534668d1e7e49ec75b659b2fff096a212de619b158bcb5b
MD5 SHA1 SHA512

Submit Download

example_icons2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\example_icons2x.png
Size 1KB
SHA256 7a88f03463fb49c947c175740a26ec9d7c0b49118b7288ec81936340b947a839
MD5 4720ff34e7721ca8e6edebbe3cde62d6
SHA1 d5ec332a3a3044a177a99065e42ef88335d15f39
SHA512 4d39e95f3a177f5ed581dd70b37f4bb9352c559533ed898df633747514e82e603f07c5dde96dd1d8886a04c0ca2a5e4b435a8319bcbcd30471b26b677fdafa8f
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\js\nls\root\ui-strings.js
Size 1KB
SHA256 a51a7cbbb7a1b5fbb9f03fd88b41405de84baec067555052b9cc8a0d6a5650f1
MD5 0e5300cf59f2fdc102d0710a484a5e0b
SHA1 dd8771c8d99f47ed915051077814fb7e0d3d63b6
SHA512 a9f79b25a9458e9e2f469a1348ce477f888042f378e02de57ce799031ca50276d393ba56e9a9de26d8c3bdaf8d87a7629bd17aa415b672568bcc914c6d8e803d
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\en-il\ui-strings.js
Size 938B
SHA256 7c7357627d0f4d297f7e754f6da1f1083e5e7d1cd7b868605822991c3c08c96a
MD5 588d560f792df446c0a96e89ab0749e5
SHA1 2a40e259e3d89cd470eb0af8dfd7067400f26c92
SHA512 278da2c1332b50fd614a0a3841c850ee6bf8295ec11903b3db0d78b8493e2b26d541a4750c4e3d994f8fa93db792d5c9a9511c1a541b200bf5dd16ceda7339b2
MD5 SHA1 SHA512

Submit Download

icons.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons.png
Size 7KB
SHA256 1fa24c7925007a3af3e672b014bae47b42b87c8197dd5eb5402f9751beaf86a8
MD5 28e5c022c88ecfdc102ca8ab1f316562
SHA1 02fabbd5bbadd0ca708309166c0d3efc56bb1179
SHA512 5ce2a9ab693a4d54802972c043e16ce765f3bf4020dcaa499ec1fa91373d54a0d4f8cd1fe72bf0b2b01d9b7f834187c32ee1a2409d549977f12afe39f13763ed
SSDEEP 192:28lmc9gfTBYuo9F67Kq75/pR9azuWL9MZ/QEfBodyuqR+EhAqyGeH4AG:2imc9iTuuo9E5l/79aRkY6Bwo3mnGeHG
MD5 SHA1 SHA512 SSDEEP

Submit Download

icons_ie8.gif

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons_ie8.gif
Size 8KB
SHA256 e37d12ebbb2139494e420d90ead5bb3b408b537604b48b6fa86b02bfacf456d4
MD5 9402e245e9d860658e0f2972be1b581e
SHA1 f37b26e4eb98eb85b8d696fd7b26d9e3587886eb
SHA512 d73cfc2a304071155b06f1abaa5d5954c9e6050fdc6ef88c07245ef152fbdd7140669af1714023734290ba1a49f1d74f723236692b79d0411f2e08c21f1b8d50
SSDEEP 192:VAm5GX+JvnqizbRnMp8LhWB+295Fp2QyWuZjRNMRAVavc5WAEr2DHG:VAmc+huUhc9p2XL9/hak5WAEAG
MD5 SHA1 SHA512 SSDEEP

Submit Download

icons_retina.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons_retina.png
Size 15KB
SHA256 60226c9ac5cbc778721b6a4408c44670c798e9b0130dc9c8ef3fc02f1c70497d
MD5 a3c941e1bd46966709198839cccf8217
SHA1 c25d9adff7ef60c80e7369fcb79f712e56f6ad9d
SHA512 dd6e4a57c5dc57d412dd3a1b0ea797b09de5da82504973cc3c00a467e6166df14298f7ee58ef9922ab7c01e1681a2eed11fd015c7f32609d63ca3846260b82c3
SSDEEP 384:eE/+uQpiPzH/PXULHUpHCAay56koi4Ck1fdoYnTlYIG:5GuQpiPTkjEZ563iGZut
MD5 SHA1 SHA512 SSDEEP

Submit Download

new_icons.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\new_icons.png
Size 8KB
SHA256 1b902fbf3e37dbbf7eb0dae51da618f949e32c6f0d103bb35f6929c13337ffbd
MD5 0414979691312bce6a03c5b362da4098
SHA1 08697159aea9f5c355db23b5793edcf6170b3ee1
SHA512 d7858c1f937b4ebf0d0d1f65025719d32e0a046ba8933a6d19fdd46dbc88dbdfaecfd6c9270e96c9c54537b757d125029c941ada3d4cfca75689e7706965b93e
SSDEEP 192:2rgm1EC5n83KCLvuhW+c8+WBsBl1n+ptQysHkQuMVC9bOlFG:hm+T3KIv0W+o/gpt+tE9bYG
MD5 SHA1 SHA512 SSDEEP

Submit Download

new_icons_retina.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\new_icons_retina.png
Size 17KB
SHA256 f907b44505b6f990ebaa72571cc8b6c0bd28ca95636306ed777652e9cb2cce7c
MD5 4473b5d7aa2c2501469f567918a0b769
SHA1 9bbc612f79683d8a3303085ac2be0029b6ff1838
SHA512 72fc78883bdcfe8baa9c3a6e43179c92bc4c271410111510bf336f5e605a9b7c8b02853a2adb4da4e722f19296080712ab68b48f30f0792ff00ff302db0b61a9
SSDEEP 384:kSy6otW/U3ha2VOwDhIefswRm7V0Fu32p3VxzjTk8rN/jSHXIBiuo0NmwUwn2CG:kN6oA49XNIwyVeM0lx/YyN/jSHXIBiu6
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\js\nls\root\ui-strings.js
Size 1KB
SHA256 241c27743f7146595af3079dd4b4639d6d182d08a9b4aa117501070be8565939
MD5 35f9192242796ce43c58d2862487b5c1
SHA1 41bdeef9340051f8755cd26211d2af588e332f54
SHA512 ad31ea094a81a0f5bb2ef1e88e0d7a6cdca168b9a703b0b9bcbb5efaf970b9bf2d9240111e6e75a83f19260033ea585cdb389f9c4b1ce5b8bb28ccd826158d65
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\js\nls\sl-sl\ui-strings.js
Size 1KB
SHA256 09cbe6d7d4ff54b45af0b47d964cc232ea1f8bd11c95c1821ff0590b7862215a
MD5 0f45f2057ba0f7bde5c380ccd0969989
SHA1 f3c14b6d28780b9efc7ee444149924e6035fc217
SHA512 a02bfe62dd4075fb8efe51527c59b78a75a170a27add1a7a9958fa27edcaa8557200f497710df8bc8132411b82d6d3ee44d5ebea213c692575c9cea2e0729f6a
MD5 SHA1 SHA512

Submit Download

main-selector.css

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\css\main-selector.css
Size 890B
SHA256 eed67203779e2f899d953cf63b6027fa357cf8a01e61b5cd80d08868bafee196
MD5 8790d7c56aa7a91a16a0ca8d0d49aa2f
SHA1 60ec9c56b322576f42364204dafe99f4b780398d
SHA512 ff753de3164661ea461dddbd63a95592b4a05f0843970b008663b37931c040bb4ab84a179c6c17c95636cc3a0cbb0946a0eb069f4ed1aca44ac436ed8e7a6ac3
MD5 SHA1 SHA512

Submit Download

bg_pattern_RHP.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\bg_pattern_RHP.png
Size 267B
SHA256 adbdf8a8fb1deaad4df1428296f2942d3dd862d867a8e024c88f9d70178b1ec8
MD5 d4460897b1d299efcd1fe615d775070d
SHA1 74d0046fa7d0e0a52f76bbe0e3f1ddf040721f3f
SHA512 c70bfd318d3ae1e38bd7595caf5375badafc4a9641624919179a9a5bb31d87d45eb1bf20f6ecbf33da038d3568ba5bc035aa95a580b8f11f6cc4eee717b39684
MD5 SHA1 SHA512

Submit Download

illustrations.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\illustrations.png
Size 8KB
SHA256 2fb2c0b0d1b320ec20c68fb128619b3b2b8608c61522805e5415c168b8da09dd
MD5 4fb7d1e61dbeac8ed16dccf95a4fc13b
SHA1 6460babd4406ea2022e75a3bc1eca3c3a39f1e12
SHA512 a0e97d50496096f89ab7dd42bd313a85d7ab4b4bc153ff528c18aaf7a9d304d599827667db8480c3e2e1ecce9ac7ec196974d060b785ef5c4ebdbcc0334392d2
SSDEEP 192:AP0cO+TDU0VVUHVQYnnDiGXkyTOQJ475RkppFhabLYBG:1tWESYnDiGUmW+/afYBG
MD5 SHA1 SHA512 SSDEEP

Submit Download

illustrations_retina.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\illustrations_retina.png
Size 19KB
SHA256 0f891d734ce2866fedecefe88319ccf50469575cdce014029275d30b1018538f
MD5 986fbbe6de80ee02e8a4f60ab6db8c7c
SHA1 94b771fbf3d4233add8e16e9bd665db05a0612ce
SHA512 a03a15ff5e1518a102340aac45a4fbfa07538f80ac9510beb07a7f711e3dcc2a41898d0b977d95e85476a235522d7888559592888213898d75c27650d862e929
SSDEEP 384:nPPWY/WtvvW8ffP6l/Ytuqro7kpXvuokfTLAa1JeDovYxAEIXfzClz6G:PPz/WtveuiY8q87mcIa1JvCXIXfGdL
MD5 SHA1 SHA512 SSDEEP

Submit Download

bg_patterns_header.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\themes\dark\bg_patterns_header.png
Size 791B
SHA256 c46a078c09545ca112a8e83ae492999727ddce8649d903e03ba51ae23161ac74
MD5 227596dab0f406bc8166bc619c749766
SHA1 97814fad6f3694659a08ff749877f6b249da4485
SHA512 1f90fd78180b4d4dbe562e578d6a2b474f69dbf79b74da6572f480ca50db4083f252a0d980c1b623beeaded3aa18cbc9e61c3a117e0797e661390397cce7f304
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\js\nls\en-il\ui-strings.js
Size 1KB
SHA256 193eb30c4074d2a799ec8861a6ae8b6407f8f32606a51757fa372cf1ad111197
MD5 784d4323176ac02f89421975b3e45980
SHA1 1882c18e4ed647f0b6208e1771766d02d6d70adc
SHA512 cf8c89d0fd9bb24109e5252ffddf6cb22ca4ebef6bdaa4633fc536d14d4ca51aa79edd4e1841c2737eb9b869bf5325d91a5a3892e77122faa0df98ba99a0d1a9
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-recent-files\js\nls\en-il\ui-strings.js
Size 1KB
SHA256 35919decbbf04597fdec882cea9363d118b84f934fe54cdca36ca6985b5372e8
MD5 d5f579a74f63ef84090a7924412ca3cf
SHA1 3346c4ecf50de426ad1aaf720d09ccb3a7741e94
SHA512 c67389b33a65fcd32db62b76af1374f59ab5fe97a384c425163328a838574d006f302a4f53b9377a70a2e37c6f478bfa206aebf22e5240462341fab8d039cfc2
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-recent-files\js\nls\ui-strings.js
Size 1KB
SHA256 e7a9c28cd571f6ebb9c77819975ef99ad0c99695699bd7a52701dd598959fcd1
MD5 96de0d46975a71a23dfe7d33def69861
SHA1 aa171af2f7eb16677e63a71a256455019b47155b
SHA512 eebf174b5a8afcf30902a872ff3c77336b77aa6939b62b60abfd8f89ad925ce43220f692bc826347d66dd5f80adfc038bd0f6420ef92680af40fda254e62ff5d
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\en-il\ui-strings.js
Size 4KB
SHA256 6e9bbe6e6b265f151070db09958cb0394c229e802e8159db86c49c4665ecfd79
MD5 47dc82c80f8b9d1009944dc325ff9cc5
SHA1 348ac9be75b2dd1c64047656905780b456b3c5d9
SHA512 9b0d36ff3c1aded449f6b3e7360b0e01ac8f7353c711dc62e23aa65dec9bda025d96f8e1c92812e1e248d6f9a0c81b6e2b265b7bc389e4572b6f87413e5625a8
SSDEEP 96:cs8TxKqEsZ4g0vyuxGP9+nTJVqi+9zheLj3R+8TIHIiVycHgG:k4qGvwYjqi+9zheLj3R4HbVPAG
MD5 SHA1 SHA512 SSDEEP

Submit Download

PlayStore_icon.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\PlayStore_icon.svg
Size 5KB
SHA256 1325841eb4b6131f6df481454abfd8f6b5fb298f71f0a058736d9d20072f37f1
MD5 a75e4baded7967ed5bea778741caec37
SHA1 a8753df2eb9dfd2e4e0b7388f78d796c6c692cd8
SHA512 651c004c0f599961f692134bddd62a81ae3cd14a1ea82d8f16e183a93425431eba23db9d4cc2a052d6d9481bc3859bf36e45de11ec23ea648d75e7e406d0a9d2
SSDEEP 96:iJuw1XHi24nsZ4uWhCC0RQef/Wu9j0HUNs7ExHxw+2Rfh71NA3YDvUM8UIj5hXN+:iJJHi20sZ4uWhC1QI/HSEPw+eV1NWYDl
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\nls\en-ae\ui-strings.js
Size 13KB
SHA256 9447b3960a222e1723bd0ecb4c0e2272b0d1af4c69fd5068bc94a2b7ffb313e7
MD5 b5b0188ed9da6afd2cc38525e108980a
SHA1 7a19a5234cbc39ff491827f45d7191b6dba6d0c0
SHA512 95b961fa1848fa5bf9f0e6c5831d75c31e6486e3018bd9c6dc6e6f9de540b2be3d8f39df6083205cd29f905dfc8bc82ea40ef1b3967ce6a6b60bf94c87b7e532
SSDEEP 384:sJmFHOyb1/LsfpewWDULUeKQNFvLyiZ/TkvhG2UG:sJc5k0wWYBzvGK7uUo
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\js\nls\root\ui-strings.js
Size 14KB
SHA256 e59fa96d9c5ce74e6863e442ee10156189aa1b1898cdf6cc8c6bf23479104b8a
MD5 c34d681b016760cfa97cbfe22f3c554e
SHA1 9064e9c79b34f883e9c3f135fc6c21895451efe4
SHA512 3881922c9c583e0856ea713ba807475747ad1df9747585ad1570b6dcbfd62e712b5b1dc04991257d2a8ebb66004d82c2423aaaa747bb0aed6dc957331d5c46da
SSDEEP 384:bNfiz65Hmu5e+1jwXhgXoT0R7QUYnHCEGSjiG:bNfo65Gx2jCgyw8JHCEn
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\js\nls\root\ui-strings.js
Size 1012B
SHA256 1f8620c213eddf471dc62e1683242d00addf3ded3402be474b395f85856271a8
MD5 0748adfbbb46c9d173730f028cbfbb9f
SHA1 7104c92c4d84b7c8a3ed7216714d668c77f53029
SHA512 2da4e2ced30e64d5e04b99d09d7523b387efbd29d1ef061596d862ed269764351caaace4fcd3c9b2f937ea49c009165d1b4adc4caa489dffb7e6c2dfa4795680
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\root\ui-strings.js
Size 1KB
SHA256 d409189073b01971adcba5d8b69369d2a60348a755c27f5e654a44f5c6d2c53f
MD5 b9401a0b2f26a6c2b6ce25a372c5fe8a
SHA1 aa4a6dc7bb15e68b939a8d801d94527bfebb4028
SHA512 c596828ef60eb62097f97205f756f5903aa782452ff763db3d1392f13052be346583c7ae8c7be5a4c61fd869ffe60cbfc99571a5aef57290772859c0ba78f497
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\de-de\ui-strings.js
Size 938B
SHA256 44c1c29a07e04fb943f969939409c2f842eb9955b57467f635882bb6c066b038
MD5 56368c504ab39a46325df0ecbcda835a
SHA1 90dab7fa0dbf20b3793a2b48a62b83707b8c8e38
SHA512 19f9478931fb3224a05b1a5aba2fa9869ad3f48f3a7d4c97dfeb041d9795ebf893326fdd140e8d4412af580e13f5b2c0b3e2e71ed30670b83ca4f3cf2d011fcc
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\he-il\ui-strings.js
Size 943B
SHA256 6a3fd88ceeaae71ab1da8e0fb09d67d860410b33966df7f2d640f1b7f2cefa5a
MD5 df0fd3512ee620a98019a5e1e8e2b8ea
SHA1 e99b302638a4bcd03c521b5641f697704199eea2
SHA512 220b949975d2ebca8f3d84ccaa04aceacf5f1217a19578b3d5faa0feef169d7ecc49e81e3091974a7af909b9c2f13f53ed0aaf0b5b66a3a631e6841a15ed8af6
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\root\ui-strings.js
Size 937B
SHA256 cdf2fdf9856d778194c6617d2140834333e2f57f9d71d1199035573f9037dcd1
MD5 c854d338de0172a8339721548f7b7527
SHA1 b08602ec3daee6f8f2b874585a5ff64cf83ad952
SHA512 b3efdb2e8c220b14a7b738a7d1ff0084175c3c4312fcd763b06385fe734f7a64cb85a4581733ef6c25d0ea4b720d5696cb631909a36d0c8589da0d85fa4d7709
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\js\nls\en-ae\ui-strings.js
Size 8KB
SHA256 048b5269bcc0a17410d13182d5233a41ef9bf2407145c40126be9ce66ada9db5
MD5 433e1d819ea09bdddb0480b60f4bb96d
SHA1 82713c6bdb21ead79014ac275d19563323208066
SHA512 6a419775aa2d8fd518c116f59d415b9637ccf226e8b90a7deea4bd146f61a81312786850cb34e1d47e88b164dc82c7535f8c2e49bf76f63c69496aaea1c28bf4
SSDEEP 192:k1ulNLEDIlicmutBh8s36RGMdZ1KUplY51z8zH3NCyIwG:kclkIli3ah8sYqUplY5x8zvIwG
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\js\nls\sl-sl\ui-strings.js
Size 3KB
SHA256 cdf76ce15c20e21ef2464198ff68c4fdbc35005bce87a6c5f562026e9fb285d2
MD5 799da929b3628f4ffe72ef8740b39b49
SHA1 26531c69f1635d20d41bbf438d3c44a0cceb9d1f
SHA512 bd71665cdd484cf8b6f1c85d94565db495ad403abcd6129c70c2ad1a5963f264aadb459886b7168ea0461d8deb1471608d671fdb40a32cea9373a742edbf0784
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sign-services-auth\js\nls\root\ui-strings.js
Size 1KB
SHA256 29c9a3ff01a6f9161e17cd621be6ab5f101826301bf18891eb01844f442b7b0c
MD5 637ad0efe495671bd95b03386d06ad3d
SHA1 49be8f167912e1fafc75613a3919546957601d99
SHA512 6a867947d7d668c787623f3f6d4bb4da3d04a49c1a37b75596cf7f7c19055a9309e80f69309f115adc54270b248d64d347832e3b39eb55fcc344f8f65e0772ce
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\root\ui-strings.js
Size 13KB
SHA256 42d9fb9bfdea7dfa810e49b8e26e176bc993c12309e6d03965fc44d1420aa63c
MD5 e850a73ffc68fdc66150a3e354b62cb0
SHA1 8d7fd69d03adee803ec231dfb1f2211091b846c8
SHA512 e34667fba6404ad6169b7a8c74240d868587ec39363eaf377c4bd91dee637e30a9208000bf0c6de45cfba91350e4eb49e706c302a4c24f7ac2c1a384eefb5044
SSDEEP 384:jxLUyo4D+jq9lMxe8gW0xfb7G2xh81CmtjseY0+C0c0G:jxLUka2wxe8rWfbKwh81lt/+C0cB
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\task-handler\js\nls\fr-fr\ui-strings.js
Size 911B
SHA256 dec5014fdd88176ea3b017c5a67fc7151b564a1468e773d2f34ed7f7cf89c12c
MD5 e3aa941d14fbda6432ecf5f01927de60
SHA1 4306f23beeddd6e6bebb18ccd06de26001ddae1f
SHA512 1e71c96ee7a8baa77db46bfdbfe85e02e367587b7b86037abe48e3f3e4f95221e78fdcac9314e0ea3efa68db724a78fb8b6418329a0c198bdb7e3622cbe1c510
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\en-ae\ui-strings.js
Size 14KB
SHA256 ae363cfe4239756986cfde9399a0fd45908f692cfcb10013e9476c83f3a62b1c
MD5 993f3bba24b3ad5b68750fc77a9a5228
SHA1 a915b9f20b7ac373a1970847e15480f58428ec5c
SHA512 efb9aea83958eeb14b6629d6015948a0b451f6158b2355b00f6a9d588987cdad5388edd160f9a023556259e509df34904efa218fdca5c30a121b9c25cf80cd5c
SSDEEP 384:C9m9mlVFhhLZ9PwiXP14W9VSWZ7oVC+MD3nt/sKVcG:ym9uVFhpPlXOWfvHXD3nN/
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\viewer\nls\nl-nl\ui-strings.js
Size 928B
SHA256 b7128890e6bf243a567b3ac7e8774374fadf228b38b498cbc0fd20e4059224ef
MD5 5d0d90b4416fe0022685e8916d20c7b0
SHA1 e99af96c9f3131d6da811d9ce6b73043b8d7001e
SHA512 1ae4fc81541578399cb8ae1c2ef47743fb2b3629a49122255d74a33e8bb473397ee78042b3b789b68fe05b48ed49aefa48dafff2e6476b9e1c2203e5998ee4b5
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\js\nls\root\ui-strings.js
Size 18KB
SHA256 0c0f9446993bc376f7896737b89dca3deca82e399ad2d5f09f9935674ee5d9f7
MD5 b838f7957a07b67cc8a9ce65ab2077eb
SHA1 0d5d77f619821061885ff819ae57b845fc76c2c2
SHA512 936214e74d0a3fe71f056c2dfd9f4b36dd5262e6df76cbc5f79977684afd7e206f076ab7bc517ffae8f6e539f46ad30b667dcb43ef4147a0f6c1e7bec169d083
SSDEEP 384:C5m2g/yk9xyG3jfQiMl2WgKk+VG4xnTbEK90JtVwSdkRBCG:+mp9cIoI27VG41nsMgkRBz
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\root\ui-strings.js
Size 2KB
SHA256 92b25c8c1fda344b7262d04f6c431f00d8872244c0ff92abb203f0861e608b3f
MD5 e568d1715e79ff6c641f47865165d25e
SHA1 0aa261589b6f9493981ec2347cf69269fcf7b143
SHA512 20d30c628bda99d6031dc8a14b00173cf89a5debfa239b5014673722d8d644bf239b9397f4dcb2ffb6eb08aa882b06dde5b5ed7c608fb939fd17bf7b4861feaa
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\sl-sl\ui-strings.js
Size 1KB
SHA256 bba3da5ec36447635c5a71a784173a4ca6ea039d5bc53c6aa60aa5efad20fe43
MD5 1661a19ed363800a38c20578df2c97bc
SHA1 0448de5cf852a99ece65054ccc51426af7c53181
SHA512 1c39f3ca624fc415932043a613403987294baa78f4df2ac77d056a4f86c2d71daf59579a2211a29a4e7da53b29ea731014f62d86a6d216e142f40ef9cb684b7f
MD5 SHA1 SHA512

Submit Download

DisplayLanguageNames.en_US_POSIX.txt

Path C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_US_POSIX.txt
Size 33KB
SHA256 7b44666a127d0cce598bbdce662911c5d2d8828a45376169737bd5850fc25580
MD5 08c6eff905e4939f01f1e9119c2756d2
SHA1 251ac0733550c44508964cf246781ecf25f6cf2b
SHA512 2dcfaf5113eb29feb377c16dc6a0e2f5db6c6beda337becb2b884a44f84dac6d93cf5f9a7b2698fa677b5cb36cb31ab7ceb182a932788ed6fe34253d3fb4a60c
SSDEEP 768:8BJeQ7XY1SfD9+z3yh1Ibh7Me9b1QD2NeIXah6:0JHs1S79YAaBf9eyah6
MD5 SHA1 SHA512 SSDEEP

Submit Download

readme.txt

Path C:\Program Files\7-Zip\Lang\readme.txt
Size 1KB
SHA256 7bf664f4b74acefbf2c042f0ac16bdf53a2bbc483479b43c4a1096f98aae6994
MD5 e818446dd798f9ba0c0d348d13a32dd7
SHA1 324338df4c8f39cf42d71b3180b59b6e2f6b06f7
SHA512 21941402d7e7bd1a32322b6d31ca468b984a0afb4ad8411baafdc8dbd14ee85f1b6a5283bd924bae0cbb5e5c2a0852b927531f9a73f912b3dde949840483d31d
MD5 SHA1 SHA512

Submit Download

win32_MoveNoDrop32x32.gif.NBA

Path C:\Program Files\Java\jdk-1.8\jre\lib\images\cursors\win32_MoveNoDrop32x32.gif.NBA
Size 241B
SHA256 60b1b5b32f6172ec52cb59c2a0a5ab5783a4915793c160a1ea76a3413548ece7
MD5 53c49891c774bb00cbb196c4dd00ec9f
SHA1 177d4eb90445c4613e33f4d999d14cc18c6cdf50
SHA512 42df8dfc8c25fc8f60cfca78538b2c6efd3bbea6a8722c6568d9074cdbdd7da9bb7356eaf7bdd655c9a097e8a77d631d0a1088d279ca513e0c8b585b1fd9f0bb
MD5 SHA1 SHA512

Submit Download

win32_LinkNoDrop32x32.gif

Path C:\Program Files\Java\jre-1.8\lib\images\cursors\win32_LinkNoDrop32x32.gif
Size 241B
SHA256 4d491fc0730ebbca555faab61c2d0445f7f0c0f9a952ffd4e6cb753facddb417
MD5 b835ba1d8388f81c0b8a60935679a9d1
SHA1 2a3b58e00395a4f7aa9e99efa1b61acc3bbdea5b
SHA512 e7a36c4b61d6c23c6d3170c06cedbec766d84d85a5550a266f3c988f6b2659b3de6b91eadb29dd5b948cb50f781a18dda0a3b55528030dec183e47fa89e11c12
MD5 SHA1 SHA512

Submit Download

ClientSub2019_eula.txt

Path C:\Program Files\Microsoft Office\root\Office16\1033\ClientSub2019_eula.txt
Size 130B
SHA256 0ebf960af2395c690cce47976644837bf51dee206c256cf18c42a9b9d9cae841
MD5 c622f62bb08350bf00ce1359d8024b74
SHA1 d31c5534e4779c85f016ebf80f89ae952e1b85f8
SHA512 bf8027b5fa13f353e678cbf92d028db5005ee787c90863418e576efb9b415725d172f76689f7ff4fd4bc344ba2eae2063e65a12c0f1a0192033d047fc8ed7f42
MD5 SHA1 SHA512

Submit Download

MSOUC_F_COL.HXK

Path C:\Program Files\Microsoft Office\root\Office16\1033\MSOUC_F_COL.HXK
Size 202B
SHA256 e9bd9c2f79e501f461e4b21ab98a6ec43400040a2014ce07a38c753a7b00281f
MD5 3c79f2adcdfddc133ad7dbee7bbcc7d6
SHA1 03dbf425e507e3036ec618829c50dd6707b0880f
SHA512 dd3a013521d2db9abaf3ebd3a8d02e141e6bfafce056d1926cdf7274173d671fec7ca9dcf546a8c21e6761363a1673d23807a3cdf315d1898d4617b16695d99e
MD5 SHA1 SHA512

Submit Download

MSOUC_K_COL.HXK

Path C:\Program Files\Microsoft Office\root\Office16\1033\MSOUC_K_COL.HXK
Size 201B
SHA256 0dc037fe3aaf1c2f0910a731616584384edb6003f52407511bc9963c11f84d59
MD5 e55341f306bde93828c6e5a7beb51382
SHA1 bff37d167574377d868c7e23f305690f321cb56b
SHA512 b941d3b117d767981a9410416378afa795fd8d2d2ee83eb0c80254a713d0874224c90d1942a9fa752e3e84a060949eb198bd9ee2b896353b5f84278709c4e607
MD5 SHA1 SHA512

Submit Download

SIST02.XSL

Path C:\Program Files\Microsoft Office\root\Office16\Bibliography\Style\SIST02.XSL
Size 245KB
SHA256 7147d802af690b10f426c982bd3cec8fef8669dbd4601836f703a3ebe304c05e
MD5 356fa238a35cc8624bb3f537e0a7a139
SHA1 a4c09e73920d0ac3a55cdbade74746b96bd58291
SHA512 3921214b261cf0bdb6baabb372cbc0ebb6097b51e2a0dc1c12a322edfc163ac2dbafd9e833febe1850f01bc339c21812b887f0d0468537a8f20f524caebac6d4
SSDEEP 6144:MgEfj4zaXi2zdTAlyKaBiDPQGAlzm5+EDJUFYNXB39cluCEbZtn:fsi2zRsgiD85e+8UFs1bZtn
MD5 SHA1 SHA512 SSDEEP

Submit Download

msgr8es.dub

Path C:\Program Files\Microsoft Office\root\Office16\PROOF\msgr8es.dub
Size 93B
SHA256 62d0bd47b9b1d2f67b65593d547d6a7a4e8ca6c47002801ec6d87c5ad911c7a5
MD5 c5dce5b91fd786a9a812b067e58b7893
SHA1 7ee102bb9bab8cbffccc44cc38a78badc3506610
SHA512 3f986005b03a12e541e818fac67e7daaddb14c4da570265bab13de156a4707253728da45e178d84e6dab603ccd4b824e1496fdbc51c50300d9463814c003d425
MD5 SHA1 SHA512

Submit Download

vlc.mo

Path C:\Program Files\VideoLAN\VLC\locale\de\LC_MESSAGES\vlc.mo
Size 607KB
SHA256 edb17b009e60ab1a8be6d7a4092e3afa43293602f8379190bafd34d9738e1de0
MD5 d2c00118e7445eefc789de01ad403348
SHA1 707228d5722ca7cb7ee6fc51dfe51f15ef986779
SHA512 506a9cd70f7e2cccab07cb099ecd34b2c195b8b7057524d75acda6b33ef27e9e30e064e58a5c2ebe75797cb990724c70c4ad8192e5f2310bce8f7479c10800e8
SSDEEP 12288:0ttiIt9TYtVfkq5M3Oe1/xz9B7BQZqO4UCJKvWQFgsb8Ct5t5o321XRd+:0ttXt9TYtVQj1/9Ly4TJ4WQWsbpt5t5i
MD5 SHA1 SHA512 SSDEEP

Submit Download

vlc.mo

Path C:\Program Files\VideoLAN\VLC\locale\ml\LC_MESSAGES\vlc.mo
Size 1.1MB
SHA256 601bc1d2a67bca1fe504eb48fdf726bfe590bd7d04da35fc9229fd3d7ba4bf6f
MD5 ae60c0c8d4f6c8606d24f6ec23188180
SHA1 5e4ebf78c456a4c81a48983b81ecc44a07c6e830
SHA512 c1c17a9f1eda711664509c66c993501256356eb2cd1fb95dac74b0ac7ec08670091a0fdfeab975c02ccb4c17a1eb36d93738b14bae83f3f15e2befa5c1e1b92a
SSDEEP 24576:Fd2ch1K50fM9GTKoDCBu5nRbKeujSf/OzS:Fdj1K50kIOoDSiJ
MD5 SHA1 SHA512 SSDEEP

Submit Download

edbres00001.jrs

Path C:\ProgramData\Microsoft\SmsRouter\MessageStore\edbres00001.jrs
Size 64KB
SHA256 e8812c9859de12c7d132a9a313cab934b8977707ded898785275819553b34155
MD5 23ae1ecdf1b41324af8a0a816722e8b0
SHA1 80ee8d924a9717c754e891f5a400943d587f19b0
SHA512 007229143f01644c61190430b21f57a5126e550a33c2b6079b01736dcfeb824a1d573af6cad50ef839b30490a5e6579bd8224338fa4884c0cf9e0b84e1589449
SSDEEP 768:fKc5hZceUMMFp3Pepm9wAnMZ29sjtPnsM511p0/hl+OefnVS7SvJDNPhR6fupwgN:S8LceUDPoCsjtPsS0pqfQcPouF
MD5 SHA1 SHA512 SSDEEP

Submit Download

USSres00002.jrs.NBA

Path C:\Users\Admin\AppData\Local\Comms\UnistoreDB\USSres00002.jrs.NBA
Size 3.0MB
SHA256 5c905b102920c085a672b82b8da7ec556f988d64a755aeeb41ad9ff1a13b92a0
MD5 43009449b37c7e9cd3ec910356e49c01
SHA1 11f10892e25e427ad3c5f4bce577c3bf329ac489
SHA512 9c417e9ed23183f84675ccf5c63112798e62ab00b0b03e42b2cb8808bb6adcbdfe9f1f9a2fd11e89320c890c61bdc4ded87cfef4b71cf35f86b5c5ab5f423ccd
SSDEEP 24576:9iBRMtZK2SRHe9/Yl7OiothM5GbDE2OV/6ZMj4Gj5Gk49h4rymKSzqJuMGoblB9:9OSZal7SthuaDEXJdjRGLh4rbMuyblB9
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extension State\CURRENT
Size 104B
SHA256 51d30dc0733393a829fe2db565f47dd3c2c786916ab2929a3866a3556e118fe1
MD5 e9b6ee9cec9dbf4363626b540fceef86
SHA1 630fe2e6ae4637a1386b4c1fa05215ab531f054a
SHA512 35d5c679aa47ea7ded700ce4d9871f7294f778c043d0db8745885ca3a312fce98cdf752461426b2012ddf27149015bc8709405696a376d79210d251244477511
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extension State\MANIFEST-000001
Size 129B
SHA256 0c0eb9e371a7df01b030a3fd40a3e6d38d466949199dd4b2503df37c46d771c6
MD5 fd8068565a5e6eae58583275955db334
SHA1 2e3dee7f188f7b74f7fa88e459516003034128bd
SHA512 f642633e48f4437a018cf904b9393b4bd03c6a4d58a60d444f51616d209f24273831d38b4ee3e85346b50f076f0ac8c5bef61a8bafa84a713f3f02b5b312a040
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\CURRENT
Size 104B
SHA256 20e76e2e37b45df7e08c7a166658234d0e56034418245c143515bf6768120e61
MD5 38b44adcd106b28a149d4993e01c28e6
SHA1 e738f54e459f252baee4f2e0f024fb494e0cc0be
SHA512 edaf0a988797284fa8056599b616f918857de933c67d4f61038d8205aad5447e0a4f8875f59ab08ec18d8e825f1d3a48bbf750d6f19acdf5cad3e54ffec2b5ba
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\MANIFEST-000001
Size 129B
SHA256 c848f826c58025c68c690fd59c8d56ca86c436dbe22894900d6f1fb8e69dbe70
MD5 7972f735a6e223eff92ee6e04522e255
SHA1 67c9ff166f8ad875eefcf2ca085fabb27f91e8db
SHA512 13fb5f4a72e37e4182be53de922f572d6947fa8eca22b6adbea84957ec512f012233f91302a36d6a07f6e8d2cf55f52a45d0cfa663959785a5996473e35b0db3
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_0
Size 8KB
SHA256 ece2b61bd539a492d48596dda80d76a60e7928b4db318d514e085c23dc218393
MD5 531a51bc0fe197ae33796122b8038013
SHA1 a737924d8f89ffc79b5d5d22560b82f50b18f23d
SHA512 0a71ac1217775ef644b5c77465b1b1d47bc04ed92e8a1bde2defd7f56a98394116ee51d785d511def728572be7e0e5ac1067a46ba25c8b921d1042c259bab448
SSDEEP 192:Muz4NKcxxA7sX766qzwiWdiVwpTmb/4hrs2E4TG:MuzeKKxIsfqzmdi4m0hsaG
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_1
Size 264KB
SHA256 ccd09f6f2ca5863db90f8864952721d1e0df09e38601c5d0296f00cbb39f9078
MD5 7deb5ad1e22ec9e007b205aaf4aa6499
SHA1 23f265cb6d4139e40e0224ba8ee9a30f16a30c5d
SHA512 738224610134eabea5881b7fe400c8997bf175755ad505b4064b3f69a403d79e03962adbf16fbb09a8b2a633cad5df6e94ed4f836d4bcf013a7c8a2fac663138
SSDEEP 6144:BIbJx3JhKk+1AnUBuDXpkVwKr1ASrv7lRAxQHwefOngUifg:CbJx5hB+uUBuDZkVw+JrA+Hwe8gUiY
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_2
Size 8KB
SHA256 fce2ddbdbccb5c8658332dd89194b02a47b953bdbfb10614a8504bc2bbb1a074
MD5 d184506d607a11db294967348c400401
SHA1 af838c09ada0219517983512699863513f9092a4
SHA512 9f7b2be938f4c47f424580212f2d0f0e838ba3a1306397ab3ae13e735ef7aa0f9dd23690412438d2fd742428da68cb6525194a079391027491c732b3ecb110e5
SSDEEP 192:nz4NKcxxA7sX766qzwiWdiVwpTmb/4hrs2E4TG:nzeKKxIsfqzmdi4m0hsaG
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_3
Size 8KB
SHA256 97fb08209da242205d2c130b1dbaba64fb79e12fbf5a7ac2a607f9c580f9eff8
MD5 2e0b97f9b93066b94930c9d90296c25b
SHA1 9455310eeccf6e5838ec022329efc30c76eb7bb7
SHA512 c1ce9531dd26a1735f842e1d35db23cf4f2143c8e717c6da0bf137422f33084efe4e0ae064bd3a561b65dc6565db6710abf3ade3fde8dce3b8ae22f1f6c905ba
SSDEEP 192:sz4NKcxxA7sX766qzwiWdiVwpTmb/4hrs2E4TG:szeKKxIsfqzmdi4m0hsaG
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\GrShaderCache\data_3
Size 8KB
SHA256 f33394fb62c0e81da71b342ddd3a23a2072c6c89e7294620a831a928adbb9607
MD5 9fd34cd7424adfe6827aacf22f99b7d8
SHA1 08d4fe56c064451af75838ff7508172abc30c426
SHA512 3fff7852c5cdc429ae3c8835224b917f9dcd4d23cc7cc0ff6b5a2e5ade6918d6333c417669502f91112d0b8fbb946c97b9e4a10e581f10acf5cfbea0efa59ad0
SSDEEP 192:vLRcRhzDfnlu9DJPRK8Uk/ebomlEaGmt/EtBvB740YG:OzDtoDJPkPcOlErmI9F40YG
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\data_1
Size 264KB
SHA256 2f899d22e0e191a8c1ec47628e067c2944c6e06a120cda21cb54539116dff24c
MD5 58e5b7e362331262526424d78048dba1
SHA1 1b589f959424e55c7eb3cddca305c447a8a0c1af
SHA512 80c2826d2e4f0bd71d2d02990af2bc2bb94bbca9243cdc8e1320d6113424d022b7a75c23979dc6953d3608ab82934042bff0a9d5237916ee7285bb9dee8ecb59
SSDEEP 6144:rMu3u4dv3xejN3+iXG0+R976d+nUetvmirjKtEBY842yRNZPnTrMIpoj:rMu3u4dv3xENID76An59vriAY84Vn0IQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\data_2
Size 8KB
SHA256 0fa2425b98c5248a2f335467c5802be80a61603d4e0631c076cae583fed361d4
MD5 741252676b271d275219483eea2ddb5f
SHA1 e9d6789c945a3ca314b7d66aca234b8c22c823fa
SHA512 526c5cb93c01a5e4ddcd9a5bd74991de6a7991230f6a3dcda745f33e92a123a76a9a27025e72d90cd05bc42e546f8dea4c233f6053fe071d5d0de4f894ffd77b
SSDEEP 192:WLRcRhzDfnlu9DJPRK8Uk/ebomlEaGmt/EtBvB740YG:tzDtoDJPkPcOlErmI9F40YG
MD5 SHA1 SHA512 SSDEEP

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\MANIFEST-000001
Size 129B
SHA256 cf8655ec69900ebe28b0473837f82e605b00a3c91414e3d14bc4133ec7c207b8
MD5 aae3e20f5bdd6899051fb00a280cb523
SHA1 481f1458d494c4a95a0d17a1a06d991d66098028
SHA512 2d53fa5b98496fbe4f0f94fc9d6ff588092ac00c8b47b5f54d37d2e8616a10baa96793391a9990087d1f24a1c7af5739fd273ba1a2ad04ca0c7eb3efa5adcc3b
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\data_0
Size 8KB
SHA256 8e4ef45480bbbade84f10993319d20e1382c9ca4b220cc2ebaeb946ca1f93173
MD5 8f013031944a99a525b2943c543e7e31
SHA1 d3e740d208040ac5c13dc042296fa84dea00849a
SHA512 4ec0eca27ca10bbe7ae994b1f490d48c23dc0d3302ba5b7da293ef065ce68d921f63c7acf533748dff7a629604b4792d42dc867f0be4b2faa2c372dc71724c46
SSDEEP 192:ALRcRhzDfnlu9DJPRK8Uk/ebomlEaGmt/EtBvB740YG:jzDtoDJPkPcOlErmI9F40YG
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\CURRENT
Size 104B
SHA256 394c7940bb368d2332503b3fbd32795b2c9ea4689ff6e3e56e0494f271405e47
MD5 f82c1c66fcaf169506357b8c39f17781
SHA1 fc13f17caa060e677fc74d8c64c2e9ad5161d80a
SHA512 3c3f087985ee5e82e07cb99967b223dcbc96c72f12f943a2785f222a18812b06e74a5bc1c16090a1aa312892731798426aeaa58e48ea77b126f5121fc2556ea7
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Packages\F46D4000-FD22-4DB4-AC8E-4E1DDDE828FE_cw5n1h2txyewy\Settings\settings.dat
Size 8KB
SHA256 af4587583b5dc5f68c6c0a5e2f29ef7fd84092c7d1f26f6d3d34379169079994
MD5 9bef141ffcf17958f1e76bcb1887ae29
SHA1 e2bf7fd7e9ad7dea1c213cf4c8feb12f296ace36
SHA512 5264280812314b911e729a9a3011a7e899e09c308f8012931c2487c33d020694e7cccb1626f3605feb6b8c634291c890548d95205253eadc9a59eafae161f82e
SSDEEP 96:dv4eK/h0IduRNbldMXckcTgB7Yyu77OC0AuL4B+DmPB6bVOkbNdmErlKvDHyqQ0c:Z4wId4BeZvZlu77t6DMFkb3qDH+0cIG
MD5 SHA1 SHA512 SSDEEP

Submit Download

wctADB4.tmp

Path C:\Users\Admin\AppData\Local\Temp\wctADB4.tmp
Size 63KB
SHA256 8cc45828899c9efc98ee82696ac5e8beded486db276b5910f31896a2b0986d2f
MD5 c6c9d4af2c3393459a8bdc584c41840d
SHA1 57ad02021558b793dece78e97cd9bada7b43fc09
SHA512 9779ed01264d956e5dba8df848540860051c7781d48a9a06fb5528b14405b44aa2362769744bb2b06c220057003094f6a814ea54ae1532328dfc87bede60351d
SSDEEP 1536:Alks8Wpsn21+LZqk8TRkcxAzf1svxuYXAd6upNbMcTA5SQb1y:Aza21yZqZ2w+dGxuYwMCFuSQy
MD5 SHA1 SHA512 SSDEEP

Submit Download

2918063365piupsah.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\e6zhegwu.default-release\storage\permanent\chrome\idb\2918063365piupsah.sqlite
Size 48KB
SHA256 0bc57a3eba517d37aa97242ec659eec76e5f5aa7ba10525af0f649008be963b4
MD5 e6e4be670881840d7b5083d0789d44c0
SHA1 34c9d061e154aa851655900fa66687efce98b7f3
SHA512 84b30dbf62b1dcce3bb0031abce0fa0e30d32ca08f28ecf9b8768e9911c07b382fd936d9bc3f50f49869af7139490ccc99fee0bdc5503d38c7f82fb46cc875a9
SSDEEP 1536:MWhAJbCFjbDzxsWruSSh6Bptfo7r1pzI64T8:MzbKfDzJyphyptQr28
MD5 SHA1 SHA512 SSDEEP

Submit Download

memory/2324-0-0x00007FF7B3340000-0x00007FF7B34A5000-memory.dmp

Download

memory/2324-8006-0x00007FF7B3340000-0x00007FF7B34A5000-memory.dmp

Download

memory/2324-14681-0x00007FF7B3340000-0x00007FF7B34A5000-memory.dmp

Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads