fe487f82d766a0aa74a015492d7751e193a9880ea5df37551b5506cfec77b40a

Analysis

max time kernel
121s
max time network
95s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
01/10/2024, 20:02

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe
Size

70KB
MD5

0738759c1ffc1b101d2959e6469c1f6f
SHA1

8252a282086f7c994b0af7baea9511df4c4ab4d3
SHA256

fe487f82d766a0aa74a015492d7751e193a9880ea5df37551b5506cfec77b40a
SHA512

ff9799501eabbf311b9c7b1bfcd4614770a383f3da61001994d455da3ee0fc79eba94a6a7df6c2d9312488b609b55f32e5058c3988011e2e0635ecc0dc6198e7
SSDEEP

1536:E8aKJImM74fA1uFhuRO4cLlnqt1kJyZB5:xLM74fyuCRO4cLAQyZB5

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 64 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Process not Found
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Process not Found
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Process not Found
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Process not Found
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe

Kills process with taskkill 64 IoCs

evasion

pid	Process
2940	taskkill.exe
5508	taskkill.exe
10372	taskkill.exe
7900	taskkill.exe
9168	taskkill.exe
3968	taskkill.exe
7620	taskkill.exe
7408	taskkill.exe
8052	taskkill.exe
14284	Process not Found
1180	taskkill.exe
4884	taskkill.exe
5232	taskkill.exe
6900	taskkill.exe
10700	Process not Found
13472	Process not Found
13872	Process not Found
5944	taskkill.exe
6208	taskkill.exe
7376	taskkill.exe
13864	Process not Found
13568	Process not Found
5800	taskkill.exe
8572	taskkill.exe
9008	taskkill.exe
10780	taskkill.exe
13552	Process not Found
2152	taskkill.exe
4524	taskkill.exe
6956	taskkill.exe
7576	taskkill.exe
11076	taskkill.exe
12148	taskkill.exe
14080	Process not Found
5068	taskkill.exe
3680	taskkill.exe
3988	taskkill.exe
5588	taskkill.exe
12192	Process not Found
1428	taskkill.exe
7080	taskkill.exe
8544	taskkill.exe
10164	taskkill.exe
9760	taskkill.exe
12124	Process not Found
13228	Process not Found
3444	taskkill.exe
6572	taskkill.exe
6996	taskkill.exe
8784	taskkill.exe
12828	Process not Found
12804	Process not Found
13372	Process not Found
9828	taskkill.exe
6548	taskkill.exe
7664	taskkill.exe
9696	taskkill.exe
12244	taskkill.exe
5328	taskkill.exe
6624	taskkill.exe
4452	taskkill.exe
6292	taskkill.exe
7776	taskkill.exe
12516	Process not Found

Modifies Control Panel 1 IoCs

evasion

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-2718105630-359604950-2820636825-1000\Control Panel\Desktop\ScreenSaveActive = "0"	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeDebugPrivilege	3320	taskkill.exe
Token: SeDebugPrivilege	4984	taskkill.exe
Token: SeDebugPrivilege	3612	taskkill.exe
Token: SeDebugPrivilege	1748	taskkill.exe
Token: SeDebugPrivilege	2744	taskkill.exe
Token: SeDebugPrivilege	2244	taskkill.exe
Token: SeDebugPrivilege	4080	taskkill.exe
Token: SeDebugPrivilege	4256	taskkill.exe
Token: SeDebugPrivilege	2056	taskkill.exe
Token: SeDebugPrivilege	3332	taskkill.exe
Token: SeDebugPrivilege	4628	taskkill.exe
Token: SeDebugPrivilege	5116	taskkill.exe
Token: SeDebugPrivilege	5060	taskkill.exe
Token: SeDebugPrivilege	116	taskkill.exe
Token: SeDebugPrivilege	5068	taskkill.exe
Token: SeDebugPrivilege	1680	taskkill.exe
Token: SeDebugPrivilege	4012	taskkill.exe
Token: SeDebugPrivilege	3548	taskkill.exe
Token: SeDebugPrivilege	436	taskkill.exe
Token: SeDebugPrivilege	3084	taskkill.exe
Token: SeDebugPrivilege	2848	taskkill.exe
Token: SeDebugPrivilege	1196	taskkill.exe
Token: SeDebugPrivilege	3444	taskkill.exe
Token: SeDebugPrivilege	1616	taskkill.exe
Token: SeDebugPrivilege	3704	taskkill.exe
Token: SeDebugPrivilege	1592	taskkill.exe
Token: SeDebugPrivilege	1692	taskkill.exe
Token: SeDebugPrivilege	4476	taskkill.exe
Token: SeDebugPrivilege	1400	taskkill.exe
Token: SeDebugPrivilege	4320	taskkill.exe
Token: SeDebugPrivilege	4708	taskkill.exe
Token: SeDebugPrivilege	4444	taskkill.exe
Token: SeDebugPrivilege	1432	taskkill.exe
Token: SeDebugPrivilege	3680	taskkill.exe
Token: SeDebugPrivilege	2940	taskkill.exe
Token: SeDebugPrivilege	348	taskkill.exe
Token: SeDebugPrivilege	3476	taskkill.exe
Token: SeDebugPrivilege	1780	taskkill.exe
Token: SeDebugPrivilege	4548	taskkill.exe
Token: SeDebugPrivilege	3400	taskkill.exe
Token: SeDebugPrivilege	4016	taskkill.exe
Token: SeDebugPrivilege	3416	taskkill.exe
Token: SeDebugPrivilege	1488	taskkill.exe
Token: SeDebugPrivilege	1940	taskkill.exe
Token: SeDebugPrivilege	4212	taskkill.exe
Token: SeDebugPrivilege	408	taskkill.exe
Token: SeDebugPrivilege	3148	taskkill.exe
Token: SeDebugPrivilege	2956	taskkill.exe
Token: SeDebugPrivilege	2440	taskkill.exe
Token: SeDebugPrivilege	808	taskkill.exe
Token: SeDebugPrivilege	1248	taskkill.exe
Token: SeDebugPrivilege	1952	taskkill.exe
Token: SeDebugPrivilege	3648	taskkill.exe
Token: SeDebugPrivilege	4716	taskkill.exe
Token: SeDebugPrivilege	4776	taskkill.exe
Token: SeDebugPrivilege	2896	taskkill.exe
Token: SeDebugPrivilege	4328	taskkill.exe
Token: SeDebugPrivilege	2460	taskkill.exe
Token: SeDebugPrivilege	1044	taskkill.exe
Token: SeDebugPrivilege	3968	taskkill.exe
Token: SeDebugPrivilege	3488	taskkill.exe
Token: SeDebugPrivilege	1216	taskkill.exe
Token: SeDebugPrivilege	1048	taskkill.exe
Token: SeDebugPrivilege	2772	taskkill.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe
3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3760 wrote to memory of 3320	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	83
PID 3760 wrote to memory of 3320	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	83
PID 3760 wrote to memory of 3320	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	83
PID 3760 wrote to memory of 4984	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	85
PID 3760 wrote to memory of 4984	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	85
PID 3760 wrote to memory of 4984	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	85
PID 3760 wrote to memory of 3612	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	88
PID 3760 wrote to memory of 3612	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	88
PID 3760 wrote to memory of 3612	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	88
PID 3760 wrote to memory of 1748	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	90
PID 3760 wrote to memory of 1748	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	90
PID 3760 wrote to memory of 1748	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	90
PID 3760 wrote to memory of 2744	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	92
PID 3760 wrote to memory of 2744	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	92
PID 3760 wrote to memory of 2744	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	92
PID 3760 wrote to memory of 2244	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	94
PID 3760 wrote to memory of 2244	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	94
PID 3760 wrote to memory of 2244	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	94
PID 3760 wrote to memory of 4080	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	96
PID 3760 wrote to memory of 4080	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	96
PID 3760 wrote to memory of 4080	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	96
PID 3760 wrote to memory of 4256	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	98
PID 3760 wrote to memory of 4256	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	98
PID 3760 wrote to memory of 4256	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	98
PID 3760 wrote to memory of 2056	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	100
PID 3760 wrote to memory of 2056	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	100
PID 3760 wrote to memory of 2056	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	100
PID 3760 wrote to memory of 3332	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	102
PID 3760 wrote to memory of 3332	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	102
PID 3760 wrote to memory of 3332	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	102
PID 3760 wrote to memory of 4628	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	104
PID 3760 wrote to memory of 4628	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	104
PID 3760 wrote to memory of 4628	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	104
PID 3760 wrote to memory of 5116	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	106
PID 3760 wrote to memory of 5116	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	106
PID 3760 wrote to memory of 5116	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	106
PID 3760 wrote to memory of 5060	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	108
PID 3760 wrote to memory of 5060	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	108
PID 3760 wrote to memory of 5060	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	108
PID 3760 wrote to memory of 116	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	110
PID 3760 wrote to memory of 116	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	110
PID 3760 wrote to memory of 116	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	110
PID 3760 wrote to memory of 5068	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	112
PID 3760 wrote to memory of 5068	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	112
PID 3760 wrote to memory of 5068	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	112
PID 3760 wrote to memory of 1680	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	114
PID 3760 wrote to memory of 1680	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	114
PID 3760 wrote to memory of 1680	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	114
PID 3760 wrote to memory of 4012	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	116
PID 3760 wrote to memory of 4012	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	116
PID 3760 wrote to memory of 4012	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	116
PID 3760 wrote to memory of 3548	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	118
PID 3760 wrote to memory of 3548	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	118
PID 3760 wrote to memory of 3548	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	118
PID 3760 wrote to memory of 436	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	120
PID 3760 wrote to memory of 436	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	120
PID 3760 wrote to memory of 436	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	120
PID 3760 wrote to memory of 3084	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	122
PID 3760 wrote to memory of 3084	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	122
PID 3760 wrote to memory of 3084	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	122
PID 3760 wrote to memory of 2848	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	124
PID 3760 wrote to memory of 2848	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	124
PID 3760 wrote to memory of 2848	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	124
PID 3760 wrote to memory of 1196	3760	0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe	126

C:\Users\Admin\AppData\Local\Temp\0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\0738759c1ffc1b101d2959e6469c1f6f_JaffaCakes118.exe"
1⤵
- Modifies Control Panel
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3760
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:3320
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:4984
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:3612
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:1748
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  - Suspicious use of AdjustPrivilegeToken
  PID:2744
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:2244
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:4080
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:4256
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:2056
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:3332
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:4628
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:5116
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:5060
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:116
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  - Suspicious use of AdjustPrivilegeToken
  PID:5068
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  - Suspicious use of AdjustPrivilegeToken
  PID:1680
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:4012
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:3548
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:436
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:3084
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:2848
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:1196
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  - Suspicious use of AdjustPrivilegeToken
  PID:3444
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:1616
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:3704
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:1592
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:1692
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:4476
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:1400
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:4320
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:4708
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:4444
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:1432
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  - Suspicious use of AdjustPrivilegeToken
  PID:3680
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  - Suspicious use of AdjustPrivilegeToken
  PID:2940
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:348
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:3476
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:1780
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:4548
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:3400
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:4016
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:3416
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:1488
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:1940
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:4212
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:408
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:3148
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:2956
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:2440
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:808
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:1248
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:1952
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:3648
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:4716
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:4776
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:2896
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:4328
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:2460
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:1044
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  - Suspicious use of AdjustPrivilegeToken
  PID:3968
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:3488
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:1216
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:1048
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:2772
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2064
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3616
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1868
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:540
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3460
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3004
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4508
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:860
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2676
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2216
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:2152
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1484
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1292
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:592
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2016
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4836
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4860
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1608
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5096
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2596
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:1032
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1392
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4752
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:740
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4376
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4600
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1844
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2456
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3932
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4680
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1104
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2544
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3200
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1816
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:216
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:1180
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4540
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4780
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4396
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1560
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:516
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4952
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5024
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1696
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2372
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4144
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:4764
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4260
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3976
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2000
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4956
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3248
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1960
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4308
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2208
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2452
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3532
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2504
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3628
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:4928
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1916
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:956
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:4512
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4344
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:468
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3464
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2840
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2268
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:4916
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:924
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3276
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4688
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2668
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4828
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4420
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:440
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3068
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2880
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:60
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:1700
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4464
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4920
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3020
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:4884
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4336
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:396
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:3988
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4820
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2384
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4364
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4460
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:4524
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4636
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1480
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4188
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4284
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3196
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2256
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:684
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1500
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1228
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:1428
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1932
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3732
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:2496
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1444
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3164
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1184
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4880
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:1244
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:4732
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3060
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4292
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3664
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3132
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1832
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2220
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1624
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3624
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:940
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5156
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5200
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5268
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5312
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5368
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5448
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:5508
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5564
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5624
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5672
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5752
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5808
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5864
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5908
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5984
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6020
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6096
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5108
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5132
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5192
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5240
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5276
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5356
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5396
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:5540
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5600
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5708
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5736
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5780
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5836
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5964
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5916
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6072
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6136
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4480
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4332
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5304
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5360
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5444
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:5472
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6132
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5740
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5792
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5920
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5892
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6080
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6124
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5136
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5220
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:5244
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5520
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5416
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5576
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5680
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:5800
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5828
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5884
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5924
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6092
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2028
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5236
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  - Kills process with taskkill
  PID:5328
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5604
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5528
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:5588
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5688
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5956
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5796
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:6000
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6052
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2832
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5164
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5460
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5596
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5728
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5952
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5940
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5180
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:4452
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5124
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5544
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5612
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5476
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5656
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:5944
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6068
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5428
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5536
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5876
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5664
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6064
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5968
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6012
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1572
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5552
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6084
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5148
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:5232
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5376
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5456
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5648
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5744
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5464
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1132
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5716
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5772
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5492
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5900
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5784
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5212
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5632
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5412
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5260
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2224
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:5400
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5336
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5584
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5524
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5280
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5572
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5320
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2296
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5284
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5932
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5764
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6164
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6248
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6304
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6360
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6404
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6476
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6528
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6604
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6660
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6716
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:6760
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6836
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6888
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:6956
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7020
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:7080
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7140
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5184
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5292
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:6208
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6356
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6420
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6436
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6544
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6596
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6612
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6676
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6732
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6876
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6976
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6980
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:7064
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7108
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7160
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6220
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6372
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6312
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6464
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6512
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6536
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1264
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6848
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6912
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6928
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6472
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6964
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7060
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7100
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6244
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6264
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6448
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6496
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6440
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6700
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6908
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6816
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6872
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7040
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6484
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6148
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6204
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6384
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6540
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6564
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6740
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6800
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6952
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7068
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7120
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6284
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:6380
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6468
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:6548
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4448
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7016
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6752
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7116
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:5352
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7028
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5652
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6256
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6628
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:6900
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6924
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6904
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7164
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7052
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6324
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6500
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3128
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6788
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6680
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:6896
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  - Kills process with taskkill
  PID:6292
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5852
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6920
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4848
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7012
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7152
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7056
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6792
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1840
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6196
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6804
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6232
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6560
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:6624
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6592
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6972
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6332
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6672
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7092
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7048
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:4924
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1764
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3372
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5840
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2516
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3972
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:6236
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6648
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6768
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6460
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6780
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7004
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:6572
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6412
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6456
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7184
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7232
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7300
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7356
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7424
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7476
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7544
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7600
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7644
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7708
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7796
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7840
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:7908
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:7952
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8024
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8076
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:8144
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6916
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6556
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7208
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7272
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7344
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:7376
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7452
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:7592
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  - Kills process with taskkill
  PID:7620
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7728
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7768
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7824
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7860
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8036
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8068
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8124
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8160
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7220
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7256
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7348
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:7408
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7492
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7504
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7652
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7724
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:7900
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7884
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8040
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8088
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8132
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6300
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6424
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1876
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7364
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7488
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7564
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7608
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7736
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7856
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7816
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7992
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8136
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8116
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6396
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7216
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7444
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7612
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7628
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7700
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:7664
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:7756
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7888
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:8052
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5488
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7292
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8008
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7524
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:7576
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7560
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7976
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8000
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7916
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7968
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:812
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7336
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:7400
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7568
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7780
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8016
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8096
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8032
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7260
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7392
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7672
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7676
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7500
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7980
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8084
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7200
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:7776
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7940
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8044
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8172
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:7412
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3120
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:7528
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6644
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:6996
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7316
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7536
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7540
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7868
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8060
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7928
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7684
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7656
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5420
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7820
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7288
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1100
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7896
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8112
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:760
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8004
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7192
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7944
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7432
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4164
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8120
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6684
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7808
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7832
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7388
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7312
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7180
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7984
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8220
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8296
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8340
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8416
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8476
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:8544
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8592
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8660
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8716
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:8784
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8840
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8892
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8952
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9000
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9080
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9136
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9180
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7588
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8212
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8260
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8332
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8392
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8452
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8504
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:8644
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:8704
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8760
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8816
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8876
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9044
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8972
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9148
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9096
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:928
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8196
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8280
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8360
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8488
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8456
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8624
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:8572
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:8744
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:8724
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8884
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8928
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8588
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:9168
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7632
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4560
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8292
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3160
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8384
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8440
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8612
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8244
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8820
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8908
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8804
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9024
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9196
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9120
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:8268
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8328
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:8428
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8532
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8604
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8668
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8948
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8992
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9028
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9040
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9160
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9188
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9212
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8536
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8648
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1828
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8632
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8684
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9012
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9144
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8232
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8408
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3264
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8692
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8636
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:544
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:528
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7596
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8484
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7680
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8264
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8516
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8616
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8964
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8984
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8228
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:9116
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8348
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8560
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9016
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9112
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8936
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8368
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8708
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8656
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8912
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8980
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2884
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8364
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:3352
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8836
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8580
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8208
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8380
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8780
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8676
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9032
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:9100
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7512
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9152
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8372
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8888
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5088
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8944
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9052
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8284
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9104
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8868
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8940
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9208
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8200
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:8924
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3104
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:9076
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8312
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1552
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8404
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:9008
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8324
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4468
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8764
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8388
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:9248
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9304
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9376
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9428
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9496
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9552
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9608
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9672
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9728
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9784
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:9828
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9896
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9964
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10020
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10076
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10120
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10176
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:892
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9236
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9296
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9340
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9440
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9564
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9596
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9656
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:9696
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9744
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9912
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9944
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10012
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10056
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10100
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:10164
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5012
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9240
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9328
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9352
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9348
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9456
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9548
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9636
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:9760
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9792
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9848
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9916
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10060
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4004
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:10224
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9256
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9300
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9396
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:9404
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9484
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9576
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9640
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9700
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9844
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3356
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10008
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10092
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9272
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5044
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8932
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9412
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:9704
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9756
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9764
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9920
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9988
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10064
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10096
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:10160
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9508
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9464
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9448
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9516
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:9568
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9800
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10084
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10200
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10196
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2312
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:10232
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:9520
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9488
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9840
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9856
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10028
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10116
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10172
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9284
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10216
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:9592
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9864
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9816
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10108
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3440
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9544
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10036
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9660
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9928
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2692
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9416
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9904
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10016
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9624
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9880
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9980
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9972
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9820
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9836
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9384
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9288
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9220
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9908
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9776
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9292
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4140
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9892
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10132
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9512
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9584
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9332
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9872
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10004
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4948
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9628
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2756
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9572
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9780
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10088
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9580
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10268
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10332
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10392
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10460
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10516
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10568
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10636
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:10680
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10760
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10792
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:10900
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10944
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11024
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11084
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11128
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11200
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11248
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10188
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10304
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10368
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10444
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10468
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10560
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10668
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10644
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10856
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10784
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:11008
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10988
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11052
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11160
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11240
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10256
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9424
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10388
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10448
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10428
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10544
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11244
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10844
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10816
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10968
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11020
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11072
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11116
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11208
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:9716
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10416
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10456
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10596
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10548
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10712
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10824
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11004
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10980
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11120
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11156
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9824
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10720
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10356
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10512
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10624
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10660
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1036
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:11076
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11104
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11180
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11260
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3636
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9888
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10412
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:412
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10692
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11048
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:7384
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11108
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11112
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11016
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10420
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10704
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5948
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10672
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10916
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11164
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:10372
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10648
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10384
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10676
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10800
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11144
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11092
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11192
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10404
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10352
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10812
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9472
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:11036
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10248
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10608
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10664
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11060
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10756
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8460
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10308
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:10780
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10956
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10744
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10376
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10484
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10632
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11068
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9400
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10964
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10928
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10296
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10804
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10724
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9684
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11096
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10768
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10288
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10888
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9692
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10880
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10688
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9060
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10284
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10788
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10472
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10740
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11292
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11332
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11408
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11468
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11528
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11576
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11632
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11700
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11744
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11816
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11876
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11920
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11992
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:12036
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:12112
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:12148
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:12224
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:12276
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3224
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11380
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11392
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11432
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11496
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11540
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11652
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11756
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11776
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11852
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11884
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11948
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:12100
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:12168
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:12200
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:12256
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4720
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9752
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11524
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11504
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11568
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11624
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11648
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11716
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:11988
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:12052
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:12008
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:12092
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:12244

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Windows 7 deprecation

Loading Replay Monitor...