e5199ff772acae6f675442bfa6b39a2f2ee2e30b4d244b0b0a602605daaa14a8

Analysis

max time kernel
150s
max time network
120s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
09/10/2024, 05:04

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe
Size

91KB
MD5

2b587c3aaae5365a989eb2cfc05dc9be
SHA1

2717741cbb687d95b97dba597df73e3d6a21b18e
SHA256

e5199ff772acae6f675442bfa6b39a2f2ee2e30b4d244b0b0a602605daaa14a8
SHA512

ec637ce0dea2ef92bb0cdf1bbec09e86c5f51a634ff6057737e9ce7beb57d087f1ecbbe777c012043431a24a38212fd48023bab4758db9dbf98fd47fa1b83b74
SSDEEP

1536:s3sBnEkkxaL2X6JiS4C3vqX6Fcjl+eZyTUQNAsLkMxCgWxEukm8UQvN:scBEkkEyXr/X6FigeuZiSkMxt5

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 64 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Process not Found
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Process not Found
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Process not Found
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Process not Found
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Process not Found
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Process not Found
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Process not Found
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Process not Found
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Process not Found
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Process not Found
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Process not Found
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Process not Found
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Process not Found
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Process not Found
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Process not Found
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe

Kills process with taskkill 64 IoCs

evasion

pid	Process
1924	taskkill.exe
3392	taskkill.exe
4380	taskkill.exe
6588	taskkill.exe
8908	taskkill.exe
11012	Process not Found
112	taskkill.exe
3708	taskkill.exe
5412	taskkill.exe
9140	taskkill.exe
9152	taskkill.exe
11580	Process not Found
3116	taskkill.exe
6960	taskkill.exe
7176	taskkill.exe
9464	Process not Found
10720	Process not Found
10424	Process not Found
6916	taskkill.exe
4864	taskkill.exe
6408	taskkill.exe
10972	Process not Found
11408	Process not Found
11300	Process not Found
1164	taskkill.exe
6228	taskkill.exe
7860	taskkill.exe
7216	taskkill.exe
12256	Process not Found
11988	Process not Found
11900	Process not Found
10188	Process not Found
2280	taskkill.exe
4164	taskkill.exe
5740	taskkill.exe
2172	taskkill.exe
6348	taskkill.exe
8808	taskkill.exe
9352	Process not Found
6160	taskkill.exe
7064	taskkill.exe
8544	taskkill.exe
11688	Process not Found
12244	Process not Found
12820	Process not Found
10492	Process not Found
3196	taskkill.exe
4492	taskkill.exe
5696	taskkill.exe
5868	taskkill.exe
7912	taskkill.exe
8532	taskkill.exe
9440	Process not Found
11288	Process not Found
5164	taskkill.exe
9104	taskkill.exe
9808	Process not Found
12180	Process not Found
12404	Process not Found
11096	Process not Found
2816	taskkill.exe
3624	taskkill.exe
4412	taskkill.exe
7708	taskkill.exe

Modifies Control Panel 1 IoCs

evasion

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Control Panel\Desktop\ScreenSaveActive = "0"	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeDebugPrivilege	2092	taskkill.exe
Token: SeDebugPrivilege	2040	taskkill.exe
Token: SeDebugPrivilege	2060	taskkill.exe
Token: SeDebugPrivilege	2996	taskkill.exe
Token: SeDebugPrivilege	2916	taskkill.exe
Token: SeDebugPrivilege	2660	taskkill.exe
Token: SeDebugPrivilege	2804	taskkill.exe
Token: SeDebugPrivilege	2648	taskkill.exe
Token: SeDebugPrivilege	568	taskkill.exe
Token: SeDebugPrivilege	756	taskkill.exe
Token: SeDebugPrivilege	2260	taskkill.exe
Token: SeDebugPrivilege	2852	taskkill.exe
Token: SeDebugPrivilege	2988	taskkill.exe
Token: SeDebugPrivilege	2832	taskkill.exe
Token: SeDebugPrivilege	2036	taskkill.exe
Token: SeDebugPrivilege	980	taskkill.exe
Token: SeDebugPrivilege	848	taskkill.exe
Token: SeDebugPrivilege	1524	taskkill.exe
Token: SeDebugPrivilege	2184	taskkill.exe
Token: SeDebugPrivilege	1080	taskkill.exe
Token: SeDebugPrivilege	1500	taskkill.exe
Token: SeDebugPrivilege	1868	taskkill.exe
Token: SeDebugPrivilege	1948	taskkill.exe
Token: SeDebugPrivilege	752	taskkill.exe
Token: SeDebugPrivilege	1952	taskkill.exe
Token: SeDebugPrivilege	2540	taskkill.exe
Token: SeDebugPrivilege	2980	taskkill.exe
Token: SeDebugPrivilege	2508	taskkill.exe
Token: SeDebugPrivilege	1760	taskkill.exe
Token: SeDebugPrivilege	2588	taskkill.exe
Token: SeDebugPrivilege	1692	taskkill.exe
Token: SeDebugPrivilege	2444	taskkill.exe
Token: SeDebugPrivilege	2900	taskkill.exe
Token: SeDebugPrivilege	2784	taskkill.exe
Token: SeDebugPrivilege	2280	taskkill.exe
Token: SeDebugPrivilege	2816	taskkill.exe
Token: SeDebugPrivilege	584	taskkill.exe
Token: SeDebugPrivilege	2704	taskkill.exe
Token: SeDebugPrivilege	644	taskkill.exe
Token: SeDebugPrivilege	2820	taskkill.exe
Token: SeDebugPrivilege	2972	taskkill.exe
Token: SeDebugPrivilege	112	taskkill.exe
Token: SeDebugPrivilege	1276	taskkill.exe
Token: SeDebugPrivilege	1284	taskkill.exe
Token: SeDebugPrivilege	2072	taskkill.exe
Token: SeDebugPrivilege	444	taskkill.exe
Token: SeDebugPrivilege	328	taskkill.exe
Token: SeDebugPrivilege	1924	taskkill.exe
Token: SeDebugPrivilege	1820	taskkill.exe
Token: SeDebugPrivilege	1772	taskkill.exe
Token: SeDebugPrivilege	2340	taskkill.exe
Token: SeDebugPrivilege	2300	taskkill.exe
Token: SeDebugPrivilege	276	taskkill.exe
Token: SeDebugPrivilege	1300	taskkill.exe
Token: SeDebugPrivilege	2452	taskkill.exe
Token: SeDebugPrivilege	2008	taskkill.exe
Token: SeDebugPrivilege	2792	taskkill.exe
Token: SeDebugPrivilege	2084	taskkill.exe
Token: SeDebugPrivilege	2928	taskkill.exe
Token: SeDebugPrivilege	2748	taskkill.exe
Token: SeDebugPrivilege	676	taskkill.exe
Token: SeDebugPrivilege	1660	taskkill.exe
Token: SeDebugPrivilege	2868	taskkill.exe
Token: SeDebugPrivilege	3068	taskkill.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe
2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2568 wrote to memory of 2092	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	30
PID 2568 wrote to memory of 2092	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	30
PID 2568 wrote to memory of 2092	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	30
PID 2568 wrote to memory of 2092	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	30
PID 2568 wrote to memory of 2040	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	32
PID 2568 wrote to memory of 2040	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	32
PID 2568 wrote to memory of 2040	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	32
PID 2568 wrote to memory of 2040	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	32
PID 2568 wrote to memory of 2060	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	35
PID 2568 wrote to memory of 2060	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	35
PID 2568 wrote to memory of 2060	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	35
PID 2568 wrote to memory of 2060	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	35
PID 2568 wrote to memory of 2996	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	37
PID 2568 wrote to memory of 2996	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	37
PID 2568 wrote to memory of 2996	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	37
PID 2568 wrote to memory of 2996	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	37
PID 2568 wrote to memory of 2916	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	39
PID 2568 wrote to memory of 2916	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	39
PID 2568 wrote to memory of 2916	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	39
PID 2568 wrote to memory of 2916	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	39
PID 2568 wrote to memory of 2660	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	41
PID 2568 wrote to memory of 2660	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	41
PID 2568 wrote to memory of 2660	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	41
PID 2568 wrote to memory of 2660	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	41
PID 2568 wrote to memory of 2804	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	43
PID 2568 wrote to memory of 2804	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	43
PID 2568 wrote to memory of 2804	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	43
PID 2568 wrote to memory of 2804	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	43
PID 2568 wrote to memory of 2648	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	45
PID 2568 wrote to memory of 2648	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	45
PID 2568 wrote to memory of 2648	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	45
PID 2568 wrote to memory of 2648	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	45
PID 2568 wrote to memory of 568	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	47
PID 2568 wrote to memory of 568	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	47
PID 2568 wrote to memory of 568	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	47
PID 2568 wrote to memory of 568	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	47
PID 2568 wrote to memory of 756	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	49
PID 2568 wrote to memory of 756	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	49
PID 2568 wrote to memory of 756	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	49
PID 2568 wrote to memory of 756	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	49
PID 2568 wrote to memory of 2260	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	51
PID 2568 wrote to memory of 2260	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	51
PID 2568 wrote to memory of 2260	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	51
PID 2568 wrote to memory of 2260	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	51
PID 2568 wrote to memory of 2852	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	53
PID 2568 wrote to memory of 2852	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	53
PID 2568 wrote to memory of 2852	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	53
PID 2568 wrote to memory of 2852	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	53
PID 2568 wrote to memory of 2988	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	55
PID 2568 wrote to memory of 2988	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	55
PID 2568 wrote to memory of 2988	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	55
PID 2568 wrote to memory of 2988	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	55
PID 2568 wrote to memory of 2832	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	57
PID 2568 wrote to memory of 2832	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	57
PID 2568 wrote to memory of 2832	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	57
PID 2568 wrote to memory of 2832	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	57
PID 2568 wrote to memory of 2036	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	59
PID 2568 wrote to memory of 2036	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	59
PID 2568 wrote to memory of 2036	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	59
PID 2568 wrote to memory of 2036	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	59
PID 2568 wrote to memory of 980	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	61
PID 2568 wrote to memory of 980	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	61
PID 2568 wrote to memory of 980	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	61
PID 2568 wrote to memory of 980	2568	2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe	61

C:\Users\Admin\AppData\Local\Temp\2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\2b587c3aaae5365a989eb2cfc05dc9be_JaffaCakes118.exe"
1⤵
- Modifies Control Panel
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2568
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:2092
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:2040
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:2060
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:2996
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:2916
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  - Suspicious use of AdjustPrivilegeToken
  PID:2660
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:2804
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:2648
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:568
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:756
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:2260
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:2852
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:2988
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:2832
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:2036
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:980
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:848
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:1524
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:2184
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:1080
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:1500
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:1868
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:1948
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:752
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:1952
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:2540
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:2980
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:2508
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:1760
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:2588
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:1692
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:2444
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:2900
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:2784
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  - Suspicious use of AdjustPrivilegeToken
  PID:2280
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  - Suspicious use of AdjustPrivilegeToken
  PID:2816
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:584
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:2704
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:644
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:2820
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:2972
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  - Suspicious use of AdjustPrivilegeToken
  PID:112
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:1276
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:1284
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:2072
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:444
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  - Suspicious use of AdjustPrivilegeToken
  PID:328
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  - Suspicious use of AdjustPrivilegeToken
  PID:1924
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:1820
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:1772
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:2340
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:2300
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:276
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:1300
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:2452
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:2008
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:2792
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:2084
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:2928
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:2748
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:676
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:1660
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:2868
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:3068
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1584
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:844
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:2392
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:680
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:964
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1968
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2104
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1672
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2076
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1992
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1572
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2896
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2932
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2688
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1484
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3056
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2860
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3064
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:1916
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2456
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2120
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1372
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:308
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:888
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:572
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1984
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1652
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1100
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2884
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:2676
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2848
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1192
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1860
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1920
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2400
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2080
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:876
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1780
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2584
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1568
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2904
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2276
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2656
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2708
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:1260
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:832
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3032
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:404
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:904
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:580
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1148
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:1988
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2640
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3044
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:336
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:524
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1252
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2380
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1048
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2500
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:996
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2644
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2692
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2208
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1384
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1312
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1980
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1752
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2020
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1480
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3060
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2244
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2124
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:700
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2232
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2464
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2312
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2176
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1928
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2320
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2912
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:1164
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2936
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2200
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1784
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1832
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1032
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3028
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1352
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2404
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2132
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2612
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2192
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2468
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2600
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:2836
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2180
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2768
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1580
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2752
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1128
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1964
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1360
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3104
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3156
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:3196
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3252
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3300
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3340
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3384
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3432
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3484
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3532
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3576
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3616
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3668
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3720
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3768
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3812
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3852
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3912
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:3952
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3996
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4044
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4088
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3076
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3124
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3224
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3232
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3336
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3368
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:3392
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3440
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3516
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3588
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3652
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3696
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3728
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3824
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3900
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3936
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3984
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4004
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3080
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3092
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3180
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3244
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3276
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3308
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3456
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:3528
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3564
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3592
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3688
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3800
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3832
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3868
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3920
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4016
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2636
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3208
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3264
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3268
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3400
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3636
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3540
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3692
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3604
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3736
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3880
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3928
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4028
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4052
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2316
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3332
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3248
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3428
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3572
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3764
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:3708
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3972
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4020
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4032
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2272
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:3272
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:3320
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3464
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3420
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3760
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3844
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3924
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4064
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2700
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3472
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3504
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3416
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3712
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3940
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3888
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3096
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4060
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3408
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3316
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3948
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2432
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3212
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3088
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3608
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3840
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3648
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3148
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:3444
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3556
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:3624
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3128
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3500
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1548
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1540
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3164
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3168
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3664
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3808
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3348
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3376
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3640
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3084
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3716
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3656
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3132
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3960
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4128
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4172
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4228
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:4272
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4316
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4360
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:4404
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4460
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4508
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4548
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4592
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4644
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4696
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4740
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4784
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4828
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4888
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4928
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4972
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5016
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5064
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5116
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:4120
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4152
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4196
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4256
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4352
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:4384
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4424
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:4492
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4516
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4636
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4708
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4720
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4748
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4792
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4924
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4948
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4996
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5040
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5084
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4136
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4212
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4268
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4312
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4340
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4504
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4540
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4584
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4652
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4836
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4880
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4840
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4912
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5032
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5096
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3600
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4112
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4252
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4292
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4500
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4480
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4560
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4568
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4752
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:4900
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4936
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4956
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5060
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5076
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4308
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4300
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4396
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4468
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4632
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4672
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4796
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4852
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4868
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:3116
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4160
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4208
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4348
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4372
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4628
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4820
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4964
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5008
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3192
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3560
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:4412
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:4380
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4588
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4668
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:5048
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:4952
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4328
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4260
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4440
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4692
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:4724
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4812
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5052
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4224
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4304
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4704
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:4164
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5012
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4732
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4604
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4984
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4248
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4420
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4388
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4772
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4296
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4496
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4764
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4660
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4476
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4452
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4428
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4616
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4148
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4140
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5036
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5136
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:5164
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5236
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5268
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5316
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5368
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:5400
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5464
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5504
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5556
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5592
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5656
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:5696
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5732
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5788
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5824
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:5892
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5920
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5968
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6008
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6068
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6116
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5148
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3152
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5264
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5280
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5304
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5352
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5384
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5524
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5548
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5588
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5636
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5668
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5816
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5880
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5856
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5912
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6064
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6036
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6140
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5128
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5124
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5308
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5356
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5344
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5516
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6112
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5640
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5628
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5680
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5720
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5580
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5800
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5956
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6016
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6132
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5200
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:4332
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5176
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5428
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5480
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5572
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5692
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5648
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:5740
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5900
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5952
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6084
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6124
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5132
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:5244
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:5412
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5388
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5436
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:5028
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5704
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5296
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5932
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3480
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6056
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5188
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5332
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5444
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:5616
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5528
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5852
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5936
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6044
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:5212
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5256
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5360
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5496
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5544
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5748
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5908
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6080
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5276
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5324
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5876
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:5604
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5472
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5820
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5976
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5156
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5568
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5728
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:5868
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6052
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5664
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5784
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5760
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:4864
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5144
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5988
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5300
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5752
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5520
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5224
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5584
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5488
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6004
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5220
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5288
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5964
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6032
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5860
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5708
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6180
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:6228
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6260
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6312
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6364
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  - Kills process with taskkill
  PID:6408
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6460
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6492
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6560
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6604
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6656
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6700
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6748
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6792
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6844
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6876
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6932
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6964
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7020
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7080
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7124
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6148
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:6160
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6208
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:6244
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6292
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6352
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6372
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6540
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6500
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6576
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6712
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6664
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6768
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6812
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6872
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:6916
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7016
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7104
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7096
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7160
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6220
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6252
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6384
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6320
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6532
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6524
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6648
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6620
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6688
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:6820
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6860
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7036
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6952
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7056
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7152
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6204
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6296
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6276
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6360
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6536
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6584
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6740
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:6588
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6728
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6912
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:7064
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7052
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:6176
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6192
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6000
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6344
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6444
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:6424
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2052
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2352
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6784
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6804
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6944
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7076
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7044
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6336
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6240
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6440
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6428
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1740
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6708
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6904
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:6960
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7000
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7112
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6224
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6556
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6432
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1792
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6484
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:928
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6948
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7156
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7092
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6404
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6332
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6852
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6580
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:2172
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6592
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6172
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2968
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6600
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6480
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1596
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6572
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7120
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6340
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6380
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6304
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:636
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6512
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6188
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5284
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6612
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6924
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2160
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6636
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6448
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:944
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2228
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1956
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6416
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:6348
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6908
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2024
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5652
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5832
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6832
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6548
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7108
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:6272
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:5960
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6732
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7148
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7208
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7252
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7296
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7344
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:7400
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7444
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7488
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7532
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7576
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7628
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7676
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7720
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7764
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7808
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7864
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:7912
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7956
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8000
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8044
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8100
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8140
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8184
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7196
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7248
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7260
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7320
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7412
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7476
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7508
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7540
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7600
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7688
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7752
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7792
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7840
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7872
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7968
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8036
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8084
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8124
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6788
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7220
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7308
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7316
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7376
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7520
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7572
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7596
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7644
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7804
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7836
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7896
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7928
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:8028
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8024
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6992
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7184
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7188
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7284
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7408
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7548
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7564
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7712
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:7708
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7856
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7972
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7984
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8092
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8180
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6980
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7384
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7368
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7456
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7624
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7608
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7796
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:7860
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7920
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8080
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7892
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7312
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7340
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7388
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7556
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7336
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7876
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7944
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8020
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8108
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7272
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7516
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7648
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7616
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7612
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8040
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6616
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:7180
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7692
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7544
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7592
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7976
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7844
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8136
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:7176
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:7216
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7888
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8068
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8148
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7992
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7828
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:7820
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8164
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7668
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7268
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7904
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7172
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7424
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7652
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7144
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7468
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8172
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8052
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7464
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7360
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8120
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7232
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:6928
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:2436
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7280
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8200
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8248
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8300
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8344
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8388
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8432
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8492
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8536
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8580
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8624
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8664
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8728
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8776
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8820
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8864
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:8908
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8964
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9008
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9052
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9096
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:9140
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9196
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7852
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8256
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8312
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8384
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8416
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8448
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8512
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7484
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8656
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8704
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8752
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8804
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8876
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8952
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8988
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9032
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9072
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:9152
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7700
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8208
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8292
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8336
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8360
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8508
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8560
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8608
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8712
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8768
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8852
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8872
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8976
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9048
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9092
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:7780
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9204
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8296
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8280
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8464
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8552
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8588
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8216
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:8808
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8800
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:8884
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8928
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9064
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:9104
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8284
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8324
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8428
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8520
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8596
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8696
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8848
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8888
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8992
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9116
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8244
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:7696
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8352
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8444
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8620
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8772
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8736
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8892
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:1144
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:9148
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9176
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8420
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8548
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8652
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8688
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9076
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:9188
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8340
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8316
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8484
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8832
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8880
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8212
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9024
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8008
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8516
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8896
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9208
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:3684
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8400
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:8532
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9000
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8744
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8524
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:8648
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8576
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8460
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - Kills process with taskkill
  PID:8544
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8676
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8228
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8480
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9080
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8836
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9128
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9004
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9120
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8288
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8616
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9112
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8404
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9252
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9296
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9340
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9392
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9444
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9488
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9532
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9576
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9628
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9680
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9724
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9764
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9812
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9864
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:9912
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9952
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10000
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10044
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:10100
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10144
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10192
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10236
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9268
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9284
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9308
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9416
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9456
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9528
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9560
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9584
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9644
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9760
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9792
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9840
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9924
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9988
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10036
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10076
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10128
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10156
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8844
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:9288
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:9360
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9380
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9452
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10152
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9600
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9672
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9732
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9848
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9896
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9932
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10012
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10080
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10140
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9220
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9260
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9240
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9364
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9544
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9508
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9540
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9696
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9828
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  - System Location Discovery: System Language Discovery
  PID:9920
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9976
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10056
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:10112
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:8700
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9228
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9480
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9512
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9460
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9712
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9856
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /F /IM taskmgr.exe
  2⤵
  PID:9904

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2568-5-0x0000000001110000-0x000000000112E000-memory.dmp

Filesize
120KB

Download
memory/2568-3-0x00000000002B0000-0x00000000002B1000-memory.dmp

Filesize
4KB

Download
memory/2568-2-0x0000000001110000-0x000000000112A000-memory.dmp

Filesize
104KB

Download
memory/2568-1-0x0000000000200000-0x0000000000209000-memory.dmp

Filesize
36KB

Download
memory/2568-0-0x0000000000290000-0x00000000002A2000-memory.dmp

Filesize
72KB

Download
memory/2568-9-0x0000000001110000-0x000000000112E000-memory.dmp

Filesize
120KB

Download
memory/2568-55-0x0000000001110000-0x000000000112A000-memory.dmp

Filesize
104KB

Download